Privacy Policy

Who we are, and what this policy covers

Inteprit Language Solutions (Pty) Ltd T/A Inteprit Group, headquartered at 27 Ballyclare Drive, Bryanston 2191, Johannesburg, South Africa, is the data controller for inteprit.com and for the content intelligence and transcreation services we deliver to performance marketing agencies scaling into Europe, the Gulf, LATAM, and APAC.

This policy covers two distinct things, and we're explicit about which is which throughout:

1. Site visitor data: anyone browsing inteprit.com or submitting a Request a Complimentary Ad Intent Audit form. We're the controller here: we decide why and how this data is used.
2. Client engagement data: the ad copy, keyword lists, campaign performance figures, and brand glossaries a client shares with us so we can generate, route, review, and deliver localized ad creative. For this data, we typically act as a processor on the client's behalf under a separate Data Processing Agreement (DPA); this policy describes our general handling practices, but the DPA governs.

If you're an individual named or referenced inside a client's ad copy or campaign materials (for example, in a testimonial or case study a client asks us to localize), the client, not Inteprit, is the controller for that data, and you should direct requests to them in the first instance.

What we collect, and why

We don't collect more than a category needs to do its job: the Ad Intent Audit form, for instance, asks for the ad copy and URL it needs to run the diagnostic, not a full campaign export.

Who we share it with

We don't sell personal information, ever. We do share it with a short list of processors who help us run the business and deliver the work:

• Phrase TMS: hosts client ad copy, glossaries, and translation memory as it moves through the Generate → Route by risk → Review → Deliver pipeline.
• In-market linguists and transcreators: contracted reviewers in each operating region who see the specific Amber- and Red-tier content routed to them, and nothing outside that scope.
• Cloud hosting and infrastructure providers: for the website, the engine, and data storage.
• Analytics and email providers: to understand site usage and send audit results or onboarding communications.
• Payment and invoicing processors: for client billing.
• Professional advisors and regulators: where required by law, or to establish, exercise, or defend a legal claim.

Every processor operates under a written agreement that limits them to our instructions and to appropriate security safeguards; none of them can use your data for their own purposes.

International transfers. Because we operate across South Africa, the EU, the Gulf, LATAM, and APAC, personal information routinely crosses borders: most commonly, ad copy submitted from an EU-based client reaching an in-market linguist in Brazil or the UAE. Where a transfer leaves a jurisdiction with data protection laws (like the EU or UK), we rely on Standard Contractual Clauses (SCCs) or an equivalent recognized transfer mechanism, and we flow the same contractual protections down to our sub-processors.

Your rights, by region

We operate across enough regulatory regimes that a single generic rights paragraph would undersell what's actually available to you:

Regardless of region, we'll verify your identity before acting on a request, and we'll tell you within 5 business days that we've received it, even on the requests that take longer to fully resolve.

Security and retention

Access to client campaign data and translation memory inside Phrase TMS is role-scoped: a linguist assigned to Amber-tier German copy sees that copy, not the client's full account. Data in transit and at rest is encrypted, and access to production systems is logged and reviewed.

We keep personal information only as long as the table above sets out, or as long as the law requires. Client engagement data is handled per the DPA, which generally requires deletion or return at contract end.

If we experience a breach involving personal information, we'll notify affected individuals and the relevant regulator (the Information Regulator in South Africa, the appropriate supervisory authority under GDPR, and equivalent bodies elsewhere) within the timeframe each jurisdiction requires; GDPR's is 72 hours from when we become aware of it.

Cookies and site analytics

inteprit.com uses a small number of cookies:

• Strictly necessary: keep the site functional. These can't be switched off.
• Analytics: tell us which pages and channel filters get used. Set only with your consent where legally required; you can withdraw it any time via the cookie banner.
• No advertising or cross-site tracking cookies: we don't run retargeting on our own site, deliberately.

You can block or delete cookies in your browser settings at any time; doing so may affect analytics but won't break core site functionality.

Changes to this policy, and how to reach us

We'll update this policy as our regions, sub-processors, or the law change, and we'll post the revised effective date at the top. For material changes (a new region, a new category of data, a new sub-processor with broad access), we'll flag it prominently on the site rather than let the date change quietly.

If you're a client with questions about how we process your campaign or ad-copy data specifically, your Data Processing Agreement is the controlling document: reach out to your account lead, or to the privacy address above.