Privacy Policy
Last updated: September 4, 2026
This policy explains how Friday Studios (Pty) Ltd trading as MattDerman.com ("MattDerman.com", "we", "us", or "our") collects, uses, shares, and protects personal information when you visit mattderman.com, contact us, join a newsletter, or request a resource.
Who we are
MattDerman.com is operated by Friday Studios (Pty) Ltd in Cape Town, South Africa. Questions or requests about this policy can be sent to [email protected].
Information we collect
Information you provide
Depending on how you use the site, you may provide:
- Your name, email address, company details, and the contents of a contact message.
- Your email address and optional first name when you join a newsletter or request a lead magnet.
- Your interests, preferences, or timezone when a particular form asks for them.
- Records showing what you agreed to, the wording and version of that consent, and when you submitted it.
- Any other information you choose to include in a message.
Please do not send confidential, highly sensitive, or urgent information through a public website form.
Information collected automatically
Our hosting, application, and security systems may record technical information such as your IP address, browser and device type, requested pages, timestamps, referring page, and errors. These records help deliver the site, prevent abuse, and diagnose faults.
When you arrive through a campaign link, the site may keep first-touch attribution such as the landing page, referring site, UTM parameters, or advertising click identifiers. Google Analytics is consent-gated and does not load unless you accept analytics.
Cookies and browser storage
The site uses browser storage and cookies that are needed to remember your choices and operate requested features. The consent system stores gtm_cookie_consent and analytics_consent for up to 365 days. If you decline analytics, that choice is stored so the site can respect it on later visits.
First-touch campaign attribution may be stored in your browser for up to 90 days and submitted with a form. You can remove cookies and browser storage through your browser settings, although doing so may cause the consent prompt to appear again.
How we use personal information
We use personal information to:
- Respond to enquiries and provide requested information or downloads.
- Manage newsletter subscriptions, double opt-in confirmation, unsubscribe requests, and suppression records.
- Keep a durable record of consent and campaign attribution.
- Operate, secure, troubleshoot, and improve the site.
- Understand aggregate site use after analytics consent.
- Meet legal obligations and establish, exercise, or defend legal claims.
We process information with your consent where consent is appropriate, to take steps you request, for legitimate operational and security purposes, and where the law requires or permits it. You may withdraw consent at any time, but withdrawal does not make earlier lawful processing unlawful.
Where information is stored and who helps us process it
Plunk stores newsletter contact, subscription, consent, and attribution records. We use service providers that process limited information on our behalf, including:
- Plunk for newsletter lists, double opt-in, automations, and marketing email delivery.
- Resend for contact and transactional email delivery.
- Hosting, monitoring, and security providers needed to operate the site.
- Google for analytics only after you accept analytics cookies.
We may also disclose information to professional advisers, regulators, law enforcement, or courts where reasonably necessary and legally permitted, or in connection with a genuine restructuring or transfer of the business. We do not sell personal information.
Some providers may process information outside South Africa. When information crosses borders, we take reasonable steps to use providers and safeguards that support an adequate level of protection as required by applicable law.
Retention
We keep personal information only for as long as it is reasonably needed for the purpose for which it was collected, to maintain consent or suppression records, to resolve disputes, or to meet legal and accounting requirements. Retention periods vary by record type. We delete or de-identify information when it is no longer needed, subject to lawful backup and recordkeeping requirements.
Security
We use reasonable technical and organisational safeguards designed to protect personal information. No internet transmission, service, or storage system is completely secure, so we cannot promise absolute security.
Your choices and rights
Subject to the Protection of Personal Information Act, 2013 (POPIA) and other applicable law, you may have the right to:
- Ask whether we hold personal information about you and request access to it.
- Ask us to correct, update, delete, or restrict personal information.
- Object to certain processing or withdraw consent.
- Unsubscribe using the link in a marketing email.
- Complain to South Africa's Information Regulator or another competent authority.
To exercise a right, email [email protected]. We may need to verify your identity and may retain information where the law requires or permits it.
Children
The site is not directed to children under 18, and we do not knowingly collect their personal information through newsletter, resource, or contact forms. If you believe a child has provided information, please contact us.
Third-party links
The site links to services and websites that we do not control. Their own privacy terms apply when you use them.
Changes to this policy
We may update this policy as the site or law changes. The date at the top shows when it was last revised. Material changes will be communicated where the law requires it.
Contact
Friday Studios (Pty) Ltd trading as MattDerman.com
Cape Town, South Africa
[email protected]