who we are portfolio AI Content Production branding digital pr Copyright 2026 Y Breakfast Studio ecommerce

Privacy Policy

Last updated: May 2026

Y Breakfast Studio is the trading name of Universal Nexus (Pty) Ltd, a company registered in South Africa.

Y Breakfast Studio (“we”, “us”, “our”) is committed to protecting your personal information and processing it lawfully and responsibly. This Privacy Policy explains how we collect, use, store, and protect your data when you visit ybreakfaststudio.com or engage our services — in accordance with the Protection of Personal Information Act (POPIA), 4 of 2013, and, where applicable, the EU General Data Protection Regulation (GDPR).

1. Who We Are

Y Breakfast Studio is a branding, digital PR, AI content production, and web design and development studio registered and operating in South Africa.

Under POPIA, the Responsible Party is the person or organisation that determines the purpose and means of processing personal information. Y Breakfast Studio is the Responsible Party in respect of all personal information collected through this website and in the course of our services.

Mailing Address: PostNet Suite 19, Private Bag X9, Melville, Johannesburg, South Africa, 2109

Email: hello@ybreakfaststudio.com Phone: +27 (0) 64 982 4645

2. Our Services

Y Breakfast Studio provides the following services, in the course of which we may collect and process personal information:

  • Branding and brand strategy
  • Digital public relations (PR)
  • AI content production and strategy
  • Web design and development
  • Related creative and digital consulting

Personal information is collected only to the extent necessary to deliver these services effectively and in compliance with POPIA.

3. What Information We Collect

We may collect the following categories of personal information:

  • Contact details — name, email address, phone number
  • Business information — company name, industry, and project details shared during enquiries
  • Usage data — pages visited, time on site, browser type, and IP address (collected via Google Analytics)
  • Communication records — emails, contact form submissions, and messages sent to us

We do not collect special personal information (as defined under POPIA) unless you voluntarily provide it and we have a lawful basis to process it.

4. How We Collect Your Information

We collect personal information through:

  • Enquiry and contact forms on our website
  • Direct communication via email, phone, or social media
  • Cookies and analytics tools — we use Google Analytics and CookieYes to understand how visitors use our site. You can manage your cookie preferences via the consent banner on our site.

5. Why We Use Your Information

We process personal information only for specific, explicitly defined, and lawful purposes. These include:

  • Responding to enquiries and providing requested services
  • Managing client engagements and delivering project work
  • Sending service-related communications
  • Improving our website and user experience
  • Complying with legal and regulatory obligations

We do not sell, rent, or trade your personal information to third parties.

6. Lawful Basis for Processing

South African Data Subjects — POPIA

For all data subjects in South Africa, we process personal information in accordance with the eight conditions for lawful processing under POPIA:

  • Accountability — we take responsibility for all personal information in our possession
  • Processing limitation — we collect only what is adequate, relevant, and not excessive for the stated purpose
  • Purpose specification — personal information is collected for a specific, defined, and lawful purpose
  • Further processing limitation — we do not process personal information in a manner incompatible with the original purpose
  • Information quality — we take reasonable steps to keep your information accurate and complete
  • Openness — we are transparent about how and why we process your information
  • Security safeguards — we implement appropriate technical and organisational measures to protect your data
  • Data subject participation — you may request access to, correction of, or deletion of your information at any time

EU/EEA Data Subjects — GDPR

Where personal data is processed in relation to individuals in the European Union or European Economic Area, we rely on the following lawful bases under the GDPR:

  • Contractual necessity — to deliver services you have engaged us for
  • Legitimate interests — to respond to enquiries and improve our services
  • Consent — for cookies and marketing communications where applicable

7. How Long We Keep Your Data

We retain personal information only for as long as is necessary for the purpose for which it was collected, and in accordance with applicable law:

  • Enquiry data — up to 12 months if no client engagement follows
  • Client project data — for the duration of the engagement, plus 5 years for legal and accounting purposes
  • Analytics data — as configured in Google Analytics (default: 14 months)

Once retention periods expire, personal information is securely deleted or de-identified.

8. Third-Party Services

We use the following third-party tools, which may process personal information on our behalf. Each provider operates under its own privacy policy and data processing terms:

  • Google Analytics — website usage analytics
  • CookieYes — cookie consent management
  • WordPress — website platform

We take steps to ensure that any third party processing personal information on our behalf does so in a manner consistent with POPIA.

9. International Data Transfers

Y Breakfast Studio works with international clients and partners. Where personal information is transferred outside South Africa, we take steps to ensure that the recipient country or organisation provides an adequate level of protection consistent with POPIA. Where applicable, we also apply GDPR-compliant safeguards, including standard contractual clauses.

10. Your Rights as a Data Subject

In terms of POPIA, and where applicable the GDPR, you have the right to:

  • Access — request confirmation of whether we hold your personal information and obtain a copy
  • Correction — request that inaccurate or incomplete information be corrected
  • Deletion — request the deletion of your personal information, subject to our legal retention obligations
  • Objection — object to or request restriction of certain types of processing
  • Withdraw consent — where processing is based on consent, you may withdraw it at any time without affecting prior lawful processing

To exercise any of these rights, please contact us at hello@ybreakfaststudio.com. We will respond within a reasonable time and in accordance with POPIA timelines.

11. Data Security

We implement appropriate technical and organisational security measures to protect your personal information against unauthorised access, disclosure, loss, or misuse. These measures are reviewed and updated as appropriate.

In the event of a data breach that poses a risk to your rights, we will notify the Information Regulator and, where required, affected data subjects, as mandated by POPIA.

Please note that no method of transmission over the internet is entirely secure. We cannot guarantee absolute security, but we are committed to protecting your information to the best of our ability.

12. Cookies

We use cookies to enhance your browsing experience and analyse site traffic. By using our website, you consent to our use of cookies in accordance with your selected preferences.

You can manage or withdraw your cookie consent at any time via the cookie consent banner on our website, or by adjusting your browser settings. For full details, see our cookie settings managed via CookieYes.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, services, or legal obligations. The “Last updated” date at the top of this page reflects the most recent revision.

Continued use of our website after changes are published constitutes acceptance of the updated policy. We encourage you to review this page periodically.

14. Contact & Complaints

For any privacy-related queries or to exercise your rights, please contact us:

Email: hello@ybreakfaststudio.com Phone: +27 (0) 64 982 4645 Mail: PostNet Suite 19, Private Bag X9, Melville, Johannesburg, South Africa, 2109

If you are a South African data subject and believe that your rights under POPIA have been infringed, you have the right to lodge a complaint with the Information Regulator of South Africa:

Website: www.justice.gov.za/inforeg Email: inforeg@justice.gov.za