Effective date: 25 August 2026
Winner & Mash respects your privacy and is committed to handling personal information responsibly and in accordance with the Protection of Personal Information Act 4 of 2013 (POPIA) and other applicable South African law.
This Privacy Policy explains what information we collect through our website, why we collect it, how we use and protect it, and the choices available to you.
1. Who we are
Winner & Mash is a photography and film business operated by:
Winner and Mash (Pty) Ltd
Registration number: 2020/273906/07
Trading as: Winner & Mash
Johannesburg, South Africa
Website: winnerandmash.co.za
For privacy-related enquiries, requests or concerns, please contact:
Chris de Winnaar
hello@winnerandmash.co.za
2. Information we collect
When you use the Start a Project form, we may collect:
- Your name
- Company or practice
- Email address
- Phone number
- Project name
- Project location
- Project type
- Whether you require photography, film or related services
- Preferred shoot date or timeframe
- How you heard about Winner & Mash
- Information you provide in your project description
Only your name, email address and project description are currently required. Other fields are optional.
Please avoid including unnecessary sensitive personal information in your project description.
3. Why we use your information
We use information submitted through the website primarily to:
- Respond to your enquiry
- Understand your project and requirements
- Communicate with you about potential or confirmed work
- Prepare quotations or project information where appropriate
- Plan and provide requested photography or film services
- Maintain appropriate business and project records
- Protect the security and operation of our website
- Comply with applicable legal, accounting or regulatory obligations
We only process personal information where there is an appropriate purpose and lawful basis for doing so.
4. Project enquiries
Information submitted through the Start a Project form is sent to our Winner & Mash business email address.
The website does not currently create or store a separate copy of your enquiry as a WordPress form entry or marketing contact.
Your enquiry may subsequently form part of our ordinary business correspondence and records if we continue discussing or working on your project.
5. Marketing communications
Submitting a project enquiry does not automatically subscribe you to a newsletter or marketing list.
Winner & Mash does not currently transfer project enquiries into Brevo, Mailchimp or another email-marketing platform automatically.
If we introduce marketing communications in future, we will provide an appropriate opportunity to opt in where required.
You may unsubscribe from marketing communications at any time if such communications are introduced.
6. How long we keep information
We generally retain project enquiries and related correspondence for up to three years.
We may retain information for longer where reasonably necessary for:
- An active or ongoing project
- A client relationship
- Contractual obligations
- Accounting or tax requirements
- Establishing or protecting legal rights
- Resolving a dispute
- Compliance with applicable law
Information that is no longer reasonably required will be deleted, destroyed or de-identified where appropriate.
7. Website and server information
Like most websites, our hosting infrastructure may automatically record technical information when you visit the site.
This may include:
- IP address
- Date and time of access
- Pages or URLs requested
- Browser or device information
- HTTP request and response information
- Referring page
- Technical and security information
This information may be processed in ordinary server, security and error logs for purposes such as operating, maintaining and securing the website and diagnosing technical problems.
Winner & Mash is hosted using infrastructure provided through Truehost/cPanel.
8. Cookies and tracking
At the effective date of this policy, the public Winner & Mash website does not currently use identified analytics, advertising or behavioural tracking cookies.
Our audit found no active:
- Google Analytics
- Google Tag Manager
- Meta/Facebook Pixel
- TikTok Pixel
- Hotjar
- Microsoft Clarity
- LinkedIn Insight Tag
- Advertising trackers
The site also does not currently use a public newsletter tracking system.
WordPress may use necessary administrative cookies when authorised administrators log into the website. These are associated with website administration rather than ordinary public browsing.
If we introduce analytics, advertising technology, embedded services or other technologies that materially change how visitor information is processed, we will update this policy and implement appropriate consent mechanisms where required.
9. Third-party services
The public website currently serves its principal design assets, photographs, logo files, fonts, CSS and JavaScript locally.
It does not currently contain active public embeds from services such as YouTube, Vimeo, Google Maps or social-media feeds.
If third-party content is embedded in future, those providers may receive technical information when the content loads and may apply their own privacy policies and technologies.
Links to external websites or social-media profiles are governed by the privacy practices of those third parties once you leave the Winner & Mash website.
10. Sharing personal information
We do not sell your personal information.
We may share information where reasonably necessary with service providers that help us operate our business or website, or where required for a legitimate project or legal purpose.
This may include hosting, email, technical, accounting or other professional service providers.
Where appropriate, we expect service providers processing personal information on our behalf to handle it securely and only for the relevant purpose.
We may also disclose information where required or permitted by law.
11. Security
We take reasonable technical and organisational measures to protect personal information against loss, unauthorised access, misuse, alteration or disclosure.
These measures include appropriate website security, access controls, secure email credentials and administrative safeguards.
However, no internet transmission or electronic storage system can be guaranteed to be completely secure.
12. Photographs and project material
As a photography and film business, Winner & Mash may create or receive photographs, film and project information that includes identifiable individuals, private spaces or other information connected with a client or project.
The handling and publication of commissioned project material may also be governed by client agreements, permissions, usage arrangements and other applicable requirements.
We do not assume that every photograph or project may automatically be published simply because Winner & Mash created it.
13. Your rights under POPIA
Subject to applicable law, you may have the right to:
- Ask whether we hold personal information about you
- Request access to your personal information
- Ask us to correct or update inaccurate information
- Request deletion or destruction of information where appropriate
- Object to certain processing of your personal information
- Withdraw consent where processing is based on consent
- Raise a concern about how your information has been handled
To make a privacy request, contact:
hello@winnerandmash.co.za
We may need to verify your identity before providing access to or making changes to personal information.
14. Information Officer
Privacy and POPIA-related enquiries for Winner and Mash (Pty) Ltd may be directed to:
Chris de Winnaar
hello@winnerandmash.co.za
15. Complaints
If you have concerns about how Winner & Mash handles your personal information, please contact us first so that we can investigate and respond.
You may also have the right to lodge a complaint with the Information Regulator of South Africa in accordance with POPIA.
16. Changes to this policy
We may update this Privacy Policy from time to time as our website, services, technology or legal obligations change.
The current version will be published on this website with its effective date.