Data Privacy and Confidentiality

CBE Consulting Africa – Privacy & Confidentiality Policy

Introduction & Commitment

At CBE Consulting Africa (“CBE,” “we,” “us”), we understand that our relationship with clients, respondents and users is built on trust. We are committed to protecting the personal information you share with us, handling it ethically, responsibly, transparently, and in compliance with applicable data protection laws (such as POPIA in South Africa).
We may update this policy from time to time; by continuing to work with us or share personal information, you agree to the terms of the updated version.

Definitions

In this policy, the following definitions apply:

1.1 “CBE Consulting Africa”, “we”, “us” refers to our company.
1.2 “Personal Information” means information about an identifiable individual as defined under applicable privacy laws (e.g. POPIA, GDPR).
1.3 “Process / Processing” means collecting, organizing, storing, modifying, retrieving, using, distributing, erasing or otherwise handling Personal Information.
1.4 “Survey(s)” means any study, questionnaire or data-collection instrument provided by CBE and completed by participants.
1.5 “Website” means the online domain(s) and subdomains under our control (e.g. cbeconsultingafrica.com) or any URL(s) we may use.
1.6 “You” / “User” / “Respondent” means any individual whose data is collected by us or who uses our services or interacts with us via our Website, social media, surveys, or other channels.

Personal Information We Collect

2.1 When you complete a Survey, engage our consulting services, or use our Website, we may collect Personal Information you provide. This can include (but is not limited to):

First name, last name
Email address
Mobile phone number
Postal code / address
Date of birth
Demographic details (e.g. age, gender, language, race)
Opinions, preferences, behaviours (self-reported)
Technical/device data (browser type, IP address, device model, operating system, analytics data, cookies)

2.2 We do not knowingly collect personal data from minors under 18 without explicit parental or guardian consent. If you are under 18, please ensure your parent/guardian consents before providing your personal data to us.

How We Use & Process Your Personal Information

3.1 We ensure that processing is adequate, relevant, and not excessive for the purpose for which it is collected.
3.2 We use your personal information only for the following legitimate purposes (unless you explicitly consent otherwise):

To deliver surveys, insights, reports and consulting services
To respond to queries, requests, or support needs
To analyse data and identify trends (in aggregated or anonymised form)
To communicate with you about our services, updates, or research opportunities
To comply with legal and regulatory obligations
To improve our Website, tools, and methods
To generate anonymised or de-identified insights or profiles which cannot be traced back to you

3.3 By agreeing to participate, you also allow us to compile aggregated, anonymised profiles or statistical data for internal use and client reporting. This data will be stripped of personally identifying markers.
3.4 You may at any time ask us to access, correct, delete, or restrict processing of your Personal Information.

Sharing with Third Parties

4.1 We will not share your Personal Information with third parties except in the following circumstances and with appropriate safeguards:

With our employees, partners or service providers who support our operations (hosting, analytics, survey platforms, etc.)
With clients or partners for research purposes, provided the data is anonymised or de-identified unless you’ve expressly agreed otherwise
When required by law, court order, or regulatory body
With your explicit consent

4.2 Whenever we share Personal Information with third parties (especially if they are outside South Africa), we ensure they provide equivalent or greater levels of protection (via binding contracts or adherence to privacy frameworks).

Data Retention & Deletion

5.1 We retain Personal Information only as long as necessary to fulfil the purpose(s) for which it was collected or to meet legal obligations.
5.2 If you request deletion of your Personal Information, we will comply unless there is a lawful reason to retain it (e.g. pending legal obligations or audits).
5.3 We will securely destroy or anonymise Personal Information that is no longer needed.

Cookies & Website Analytics

6.1 We and our technology partners may use cookies (session or persistent) on our Website to:

Remember preferences
Analyse usage patterns
Improve user experience
Support targeted, anonymised online advertising

6.2 The cookies we use will not by themselves identify you. We may combine cookie data with other de-identified usage statistics.
6.3 You can disable or block cookies via your browser settings. Be aware this may limit some Website functionality.
6.4 We also use web analytics (e.g. Google Analytics or similar tools) to understand aggregate usage, behavior, and performance.

Security Measures

7.1 We take reasonable technical and organizational steps to protect the integrity, confidentiality and availability of your Personal Information.
7.2 These measures include (but are not limited to): encryption, secure servers, access controls, regular audits, staff training, and updates to safeguard against new threats.
7.3 However, no system is completely secure—transmission of data over the internet is at your own risk, and we cannot guarantee absolute security.

International Transfers

8.1 Our operations are based in South Africa. If you provide your data from another country, you acknowledge that it may be transferred to, stored and processed within South Africa.
8.2 When we use third-party service providers or cloud platforms located outside South Africa, we ensure that such transfers comply with relevant legal standards and that your data is protected at least to the same degree of security.
8.3 If you reside in the EU, we act as the data controller under applicable EU data protection law (e.g. GDPR) for processing your data in this context.