Privacy policy and PAIA access.

Last updated 09/11/2026.

Who we are

THYM Co (Pty) Ltd, trading as THYM Studio, is the responsible party for personal information collected through this website, as defined in the Protection of Personal Information Act (POPIA). You can reach us at 41 Isak de Villiers Street, Langenhoven Park, Bloemfontein, 9301, on +27 61 655 1015, or at studio@thym.co.za.

What we collect

Through the contact form: your name, email address, phone number (optional), the services you’re interested in, and anything you write in your message.
When you call, email or message us on WhatsApp: your contact details and what you tell us.
If you are a client with a client portal login: your name, email address, project details and onboarding brief, comments and messages, the proofs, quotes and invoices we share with you, your sign-offs (the name you type, your decision, and the date and time), and your satisfaction rating.
Basic usage information, such as which pages are visited and what device is used, if you agree to analytics cookies.

Why we use it

We use your information to reply to your enquiry, prepare a quote, keep records of our business, and improve this website. We do not sell your personal information.

We use service providers to run this website and talk to you: Wix hosts the site, runs the client portal login and stores contact form submissions and portal records, WhatsApp (Meta) carries messages you send us there, Google may be used for mapping and business listings, and an analytics provider may be used to understand site visits. They handle information on our behalf. We also use artificial intelligence (AI) service providers, including large language model (LLM) providers, as described below.

AI and large language models

Information you give us, such as enquiries, messages, briefs and project content, may be shared with and processed by AI service providers, including LLM providers. We do this to respond to you, deliver our services, improve customer experience, develop our products and services, and carry out research and analysis. We share only what is reasonably needed for these purposes, and these providers may process information outside South Africa, as explained below. You can object to this processing at any time by emailing studio@thym.co.za. Our Terms of Service set out the same terms.

Client portal

Clients can be invited to a private client portal to follow their project. Each client sees only their own project. We use your information in the portal to run the project, share proofs, quotes and invoices with you, record your approvals and requests for changes, and keep a history of the work. A sign-off in the portal is recorded with the name you type, your decision and the date and time. It is a record of your approval for our project file, not a certified electronic signature. Portal records are kept on Wix, and the portal login is handled by Wix. We use only essential storage in the portal to keep you signed in. Anyone with a portal login can see the proof, quote and invoice links we share with them, so please do not forward your login.

Information stored outside South Africa

Some of our service providers store information on servers outside South Africa, mainly in the United States and Europe. We choose providers that maintain data protection standards that match or exceed the requirements of POPIA.

How long we keep it

We keep enquiries for as long as we need them to respond, quote and keep our business records. Client portal projects stay available to you for 12 months after the project is completed, and become read-only. After that we decide whether to delete the portal records or keep them for as long as we need them for our business, tax and legal records. You can ask us to delete your portal information at any time, subject to records we are required to keep.

How we protect it

Access control: strong passwords on company accounts and devices, with two-factor authentication wherever the software supports it.
Encryption: personal information sent online or stored in cloud systems is protected with industry-standard encryption.
Devices: computers, laptops and phones used for company work run anti-virus, anti-malware and firewall protection, kept up to date, with automatic screen locks.
Physical records: any paper records are kept in access-controlled premises, in locked filing where applicable.

Cookies and analytics

We use essential cookies to run this site, and analytics and marketing cookies only if you agree to them. Our Cookie Policy lists the cookies we use and explains how to change your choices.

Your rights

You can ask us to tell you what personal information we hold about you, correct it, delete it, or stop using it. You can also withdraw consent you have given us. Email studio@thym.co.za and we will respond.

Access to records (PAIA)

The Promotion of Access to Information Act (PAIA) gives you the right to request access to records held by THYM Co (Pty) Ltd. Our PAIA manual explains which records are available without a formal request and how to make one. Send requests to our Information Officer or Deputy Information Officer below.

Information Officer

Name: John Arthur Jnr Tapuch (Chief Information Officer)
Telephone: +27 61 655 1015
Email: group@thym.co.za

Deputy Information Officer

Name: Pieter Willem Jacobus Barnard (Jaco Barnard)
Telephone: +27 83 297 7266
Email: group@thym.co.za

Postal and physical address

41 Isak de Villiers Street, Langenhoven Park, Bloemfontein, 9301

Our full PAIA manual is available on request by email. A fee may apply for copies, as set out in the manual. For guidance on how to use PAIA and how to lodge a complaint, see the Information Regulator at justice.gov.za/inforeg (opens in a new tab).

Complaints

If you are unhappy with how we handle your personal information, you can complain to the Information Regulator of South Africa at inforegulator.org.za (opens in a new tab).

Changes to this policy

We may update this policy from time to time. The date at the top shows when it last changed.