Privacy Policy

This policy explains how MZANSI ADVISORY (Pty) Ltd ("Mzansi", "we", "us" or "our") handles personal information. It applies when you visit mzansi.dev, contact us or use our services. We decide why and how this information is used. This makes us the responsible party under the Protection of Personal Information Act 4 of 2013 (POPIA).

1. Information we collect

We collect the following information directly from you:

• When you use the contact form, we collect your name, email address, optional company name, service interest and enquiry details.
• We keep contact details and messages you share by email, telephone or in meetings.
• For client work, we collect business contacts, requirements, agreements and billing records.

Our hosting and security services may collect technical information when you visit. This includes your internet protocol (IP) address, which identifies your network connection, and details about your browser, device and requests. If a colleague or authorised representative gives us your contact details, we use them for the relevant business communication.

You choose whether to contact us. The form requires your name, email address, service interest and enquiry so that we can respond. Your company name is optional. Without enough information, we may be unable to help. Please do not send passwords, identity documents or sensitive personal information through the form.

2. Why we use information

We use personal information to respond to enquiries, prepare proposals, deliver services and keep business records. We also use it to secure our systems, prevent misuse, resolve disputes and meet legal duties.

We must have a lawful reason to process personal information. Under POPIA, this may be consent, a legal duty or a need to enter into or fulfil a contract. It may also be a legitimate interest, such as communicating with clients or protecting our business. If we rely on consent, you may withdraw it for future use of your information. Visiting this site does not give consent for unrelated uses.

3. Website security, cookies and third parties

Cloudflare hosts the website. Its Turnstile service helps protect the contact form against automated abuse. Your form submission goes to our form service at forms.mzansi.dev. Turnstile checks browser and device signals separately. Read how Turnstile works and Cloudflare's Privacy Policy for details.

We have not added advertising trackers or tools that analyse visitor activity to this website. Our hosting and security providers may use cookies or similar technologies to keep it working securely. Cookies are small files saved by your browser. You can manage them in your browser settings. Blocking security features may stop the enquiry form from working. You can contact us by email instead.

External websites have their own privacy notices.

4. Meetings and recordings

Before recording or transcribing a meeting, we will explain why and how we will use it. We will obtain consent where required. This policy does not authorise recording. We apply the same limits on use, access and storage to recordings and transcripts as to other personal information.

5. Sharing and processing outside South Africa

We do not sell personal information. We may share it with staff, contractors and providers who need it for the purposes described here. Providers acting for us must protect it and use it only as authorised. We may also disclose information when required by law or needed to establish or defend legal rights.

Service providers and sub-processors

We may use the providers below, depending on the agreed services and setup. When they process information for us on a client's behalf, they act as sub-processors.

• Microsoft provides office software, email, collaboration, cloud computing and artificial intelligence (AI) services.
• Google provides office software, email, collaboration, cloud computing and AI services.
• Amazon Web Services (AWS) provides cloud hosting, storage, computing and AI services.
• Anthropic provides AI models and related data-processing services.
• OpenAI provides AI models and related data-processing services.
• Cloudflare provides website hosting, content delivery, security and Turnstile verification.

We share only the information needed for the service. Each client agreement must cover authorised providers, confidentiality and security. It must also cover any approval or notice needed when sub-processors change. This list does not authorise providers to use client data to train AI models.

Some providers operate outside South Africa. Transfers of personal information must meet POPIA's requirements. This may require protection under a law or binding agreement, or another lawful basis for the transfer.

When we process information on a client's instructions, the client usually decides why it is processed. The service and data-processing agreements govern that work. We refer requests about records controlled by a client to that client.

6. How we protect and retain information

We use reasonable technical and organisational safeguards suited to the information and risks. These include limiting access to people who need it. No system can guarantee complete security. If a security breach occurs, we will assess it. We will notify affected people and the Information Regulator where required by law.

We keep information only as long as needed for its purpose, the business relationship and legal record-keeping duties. A lawful dispute or claim may require us to keep it longer. When there is no lawful reason to retain it, we must delete it, destroy it or remove identifying details.

7. Your choices and rights

Subject to POPIA's conditions and legal exceptions, you may:

• Ask whether we hold your personal information and request access to it.
• Ask us to correct inaccurate information or delete information we are no longer entitled to hold.
• Object to processing where the law permits, or withdraw consent where we rely on it.
• Object to direct marketing and ask us to stop sending it.
• Complain to the Information Regulator.

Send requests to hello@mzansi.dev, marked for the Information Officer, who handles our privacy requests. We may need to check your identity before releasing or changing records. We will explain any required process, permitted fee or reason we cannot fulfil a request.

An enquiry does not subscribe you to marketing. Electronic marketing must meet the legal requirements for consent or communications with existing customers. It must include a way to opt out.

8. Children's information

This website and our business services are intended for adults. Please do not submit children's personal information through the enquiry form. If a project needs such information, we must establish the required authority and safeguards before collecting it.

9. Questions, complaints and changes

Contact us at the email or physical address above with questions about this policy. You can also complain directly to the Information Regulator South Africa, which oversees compliance with POPIA. Its website explains how to make a complaint.

South African law governs this policy. We may update it when our services or legal duties change. The date above shows the latest revision. Where required, we will give further notice or obtain consent before using information for a new purpose.

For website and service terms, read our Terms of Service.