Legal

Privacy Policy

Last updated: 17 June 2026

This Privacy Policy explains how Bedlamp Digital Marketing (Pty) Ltd (trading as BDLP) (“we”, “us”, or “our”) collects, uses, stores, shares, and protects personal information when you use:

We process personal information in accordance with the Protection of Personal Information Act, 2013 (POPIA) of South Africa and other applicable laws. By using our website or BDLP AiMA, you acknowledge this policy. Where we rely on consent (for example, when you connect a social media or other third-party account), you may withdraw that consent as described below.

1. Data controller

The data controller responsible for your personal information is:

BDLP (Pty) Ltd
Unit 9 (Ground Floor)
Stanford Office Park
12 Bauhinia Street
Highveld Technopark
Centurion
0157
South Africa
Email: durc@bedlampdm.com
Phone: +27 73 170 0110

For privacy-related requests, please contact us at durc@bedlampdm.com. We aim to respond within 30 days.

2. Who this policy covers

This policy applies to:

  • visitors to bedlampdm.com;
  • customers who purchase products or services through our WooCommerce store;
  • registered users of BDLP AiMA (agency staff, administrators, and authorised team members); and
  • business clients whose marketing data is managed inside BDLP AiMA on their behalf.

3. Information we collect on bedlampdm.com

Depending on how you use our website, we may collect:

  • Contact and identity information — name, email address, phone number, company name, and messages you send via contact forms.
  • Account information — if you register a WordPress/WooCommerce account: username, email address, password (stored in hashed form), billing and shipping addresses, and order history.
  • Checkout and order data (WooCommerce) — when you place an order we collect information needed to fulfil it, including name, email, billing address, shipping address (if applicable), order items, payment status, and any notes you provide at checkout. We also collect your IP address for fraud prevention, security, and order fulfilment.
  • Payment information — payment card details are processed by our payment gateway provider(s). We do not store full card numbers on our servers; we receive confirmation and transaction references from the payment processor.
  • Technical and usage data — IP address, browser type, device information, pages visited, referring URLs, and similar log data collected through cookies, server logs, and analytics tools.
  • Marketing preferences — only where you have given explicit permission (for example, newsletter sign-up).

Comments: Public commenting on this website is disabled. We do not collect comment data from visitors.

4. Information we collect in BDLP AiMA

BDLP AiMA is our client marketing studio used to manage business context, generate content, schedule posts, and publish to connected platforms. When you use BDLP AiMA we may collect and process:

  • User account data — display name, username, email address, role, login activity, and password (stored in hashed form).
  • Client business profile data — business name, industry, website URL, location, brand voice, products/services, uploaded documents, and other marketing context you or your team enter.
  • Content and calendar data — generated and approved posts, images, schedules, content plans, performance notes, and related metadata.
  • Connection credentials — encrypted tokens and configuration for integrations you authorise (for example WordPress, email mailboxes, and social media platforms such as LinkedIn, Meta/Facebook, Instagram, and others you choose to connect).
  • AI processing inputs and outputs — prompts and generated text or images sent to our configured AI providers to produce marketing content on your instructions.
  • Technical logs — IP address, session data, error logs, and security events related to your use of the application.

5. Social media integrations (BDLP AiMA)

BDLP AiMA lets you connect social media accounts you administer so you can publish approved marketing content on your behalf. Connections use each platform’s official APIs and OAuth authorisation — you choose which accounts to connect and what to publish.

Supported or planned integrations include LinkedIn, Meta (Facebook and Instagram), and other platforms as they are added to the product. The following applies to all social media connections unless a platform’s own terms require something more specific.

5.1 What we access and store

  • With your consent via OAuth — we may receive your account or member identifier, display name, email address (if included in the permissions you grant), the pages, profiles, or business assets you can administer, and the permissions needed to publish content on your behalf.
  • What we store in BDLP AiMA — encrypted OAuth access and refresh tokens (where provided), platform account and page identifiers, connection status, publish logs (including post identifiers and URLs where returned by the platform), and the marketing content you approve for publishing.
  • What we do not do — we do not sell social platform data, use it for unrelated advertising, read private messages without a feature that requires it and your explicit authorisation, or permit third parties to use it except as described in this policy (for example secure hosting and the platform provider itself).

5.2 Why we use social connections

We use social media data solely to let you connect BDLP AiMA to the platforms you choose, publish approved marketing posts to your selected pages or profiles, schedule content where supported, and record delivery status inside your client workspace.

5.3 How to disconnect

You can disconnect any social account in BDLP AiMA under Connections. You can also revoke BDLP AiMA’s access at any time in that platform’s own account or app settings. Disconnecting stops future publishing through that connection; we delete or deactivate stored tokens in line with our retention section below.

5.4 Platform-specific terms

Your use of each social network is also governed by that provider’s terms and privacy policy. BDLP AiMA is not affiliated with or endorsed by these platforms. Relevant policies include:

If you connect additional platforms in future (for example X or Threads), the same principles in this section apply, and we will process data only within the permissions you grant through that platform’s authorisation flow.

6. Cookies and similar technologies

We use cookies and similar technologies on bedlampdm.com and BDLP AiMA to operate our services, remember preferences, maintain secure sessions, and understand usage.

  • Essential cookies — required for site security, login sessions, shopping cart functionality (WooCommerce), and checkout.
  • Preference cookies — remember choices such as currency, language, or display settings.
  • Analytics cookies — help us understand how visitors use our website (for example, through Google Analytics or similar tools, where enabled).
  • Marketing cookies — only where you have consented, to measure campaign effectiveness.

When you visit our login pages, we may set a temporary cookie to test whether your browser accepts cookies. Session cookies are used when you log in to bedlampdm.com or BDLP AiMA. You can control cookies through your browser settings; disabling essential cookies may affect checkout, login, or cart functionality.

7. Embedded content and third-party websites

Our pages may include embedded content (for example videos, maps, or social widgets). Embedded content behaves as if you visited the third-party site directly. Those sites may collect data about you, use cookies, and track your interaction with the embedded content according to their own privacy policies.

8. How we use your information

We use personal information to:

  • provide, operate, and improve our website, WooCommerce store, and BDLP AiMA;
  • process orders, payments, refunds, and customer support;
  • create and manage user accounts;
  • generate, review, schedule, and publish marketing content you approve;
  • connect to third-party platforms you authorise (including social media platforms, WordPress, and email services);
  • send service-related communications (for example order confirmations, password resets, and security notices);
  • send marketing communications only where you have opted in or we are otherwise permitted by law;
  • prevent fraud, abuse, and security incidents; and
  • comply with legal obligations.

Legal bases under POPIA include: your consent (for example connecting a social media account or marketing opt-in), performance of a contract (orders and BDLP AiMA subscriptions), compliance with law, and our legitimate interests (security, service improvement, and fraud prevention), balanced against your rights.

9. AI and other service providers

We use trusted third-party providers to deliver our services. Depending on your use, data may be processed by:

  • Hosting and infrastructure — to store application and website data securely.
  • Payment processors — to process WooCommerce payments (for example Paystack or other gateways configured on our store).
  • Email and delivery services — to send transactional email, newsletters, and published content via mailboxes you connect.
  • AI providers — including Moonshot/Kimi and OpenAI (where enabled) to generate text and images based on your marketing context and prompts. We send only the data needed for each request; API keys are stored server-side and are not exposed to end users.
  • Social media platforms — including LinkedIn and Meta (Facebook and Instagram), when you connect and publish through BDLP AiMA, as described in section 5.
  • Analytics, security, and CDN providers — for example Google (Site Kit/Analytics where enabled), Cloudflare, and Wordfence, to protect and measure our services.

These providers process data on our instructions and only for the purposes described in this policy, subject to their own terms and security measures. We do not authorise them to use your personal information for their own unrelated marketing.

10. How we share your information

We do not sell your personal information. We may share information:

  • with service providers listed above, strictly to operate our services;
  • with payment processors to complete transactions you initiate;
  • with platforms you connect (for example, publishing a post you approve to LinkedIn, Facebook, Instagram, or WordPress);
  • with professional advisers or authorities when required by law, court order, or to protect rights, safety, and security;
  • in connection with a business transfer (for example merger or acquisition), with notice where required by law.

Password reset emails may include your IP address for security purposes.

11. International data transfers

Some of our service providers (including AI and cloud hosting providers) may process data outside South Africa. Where we transfer personal information internationally, we take reasonable steps to ensure appropriate safeguards are in place, consistent with POPIA requirements.

12. How long we keep your information

  • WooCommerce orders — retained for as long as needed for accounting, tax, warranty, and dispute resolution (typically up to 7 years where required by law).
  • Website accounts — retained while your account is active and for a reasonable period thereafter unless you request deletion.
  • BDLP AiMA client data — retained while the client workspace is active. When a client is deleted, associated data and files are removed from our systems, subject to backup retention cycles.
  • Social media connection tokens — retained only while each connection is active; deleted or deactivated when you disconnect that platform or we can no longer refresh the connection.
  • Logs and security records — retained for a limited period necessary for security and troubleshooting.

We may retain certain information longer where required by law or to establish, exercise, or defend legal claims.

13. Your rights

Under POPIA, you have the right to:

  • request access to personal information we hold about you;
  • request correction of inaccurate or incomplete information;
  • request deletion of your information, subject to legal retention obligations;
  • object to processing in certain circumstances;
  • withdraw consent where processing is based on consent (for example disconnecting a social media account or unsubscribing from marketing); and
  • lodge a complaint with the Information Regulator (South Africa) at www.justice.gov.za/inforeg.

WooCommerce and WordPress account holders may request an export of personal data held in their profile. To exercise any right, email durc@bedlampdm.com with sufficient detail for us to verify your identity and locate your records.

14. Security

We implement appropriate technical and organisational measures to protect personal information, including HTTPS encryption, access controls, hashed passwords, encrypted storage of integration tokens where applicable, firewalls, and malware monitoring. No method of transmission or storage is completely secure; we cannot guarantee absolute security.

15. Children’s privacy

Our website and BDLP AiMA are not directed at children under 18. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us and we will delete it promptly.

16. Changes to this policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top will change when we do. Material changes will be posted on this page. Continued use of our services after changes take effect constitutes acceptance of the updated policy, where permitted by law.

17. Contact us

If you have questions about this Privacy Policy or our data practices, contact:

BDLP (Pty) Ltd
Email: durc@bedlampdm.com
Phone: +27 73 170 0110
Address: Unit 9 (Ground Floor), Stanford Office Park, 12 Bauhinia Street, Highveld Technopark, Centurion, 0157, South Africa