Effective 25 August 2026
Fosker Media (“we,” “our,” or “us”) is a digital agency in Durban, South Africa. This policy explains how we collect, use, share and look after personal information when you use foskermedia.com (the “Site”).
We process personal information under the Protection of Personal Information Act 4 of 2013 (POPIA) and, where it applies, the UK and EU GDPR. If you do not agree with this policy, please do not use the Site.
More detail: POPI / POPIA policy and GDPR policy.
Who is responsible
Fosker Media is the responsible party for personal information collected through the Site.
Email: [email protected]
Phone: +27 (0)72 516 7115
Durban, South Africa
What we collect
We collect information you give us, and a small amount of technical information that the Site needs in order to run.
- Enquiries. If you use the contact or booking forms: name, email address, phone number, project type, budget range, and your message.
- Campaign context. If you arrive from an ad or a shared link, we may pass through UTM fields (source, medium, campaign) with the enquiry so we know which page or campaign it came from.
- Session. A session cookie so logged-in and form submissions can be checked for CSRF. We also generate a Linkssi session id on the contact form so an enquiry can be matched to a visit in our CRM.
- Abuse prevention. IP address and a hashed identifier are used to rate-limit forms and login-style pages, so the Site is not used to spam us.
- Server logs. Our host and CDN may log IP address, browser, requested URL and time, for security and to keep the Site up.
- Analytics. Google Analytics 4 records page views and basic device/browser data so we can see which pages are used. Google may also set its own cookies.
We do not ask for card numbers on this Site. Hosting and other invoices are paid through PayFast when that applies to a client agreement.
Why we use it
- To reply to enquiries and book calls.
- To run the Site, keep forms working, and stop abuse.
- To keep a record of work we have quoted or done, where we have a client relationship.
- To meet accounting, tax and other legal duties.
- To understand which pages on the Site are used, via Google Analytics.
The legal bases we rely on are: your consent when you submit a form; performance of a contract (or steps before a contract) when you ask us to quote or we already work with you; and legitimate interests in running and securing the Site and understanding which pages are used, balanced against your rights.
Who we share it with
We do not sell your personal information. We share it only with people who need it to do the job:
- Linkssi. Enquiries from the Site are sent to our CRM at linkssi.com. The Site also loads Linkssi’s embed script for bookings and related tools.
- Hosting. The Site is hosted in South Africa. Our host stores the files and, when configured, a database of leads.
- Cloudflare. Traffic to the Site goes through Cloudflare for CDN, TLS and abuse protection.
- Google Analytics. The Site loads Google’s gtag on public pages (measurement id G-NF3L5JZM4T). Google processes that data under its own terms. We do not send form messages or passwords to Analytics.
- Email. If the CRM is unavailable, we may email the enquiry to [email protected].
- PayFast. If you pay us for hosting or other billed work, payment data is handled by PayFast, not stored as full card numbers on this Site.
Those providers process information on our instructions, or as their own responsible parties for payment and infrastructure. We are not responsible for the privacy practices of other websites we link to.
Cookies
We use a session cookie so forms can be submitted safely. Linkssi’s embed may set its own cookies or storage for bookings and session matching. Cloudflare may set cookies used for security. Google Analytics may set cookies (typically _ga and related) to distinguish visits. You can block cookies in your browser; the Site and forms may then fail to submit, and Analytics will not record the visit.
This Site loads Google Analytics 4 on public pages. It does not load Meta Pixel or LinkedIn Insight. The blog admin at /admin/ does not load Analytics.
How long we keep it
Enquiry records are kept for as long as we need them to reply, to do the work, and to meet legal retention rules — typically up to seven years for tax records where an invoice followed. Rate-limit data is short-lived. Server logs follow our host and CDN defaults.
If you ask us to delete an enquiry and we have no legal reason to keep it, we will delete or anonymise it from our active systems. Backup copies may take a while to age out.
Your rights
You may request access to the personal information we hold about you, ask us to correct it, object to certain processing, or ask us to delete it where we have no lawful reason to keep it. You may also withdraw consent for marketing at any time — we do not add Site visitors to a newsletter unless you ask.
South African rights are set out in the POPI / POPIA policy. UK and EEA rights are set out in the GDPR policy.
Email [email protected]. We may need to confirm it is you before we change or delete a record.
You can complain to the Information Regulator (South Africa) if you are not satisfied with how we handle your information: inforegulator.org.za.
Children
The Site is for business use. We do not knowingly collect personal information from children under 18. If you believe we have, contact us and we will delete it.
Security
We use HTTPS, session cookies with HttpOnly and SameSite, CSRF checks on forms, rate limits, and access controls on the server. No internet transmission is guaranteed. Do not send passwords or card numbers through the contact form.
Changes
We may update this policy when the Site or the law changes. The effective date at the top will change. Continued use of the Site after that date is acceptance of the updated policy.
Contact
Questions about this policy: [email protected].