Skip to content
TAA

Privacy Policy

Last updated: October 2026.

1. Controller

DigitalFreedom Global LLC
30 N Gould St, Ste N
Sheridan, WY 82801
United States

Data protection contact: data-protection@digitalfreedom.co.za

2. Hosting (GitHub Pages)

This site is served by GitHub Pages (GitHub Inc., 88 Colin P Kelly Jr Street, San Francisco, CA 94107, USA). Technical connection data (IP, user agent, timestamp, requested URL) is processed when the site is requested. GitHub is certified under the EU-US Data Privacy Framework. Legal basis: Art. 6 (1) (f) GDPR (legitimate interest in secure provision of the website). Retention: per GitHub's policies, typically a few weeks.

3. Cookies and analytics (Google Analytics 4)

This site uses Google Analytics 4 (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) to measure aggregated usage of the site (pages viewed, traffic sources, device categories). Once loaded, Google Analytics sets cookies and transfers data to Google. According to Google, Google Analytics 4 does not log or store IP addresses.

Google Analytics is only loaded after you consent. Until you click "Accept" in the cookie banner, your browser does not request the Google Analytics script, no cookies are set and no data, not even cookieless pings, is sent to Google. If you click "Decline", Google Analytics is not loaded at all. Advertising storage categories (ad_storage, ad_user_data, ad_personalization) stay disabled even after consent. Legal basis: Art. 6 (1) (a) GDPR (consent) and § 25 (1) TDDDG. You can withdraw consent at any time via "Cookie settings" in the footer; Google Analytics then stops measuring, its cookies are deleted and it is no longer loaded. The lawfulness of processing before the withdrawal remains unaffected.

Apart from Google Analytics this site itself sets no cookies; for the cookies Cal.com sets on cal.com once you load the booking calendar, see section 4. Theme preference (light/dark), your consent decision and, after you load the booking calendar, that click (section 4) are stored only in your browser's localStorage and never transmitted to a server.

4. Booking a consultation (Cal.com)

To schedule a consultation call we embed the booking tool Cal.com (Cal.com, Inc., USA). The calendar is only loaded after you click "Show open slots" on the booking panel. Accepting analytics in the cookie banner does not load it. When the calendar loads, its script is fetched from Cal.com's servers, which process your IP address and technical connection data. When the calendar loads, Cal.com sets its own technically necessary cookies on cal.com, for example __cf_bm (bot protection by Cloudflare, Cal.com's content delivery network, valid for about 30 minutes). Before you click, neither Cal.com nor Cloudflare sets a cookie. Your click is stored in your browser's localStorage (cal-consent), so the calendar loads directly on later visits. When you book an appointment you provide your name, email address, the chosen time and time zone and, optionally, your topic, your company and notes, used solely to arrange and confirm the appointment.

Legal basis: for loading the calendar, your consent by clicking (Art. 6 (1) (a) GDPR and § 25 (1) TDDDG); for the booking itself, Art. 6 (1) (b) GDPR (measures taken at your request prior to a contract). You can withdraw your consent at any time by deleting this website's stored data in your browser; the lawfulness of processing before the withdrawal remains unaffected. Cal.com processes the booking data on our behalf under the data processing agreement concluded with the account; transfers to the USA take place under the EU-US Data Privacy Framework. Details are set out in Cal.com's privacy policy at cal.com/privacy. You can also simply email hello@digitalfreedom.co.za instead of using the calendar.

Some pages also offer a direct link to a short Cal.com appointment for urgent cases (“Urgent? Book a 15-minute call”). It is a plain link: nothing is loaded from Cal.com before you click it. The click opens cal.com in a new tab, where Cal.com's privacy policy applies; for the booking itself the same applies as above.

5. Contact by email

If you email us, we process your message and your contact details to answer the enquiry. Legal basis: Art. 6 (1) (b) GDPR where the enquiry concerns a contract, otherwise Art. 6 (1) (f) GDPR (legitimate interest in answering it). Our email is hosted by Migadu, a provider in Switzerland, on servers in France, that is, in the EU. Switzerland is covered by an adequacy decision of the European Commission under Art. 45 GDPR. Every service provider, with location and contractual basis, is listed in the overview “Where our data lives” on digitalfreedom.co.za.

6. Fonts

We use the "Geist" font hosted locally. No data is sent to third-party font providers (e.g. Google Fonts).

7. Embedded third-party content

Apple iTunes / App Store: App icons and metadata (name, description, version, ratings) are fetched at build time from the public iTunes Lookup API and embedded statically. The icons are downloaded at build time as well and served from this website, so your browser makes no connection to Apple when you view the page.

GitHub: The open-source section is fetched at build time from the public GitHub API and embedded statically. In normal operation no live data is pulled from GitHub when you load the site. Clicking a GitHub link forwards you to github.com, where GitHub's privacy notice applies.

8. Server logs

GitHub Pages logs technical connection data on every request (IP, timestamp, URL, user agent, referrer). We have no direct access to these logs; GitHub keeps them for security and operations purposes. Legal basis: Art. 6 (1) (f) GDPR.

9. International transfers

The controller is established outside the EEA. Where we process personal data of users in the EEA ourselves, that processing takes place outside the EEA; we apply the GDPR standard to it as a global baseline. Where a service provider processes data, the location depends on that provider, as set out per provider below and in sections 2 to 7.

Transfers to the United States (GitHub, Google, and Cal.com when you use the booking calendar) take place under the EU-US Data Privacy Framework (Commission decision of 10 July 2023); for Cal.com, the data processing agreement applies in addition. Email is hosted by Migadu (Switzerland, servers in France); Switzerland is covered by an adequacy decision under Art. 45 GDPR. Transfers within the EU (Google Ireland) take place without restrictions.

10. Retention (summary)

  • Server logs (GitHub): per GitHub's policies, typically a few weeks
  • Booking data (Cal.com): for as long as needed to arrange and follow up the appointment; details per Cal.com's privacy policy
  • Email inquiries (Migadu): until the inquiry is handled, then six months for follow-up
  • Google Analytics: 14 months (default retention period for user and event data)
  • Theme preference and consent decision (localStorage): until you delete it; lives only in your browser

11. Your rights

You have the right to information (Art. 15 GDPR), rectification (Art. 16), deletion (Art. 17), restriction (Art. 18), data portability (Art. 20), and objection (Art. 21). You can withdraw any consent at any time, the lawfulness of processing before the withdrawal remains unaffected.

Requests to: data-protection@digitalfreedom.co.za

12. Right to complain

You have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). As the controller has no establishment in the Union, the one-stop-shop mechanism under Art. 56 GDPR does not apply and there is no lead supervisory authority. Please address your complaint to the supervisory authority of your habitual residence, your place of work, or the place of the alleged infringement.

13. Data Protection Officer

A DPO has not been appointed, the controller does not meet the threshold criteria for mandatory appointment under Art. 37 GDPR / § 38 BDSG.