Last updated: 13 July 2026

This Privacy Policy explains how davidhaigh.co ("the Site," "we," "us," or "our") collects, uses, and protects your personal information when you visit the Site, sign up for our newsletter, or book a meeting with us.

The Site is operated by Peak Strategies (Pty) Ltd, trading as David Haigh, based in Cape Town, South Africa. As we welcome visitors from South Africa, the United States, the United Kingdom, and Europe, this policy is written to meet the requirements of South Africa's Protection of Personal Information Act (POPIA), the EU/UK General Data Protection Regulation (GDPR), and applicable US privacy laws.

1. Who We Are

Data Controller / Responsible Party: Peak Strategies (Pty) Ltd t/a David Haigh Location: Cape Town, South Africa Contact email: david@davidhaigh.co

If you have any questions about this policy or how your information is handled, please contact us using the details above.

2. Information We Collect

We collect information in the following ways:

a) Newsletter Sign-Up

When you subscribe to our newsletter, we collect:

• Your name

• Your email address

This information is used solely to send you newsletter content and updates. You can unsubscribe at any time using the link included in every email.

b) Meeting Bookings (via Calendly)

When you book a meeting with us through our Calendly integration, Calendly collects and processes:

• Your name

• Your email address

• Time zone and scheduling preferences

• Any additional information you choose to provide in the booking form

This data is processed by Calendly, Inc. on our behalf. Please refer to Calendly's Privacy Policy for details on how they handle your data.

c) Website Analytics (via Squarespace)

Our Site is built on Squarespace and uses Squarespace's native analytics to understand how visitors use the Site. This may include:

• IP address (anonymized or truncated where possible)

• Browser type and device information

• Pages visited and time spent on the Site

• Referring website or search terms

• General geographic location (country/city level)

This data helps us understand Site performance and visitor behavior. It does not include sensitive personal information. For details on how Squarespace processes this data, see Squarespace's Privacy Policy.

d) Cookies

Squarespace analytics and Calendly may use cookies or similar tracking technologies to collect the information described above. You can control or disable cookies through your browser settings, though this may affect certain Site functionality.

3. How We Use Your Information

We use the information we collect to:

• Send newsletter content to subscribers

• Schedule and manage meetings booked via Calendly

• Understand and improve Site performance and visitor experience

• Respond to inquiries you send us directly

• Comply with legal obligations where applicable

We do not sell your personal information to third parties.

4. Legal Basis for Processing

Depending on your location, we rely on the following legal bases:

Under POPIA (South Africa): We process your information based on your consent (e.g., newsletter sign-up, booking a meeting) and our legitimate business interests in operating and improving the Site.

Under GDPR (EU/UK visitors): We process your information based on:

• Consent — for newsletter sign-ups and cookies

• Legitimate interests — for website analytics and Site improvement

• Contract performance — for scheduling meetings you request

For US visitors: We process information consistent with applicable state privacy laws (such as the CCPA where applicable). We do not sell personal information, and you may request access to or deletion of your information as described below.

5. Third-Party Service Providers

We use the following third-party services to operate the Site, each of which processes personal information under their own privacy policies:

Service Purpose Privacy Policy Squarespace Website hosting and analytics squarespace.com/privacy Calendly Meeting scheduling calendly.com/privacy Mailchimp Newsletter delivery mailchimp.com/legal/privacy Squarespace Email Campaigns Newsletter delivery squarespace.com/privacy‍ ‍

These providers may store or process data outside of South Africa, including in the United States or European Union. Where this occurs, we take reasonable steps to ensure appropriate safeguards are in place, consistent with POPIA and GDPR requirements for cross-border data transfers.

6. Data Retention

We retain personal information only for as long as necessary to fulfill the purposes described in this policy:

• Newsletter data is retained until you unsubscribe or request deletion.

• Booking data is retained in line with Calendly's retention practices and our own business record-keeping needs.

• Analytics data is retained in aggregate/anonymized form for as long as Squarespace's analytics tools store it.

7. Your Rights

Depending on where you're located, you have the following rights regarding your personal information:

If you are in South Africa (POPIA): You have the right to access, correct, or delete your personal information, to object to processing, and to lodge a complaint with the Information Regulator of South Africa.

If you are in the EU/UK (GDPR): You have the right to access, rectify, erase, or restrict processing of your data, the right to data portability, the right to object to processing, and the right to lodge a complaint with your local data protection authority.

If you are in the US: Depending on your state of residence, you may have the right to know what personal information is collected, to request deletion, and to opt out of the sale of personal information (note: we do not sell personal information).

To exercise any of these rights, contact us at david@davidhaigh.co. We will respond within the timeframe required by applicable law.

8. Children's Privacy

The Site is not directed at children under 16, and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us so we can delete it.

9. Security

We take reasonable technical and organizational measures to protect your personal information, relying in part on the security infrastructure provided by Squarespace and Calendly. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

10. International Visitors

Because the Site is hosted on Squarespace's global infrastructure and uses Calendly, your information may be transferred to and processed in countries outside your own, including the United States. By using the Site, you consent to this transfer, storage, and processing in accordance with this Privacy Policy.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The "Last updated" date at the top of this page will indicate when changes were last made. We encourage you to review this policy periodically.

12. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your personal information, please contact:

Peak Strategies (Pty) Ltd t/a David Haigh Cape Town, South Africa Email: david@davidhaigh.co