VH-YES

Your data. Plain English.

We collect what we need to ship a kit and deliver a film. That's it. We don't sell anything to anyone. The detail below is here because the law requires it, and because you should know.

Last updated · 8 May 2026
Mini-DV · 60

Five quick truths.

01 We only collect what we need to fulfil your booking.
02 We never sell your data. Not now, not later, not ever.
03 We share data only with sub-processors that ship the kit, send the email, or take the deposit. Listed below.
04 You can ask us to delete your data at any time. We'll do it within 30 days.
05 Questions go to hello@vh-yes.com.
01 · Who we are

The responsible party.

VH-Yes is operated from Cape Town, South Africa. For the purposes of the Protection of Personal Information Act, 2013 (POPIA), we are the "responsible party" for any personal information you submit through this site or our booking process.

Our designated Information Officer can be reached at hello@vh-yes.com. If we ever expand to a registered Pty Ltd, the registration number will be added here.

02 · What we collect

Only the operational stuff.

When you fill in our enquiry form, we collect: your name, email address, the type of event, the date, and the location. If you add a message, we keep that too.

When we confirm a booking, we additionally collect: a shipping address, a contact phone number for the courier, and a payment reference once the deposit clears. We don't store payment card details — those go through our payments processor.

When you visit this site, our hosting provider records standard server logs (IP address, user-agent, request path, timestamp). We use these only to keep the site online and to investigate abuse. They are deleted automatically.

We don't collect anything from anyone under 18.

03 · Why we collect it

Lawful basis, in plain words.

We process your information because we need it to:

  • Reply to your enquiry and check availability for your date.
  • Take a deposit and confirm a booking.
  • Ship a kit to you and arrange its return.
  • Deliver the final film via a private link.
  • Comply with our legal and tax obligations.

Under POPIA, our lawful basis is performance of a contract (or steps taken to enter into one) and our legitimate interest in running a service business. We do not rely on consent for any of the above, except where you explicitly opt in to a future newsletter.

04 · Who we share with

Our short list of sub-processors.

We use a small number of trusted services to actually run the business. Each handles only the data they need.

Resend
Sends our enquiry confirmation and notification emails.
— Email
Vercel
Hosts this website and processes server logs.
— Hosting
Stripe
Will process card deposits once we activate it. Card details never touch our servers.
— Payments
Aramex / DHL Express
Receives your shipping address to deliver and collect the kit.
— Couriers
Vimeo
Hosts your final film at a private, unguessable URL.
— Video

We don't sell, trade, or rent your data to anyone. We may disclose information if compelled by a valid legal request — and only the minimum required.

05 · Where it lives

Cross-border transfers.

Our sub-processors above are headquartered in the United States and the European Union, so your data may be processed outside South Africa. POPIA section 72 permits this where the recipient is bound by laws or contracts that provide an adequate level of protection. We rely on each sub-processor's published data processing agreement and standard contractual clauses for this purpose.

If you'd rather we kept everything inside South Africa, write to us — we'll work out an alternative.

06 · How long we keep it

Retention.

Enquiries that don't convert: deleted within 12 months.

Booking records (name, address, event details, deposit reference): kept for seven years from the event date, because South African tax law requires it.

Final film files: kept on Vimeo indefinitely so you can re-download them. You can ask us to remove them at any time and we will.

Server logs: rotated automatically, typically within 30 days.

07 · Your footage

The film is yours.

The raw footage your guests capture, and the final edit we produce, belong to you. We will never publish, sell, license, or use any of it for marketing without your written permission.

If at any point you'd like us to feature a clip on our site or social — for example, anonymised, or with your faces and names — we'll ask first. The default answer is no, and that's fine.

We keep one working copy of your final edit on our editing machines for as long as the project is active, and a single archived copy for two years after delivery in case the file ever needs to be re-rendered. You can ask us to wipe both at any time.

08 · Your rights

What you can ask us to do.

Under POPIA, and similar laws if you're outside South Africa, you have the right to:

  • Access the personal information we hold about you.
  • Correct anything that's wrong.
  • Delete it, subject to the retention rules above.
  • Object to our processing it on the basis of legitimate interest.
  • Withdraw consent for any processing that depended on consent (e.g. a newsletter).
  • Lodge a complaint with the Information Regulator (details below) if you think we've handled your data badly.

To exercise any of these, email hello@vh-yes.com. We'll respond within 30 days, free of charge, except where the request is repeated or excessive (in which case we'll explain any fee in advance).

09 · Cookies & analytics

We don't track you.

This site doesn't use third-party tracking cookies. There's no Facebook pixel, no Google Analytics, no behavioural advertising. The only cookies you'll encounter are functional ones strictly required to make the site work.

If we ever add analytics, it will be a privacy-respecting one (Plausible, Fathom, or similar) that doesn't use cookies and doesn't track individuals across sites. We'll update this page before turning anything on.

10 · Changes

When this page changes.

We'll update the date at the top whenever we revise this policy. If a change is material — say, adding a new sub-processor or shifting how data flows — we'll email any active customer affected before it takes effect.