Impactis Consulting (“Impactis”, “we”, “us” or “our”) respects your privacy. This policy explains what personal information we collect through this website and in our consulting work, how we use and protect it, and the rights you have under the Protection of Personal Information Act 4 of 2013 (“POPIA”).
1. Who is responsible for your information
Impactis is the responsible party for the personal information described in this policy. We are based at 6 Keyes Avenue, Rosebank, Johannesburg, 2196, South Africa. You can contact our Information Officer at info@impactisconsulting.com or on +27 79 299 6808.
2. Information we collect
- Enquiries: your name, email address, organisation and message when you contact us through this website or by email.
- Consulting engagements and tool licences: the names, roles and contact details of the people we work with at your organisation, and the information they share with us during strategy work and quarterly reviews, such as review scores, comments and commitments.
- Technical information: our web server records basic information such as your IP address, browser type and the pages you visit, to keep the website secure and working.
3. How we use your information
- To respond to your enquiries and arrange consultations.
- To deliver consulting engagements, facilitate strategy sessions and quarterly reviews, and support organisations that license our tools.
- To prepare proposals, licence agreements and invoices.
- To keep our website secure and to meet our legal and tax obligations.
- To send you news about our work, where you have agreed to this or are an existing client. You can opt out at any time.
We process personal information only where POPIA allows it: with your consent, to conclude or perform a contract with you, to comply with the law, or where it is necessary for our legitimate interests or yours.
4. Confidentiality of client information
Information an organisation shares with us during an engagement is treated as confidential. We use it only to deliver that engagement, and we do not disclose it to other clients. Where we refer to past work, we do so only in a way that does not identify the organisation or its people, unless they have agreed otherwise.
5. Who we share it with
We do not sell your personal information. We share it only where necessary with:
- the providers that host our website, email and the tools we license;
- associate consultants engaged to help deliver work for your organisation, who are bound by the same confidentiality obligations as we are;
- regulators, law enforcement or professional advisers, where the law requires it.
Each service provider may use your information only to provide its service to us and must keep it secure.
6. Transfers outside South Africa
Some of our service providers, such as our website and email hosts, may store information on servers outside South Africa. Where this happens, we take reasonable steps to ensure the information receives a level of protection comparable to that required by POPIA.
7. Cookies
This website uses only the cookies it needs to work: a session cookie and a security cookie that protects our forms against misuse. We do not use advertising or tracking cookies.
8. How we protect your information
We use appropriate technical and organisational measures to protect your information against loss, misuse and unauthorised access, including encrypted connections and restricted access to our systems.
9. How long we keep it
We keep personal information only for as long as we need it for the purposes above, or for longer where the law requires it, for example financial records. When information is no longer needed, we delete or anonymise it.
10. Your rights
Under POPIA you have the right to:
- ask whether we hold personal information about you and request a copy of it;
- ask us to correct or delete information that is inaccurate, out of date or no longer needed;
- object to our processing of your information, including for direct marketing;
- withdraw your consent at any time, where we rely on it;
- lodge a complaint with the Information Regulator (South Africa) at inforegulator.org.za.
To exercise any of these rights, email info@impactisconsulting.com. We may need to verify your identity before we respond.
11. Changes to this policy
We may update this policy from time to time. The current version is always published on this page, with the date it was last updated shown at the top.
12. Contact us
If you have any questions about this policy or how we handle your personal information, contact us at info@impactisconsulting.com or +27 79 299 6808.