NOMBUSO CONSULTING. Our website address is: https://www.nombuso.co.za.
Nombuso Consulting respects your privacy and is committed to protecting the personal information you share with us. This Privacy Policy explains how we collect, use, store, and protect your personal information when you visit our website, contact us, request a quote, or use our services.
This policy is prepared with reference to South Africa’s Protection of Personal Information Act, 2013, commonly known as POPIA, which regulates how personal information must be processed by responsible parties in South Af
1. Who we are
Nombuso Consulting provides professional safety file and contractor documentation support services.
For the purposes of POPIA, Nombuso Consulting is the Responsible Party when we determine why and how your personal information is collected and processed. POPIA defines a responsible party as the person or organisation that determines the purpose and means of processing personal information.
2. Information we may collect
We may collect personal information when you:
- Contact us through our website;
- Request a quote;
- Send us documents for review;
- Communicate with us by email, phone, WhatsApp, or online forms;
- Use our services.
The information we may collect includes:
- Name and surname;
- Business or company name;
- Email address;
- Contact number;
- Project or worksite information;
- Documents submitted for safety file or compliance review;
- Information contained in safety files, contractor packs, registers, appointments, policies, procedures, or related documents;
- Any other information you choose to provide to us.
We only collect information that is reasonably necessary for the services we provide.
3. How we use your information
We may use your personal information to:
- Respond to enquiries;
- Provide quotations;
- Prepare, review, or update safety files and contractor documentation;
- Review current safety files and report shortcomings;
- Communicate with you about your project or service request;
- Issue invoices or payment information;
- Keep basic business and compliance records;
- Improve our services and website.
We will only process your personal information in a lawful and reasonable manner, and for purposes connected to our services. POPIA requires personal information to be processed lawfully and in a way that does not infringe the privacy of the data subject.
4. Documents and Safety File Information
Because our services may involve reviewing or preparing safety files, you may provide us with documents containing company, employee, contractor, or site-related information.
This may include:
- Contractor information;
- Employee names or designations;
- Training records;
- Medical fitness records;
- Appointment letters;
- Risk assessments;
- Incident documentation;
- Site-specific compliance records.
We treat these documents as confidential and use them only for the purpose of providing the requested service.
5. Sharing of personal information
We do not sell your personal information.
We may share limited information only where necessary, such as with:
- Service providers who assist with business operations;
- Accountants or administrative service providers;
- Legal, regulatory, or compliance authorities where required by law;
- Contractors or third parties where you have instructed us to do so.
Where information is shared, we take reasonable steps to ensure it is handled securely and only for the intended purpose.
6. Storage & Security
We take reasonable technical and organisational steps to protect personal information from loss, misuse, unauthorised access, disclosure, alteration, or destruction.
These steps may include:
- Password-protected devices and accounts;
- Restricted access to client documents;
- Secure electronic storage;
- Careful handling of documents shared by email, WhatsApp, or cloud-based platforms;
- Deleting or archiving information when it is no longer required.
In the event of a security breach involving personal information, POPIA requires notification to both the Information Regulator and affected data subjects where applicable.
7. Retention of Information
We keep personal information only for as long as necessary to:
- Provide the requested service;
- Maintain business records;
- Comply with legal, accounting, or regulatory obligations;
- Resolve queries or disputes.
When information is no longer needed, we will take reasonable steps to delete, destroy, or de-identify it.
8. Your Rights
You have the right to:
- Ask what personal information we hold about you;
- Request correction of inaccurate information;
- Request deletion of information where legally appropriate;
- Object to certain processing of your personal information;
- Withdraw consent where processing is based on consent;
- Lodge a complaint with the Information Regulator of South Africa.
POPIA gives data subjects rights and establishes remedies relating to the processing of personal information.
9. Website Cookies and Analytics
Our website may use basic cookies or analytics tools to understand how visitors use the site and to improve user experience.
Cookies may collect information such as:
- Pages visited;
- Time spent on the website;
- Device or browser type;
- General usage behaviour.
You can disable cookies in your browser settings, although some website features may not work as intended.
10. Communication and Marketing
If you contact us or request information, we may use your contact details to respond to you.
We will not send you direct marketing messages without a lawful basis. Where required, we will request your consent, and you may opt out of marketing communication at any time.
11. Third Party Links
Our website may contain links to third-party websites or platforms. We are not responsible for the privacy practices, security, or content of those external websites.
We recommend that you review the privacy policies of any third-party websites you visit.
12. Updates to this Policy
We may update this Privacy Policy from time to time. The updated version will be posted on this website with a revised effective date.
13. Contact Us
For questions about this Privacy Policy or how your personal information is handled, please contact:
Nombuso Consulting
Website: https://www.nombuso.co.za
Email: admin@nombuso.co.za