PRIVACY NOTICE
Your brief stays treated like a brief.
This notice explains how Try It Out handles personal information submitted through this experiential agency website. For this website enquiry process, Try It Out determines why and how the information is processed.
Information we process
When you prepare or submit a campaign brief, the website may process the information you choose to provide, including your name, company, email address, phone number, campaign location, campaign type, budget range, target date, audience, desired action and the brief itself.
For security and abuse prevention, the secure submission service also processes technical request information. The application stores a one-way hash derived from the request IP address and a one-way hash derived from the submitted email address for rate limiting. The application does not store the raw IP address or raw browser user-agent string inside the campaign brief record. Firebase and Google Cloud infrastructure may separately process technical request metadata as part of operating and securing their services.
Drafts stored on your device
The brief composer can save an unfinished draft in your browser so you can continue on the same device. Browser storage may also remember whether you have seen the cinematic introduction and, if optional analytics are later enabled, your analytics privacy choice. You can remove this information by clearing browser storage. A successfully submitted secure brief clears the saved campaign draft from that browser where possible.
Why we use the information
- to receive, understand and respond to campaign enquiries;
- to plan discussions about experiential campaigns, activations and related services;
- to secure the enquiry channel, detect abuse and enforce submission limits;
- to maintain operational records relating to an enquiry; and
- to comply with applicable legal obligations.
Submitting the campaign form includes an express acknowledgement that Try It Out may receive and process the enquiry for the purpose of responding to the brief.
Security controls
The secure campaign channel is designed with Firebase App Check, replay protection, server-side validation, independent hashed IP and email rate limits, restricted Firestore rules and server-generated campaign references. Direct public reads and writes to the brief database are denied.
Retention
Submitted campaign briefs are assigned a deletion date 180 days after receipt. Security rate-limit records are assigned a deletion date two days after their latest use. Firestore time-to-live policies are used to remove records after those dates; deletion is asynchronous and may not occur at the exact timestamp. Information that must be retained for an active commercial relationship, dispute or legal requirement may be handled under the relevant business record instead of this website-enquiry retention cycle.
Service providers and international processing
Try It Out uses technology providers, including Firebase and Google Cloud, to host and secure the website and enquiry service. Their infrastructure may process information in more than one country. Where personal information is transferred across borders, Try It Out intends to use service arrangements and safeguards appropriate to the information and applicable South African privacy requirements.
Analytics
Non-essential analytics are disabled. The website does not load a third-party analytics script in this configuration.
If optional analytics are enabled in future, the website is designed to request a visitor choice before loading the analytics script. Declining analytics does not prevent use of the website or campaign brief.
Your privacy rights
Subject to applicable law, you may ask about personal information held about you, request correction or deletion where appropriate, object to certain processing, withdraw consent where processing depends on consent, or raise a complaint. South Africa's Protection of Personal Information Act, 2013 establishes conditions for lawful processing, security safeguards and participation rights for data subjects.
Information Regulator
You may also contact or lodge a complaint with South Africa's Information Regulator using the contact channels published by the Regulator.
Children's information
This agency website is intended for business and campaign enquiries. Do not submit personal information about children or other special personal information unless it is genuinely necessary for a campaign discussion and an appropriate lawful process has been agreed.
Changes to this notice
This notice may be updated as the agency's services, providers or legal requirements change. The date at the top identifies the current published version.