Privacy Policy
TODO: pending client content — Privacy Policy document. Must cover: what personal data is collected (contact form submissions, cookies), how it is used, third-party processors (Brevo for email), data retention, and user rights under POPIA.