| Information type | When collected | Purpose |
|---|---|---|
| Name | Contact forms, assessment requests, resource downloads | To address you correctly and personalise communications |
| Email address | Contact forms, assessment requests, resource downloads | To respond to enquiries and deliver requested resources |
| Company name | Assessment request forms | To understand your regulatory context and tailor our response |
| Job title / role | Assessment request forms | To understand your compliance responsibilities |
| Compliance situation description | Compliance engine submissions | To generate a preliminary compliance assessment response |
| Message content | Contact forms | To respond to your specific enquiry |
| Processing activity | Legal basis |
|---|---|
| Responding to contact form enquiries | Legitimate interest — to respond to your direct request |
| Processing assessment requests | Contract — necessary to provide the service you requested |
| Delivering downloaded resources | Legitimate interest — to fulfil your resource request |
| Processing compliance engine submissions | Consent — by submitting, you consent to processing for the purpose of generating a response |
| Website analytics | Consent — obtained via cookie consent banner |
| Legal compliance obligations | Legal obligation — to comply with applicable law |
| Client platform services | Contract — necessary to perform services under a client agreement |
| Provider | Purpose | Location |
|---|---|---|
| Google LLC (Google Analytics) | Website usage analytics | USA (Standard Contractual Clauses) |
| Automattic Inc. (WordPress) | Website hosting and platform | USA (Standard Contractual Clauses) |
| Elementor Ltd. | Page builder and form processing | Israel (adequacy decision) |
| Anthropic PBC | AI-assisted compliance engine processing | USA (Standard Contractual Clauses) |
| Data type | Retention period | Basis |
|---|---|---|
| Contact form enquiries | 3 years from last interaction | Legitimate interest in maintaining a record of client communications |
| Assessment request data | Duration of engagement plus 5 years | Legal obligation and legitimate interest |
| Resource download records | 2 years | Legitimate interest |
| Compliance engine submissions | Not retained beyond session unless you create an account | Privacy by design — minimal retention |
| Client platform data | Duration of contract plus 7 years | Contractual obligation and legal requirement |
| Website analytics data | Up to 26 months (Google Analytics) | Consent |
| Cookie consent records | 12 months | Legal obligation to demonstrate consent |
| Right | Description | Applicable under |
|---|---|---|
| Right of access | Request a copy of personal information we hold about you | POPIA · GDPR · UK GDPR |
| Right to rectification | Request correction of inaccurate or incomplete personal information | POPIA · GDPR · UK GDPR |
| Right to erasure | Request deletion of personal information, subject to legal retention obligations | POPIA · GDPR · UK GDPR |
| Right to restrict processing | Request that we limit how we use your personal information in certain circumstances | GDPR · UK GDPR |
| Right to data portability | Receive your personal information in a structured, machine-readable format | GDPR · UK GDPR |
| Right to object | Object to processing based on legitimate interests or direct marketing | POPIA · GDPR · UK GDPR |
| Right to withdraw consent | Withdraw consent for processing at any time where consent is the legal basis | POPIA · GDPR · UK GDPR |
| Right to complain | Lodge a complaint with the relevant supervisory authority | POPIA · GDPR · UK GDPR |
| Category | Purpose | Examples | Duration |
|---|---|---|---|
| Strictly necessary Essential | Required for the website to function. Cannot be disabled. Enable page navigation, form submission, and security features. | Session ID, CSRF token, consent record | Session / Up to 1 year |
| Functional Functional | Remember your preferences and settings to improve your experience on return visits. | Language preference, cookie consent status | Up to 1 year |
| Analytics Analytics | Help us understand how visitors interact with the website — which pages are visited, how long visitors stay, and where they come from. Data is anonymised or pseudonymised. | Google Analytics (_ga, _gid), page view tracking | Up to 2 years |
| Service | Provider | Purpose | Data processed | Privacy policy |
|---|---|---|---|---|
| Google Analytics | Google LLC (USA) | Website usage analytics | Anonymised IP, pages visited, session duration, device type | policies.google.com |
| WordPress | Automattic Inc. (USA) | Website platform and session management | Session tokens, login state | automattic.com/privacy |
| Elementor | Elementor Ltd. (Israel) | Page builder functionality | Session tokens, form data | elementor.com/privacy-policy |