Privacy Policy

Last updated: 12 September 2026

Placeholder notice: This policy is drafted to align with South Africa's Protection of Personal Information Act 4 of 2013 (POPIA) and reflects the site as built: a contact form collecting name and surname, email address, an optional organisation name, and a free-text enquiry. It is a starting point, not legal advice — have it reviewed by a South African attorney or your Information Officer before publishing, and fill in every bracketed placeholder with your real business details.

Who we are

This website is operated by Groath Analytics ("Groath", "we", "us", "our"), a "responsible party" as defined in POPIA in respect of the personal information described below.

Information Officer / point of contact for privacy matters: info@groathanalytics.co.za

What personal information we collect

We only collect what we need to respond to you. Through the "Start a conversation" form, we collect:

Name and surname — required, so we know who we're speaking to.
Email address — required, so we can reply.
Organisation / company name — optional, if relevant to your enquiry.
The content of your message — required, so we understand what you need.

We do not ask for, and you should not send us, sensitive personal information (for example ID numbers, financial account details, or health information) through the contact form.

Our hosting provider (Microsoft Azure) may automatically record standard technical logs for security and reliability purposes, such as IP address, browser type, and request timestamps. We do not currently use these logs for tracking, profiling, or marketing, and we do not run any analytics or advertising cookies on this site — see our Cookie Policy.

Why we process your information

To respond to enquiries submitted through the contact form (based on your consent, given by ticking the consent box before sending the form).
To maintain the security, integrity, and proper functioning of the website (a legitimate interest of ours, kept in proportion to your rights).
To comply with legal or regulatory obligations that may apply to us, including any applicable financial-services record-keeping requirements.

Who we share it with

We do not sell or rent personal information. We may share enquiry details with:

Professional advisers, regulators, or law enforcement where we are legally required to.

Some service providers (including Microsoft Azure and email providers) may process or store data outside South Africa. Where this happens, we take reasonable steps to ensure the recipient is subject to conditions for processing that provide an equivalent level of protection to POPIA, as required by section 72 of POPIA.

How long we keep it

We keep enquiry details only for as long as reasonably necessary to respond to and follow up on your enquiry, and thereafter for as long as needed to meet legal, accounting, or regulatory requirements, after which it is securely deleted.

Your rights under POPIA

Subject to POPIA, you have the right to:

Be told what personal information of yours we hold and why;
Request access to, correction of, or deletion of your personal information;
Object to processing of your personal information on reasonable grounds;
Withdraw consent at any time, without affecting processing already carried out;
Complain to us directly, or lodge a complaint with the Information Regulator (South Africa) if you believe we have not complied with POPIA.

Information Regulator (South Africa) — complaints@inforegulator.org.za / inforegulator.org.za. To exercise any of these rights with us directly, contact info@groathanalytics.co.za.

Security

We use reasonable technical and organisational measures — including encrypted connections (HTTPS), access controls, and hosting on Microsoft Azure infrastructure — to protect personal information against loss, unauthorised access, and misuse. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Children

This website is intended for businesses and adult individuals. We do not knowingly collect personal information from children, as defined in POPIA, without the consent of a competent person (such as a parent or guardian).

Changes to this policy

We may update this policy from time to time. The "last updated" date at the top of this page reflects the most recent revision.

Contact us

For any privacy question or request, contact info@groathanalytics.co.za

← Back to Groath