import type { Metadata } from "next";
import { SITE } from "@/lib/site";

export const metadata: Metadata = {
  title: "POPIA & Privacy Notice",
  description:
    "How damianmichael.co.za handles personal information under South Africa's Protection of Personal Information Act (POPIA).",
  alternates: { canonical: "/privacy" },
  robots: { index: true, follow: true },
};

export default function PrivacyPage() {
  return (
    <div className="bg-obsidian pb-28 pt-32 md:pt-44">
      <div className="mx-auto max-w-3xl px-6">
        <p className="kicker mb-6">POPIA &amp; Privacy Notice</p>
        <h1 className="font-display text-4xl font-black leading-tight tracking-[-0.02em] text-ivory md:text-5xl">
          Your information, handled like our uptime: carefully.
        </h1>

        <div className="prose-dm mt-12">
          <p>
            This notice explains how damianmichael.co.za processes personal
            information in terms of the Protection of Personal Information Act, 4
            of 2013 (POPIA). Responsible party: Damian Michael, c/o Innovo
            Networks (Pty) Ltd, Cape Town, South Africa. Contact:{" "}
            <a href={`mailto:${SITE.email}`}>{SITE.email}</a>.
          </p>

          <h2>What we collect</h2>
          <p>
            The contact form collects your name, email address, optional company
            name, a reason for reaching out, and your message — only when you
            submit it, and only with your explicit consent.
          </p>

          <h2>Why we collect it</h2>
          <p>
            Solely to respond to your enquiry (speaking, board, media,
            partnership or general contact). Your details are not added to
            marketing lists, sold, or shared with third parties beyond the email
            service used to deliver your message.
          </p>

          <h2>Analytics without surveillance</h2>
          <p>
            This site uses Plausible, a cookieless analytics service that
            collects aggregate, anonymised usage data only. No advertising
            trackers, no cross-site profiles, no cookie banner theatre — because
            there are no tracking cookies.
          </p>

          <h2>Retention</h2>
          <p>
            Enquiry emails are retained for as long as the correspondence stays
            active and deleted thereafter, unless a business relationship
            requires otherwise.
          </p>

          <h2>Your rights</h2>
          <ul>
            <li>Request access to the personal information we hold about you.</li>
            <li>Request correction or deletion of that information.</li>
            <li>Object to processing, or withdraw consent at any time.</li>
            <li>
              Lodge a complaint with the Information Regulator of South Africa
              (<a href="https://inforegulator.org.za" target="_blank" rel="noopener noreferrer">inforegulator.org.za</a>).
            </li>
          </ul>
          <p>
            To exercise any of these rights, email{" "}
            <a href={`mailto:${SITE.email}`}>{SITE.email}</a> with the subject
            line “POPIA request”. We respond within a reasonable time, as the Act
            requires — and usually much faster.
          </p>

          <p>Last updated: 23 July 2026.</p>
        </div>
      </div>
    </div>
  );
}