Privacy Policy

Last updated: 1 January 2026

1. Who we are

Nandi Consulting (Pty) Ltd ("Nandi Consulting", "we", "us" or "our") is a private company registered in the Republic of South Africa. We are the responsible party for the personal information processed through this website and our consulting engagements.

2. Information we collect

• Contact information you provide via forms or email, such as name, company, email address and phone number.
• Engagement information provided by clients during the course of a consulting assignment.
• Technical information automatically collected when you visit our website, such as IP address, browser type and pages viewed.

3. How we use your information

• To respond to enquiries and provide requested information.
• To deliver consulting services under contract with our clients.
• To comply with legal, regulatory and contractual obligations.
• To improve our website and services.

4. Lawful basis for processing

We process personal information on one or more of the following lawful bases recognised under POPIA: your consent, performance of a contract, compliance with a legal obligation, protection of a legitimate interest, or pursuit of our legitimate interests (balanced against your rights).

5. Sharing your information

We do not sell personal information. We may share information with trusted operators (such as IT and cloud service providers) acting on our behalf under appropriate contractual safeguards, or where required by law.

6. Cross-border transfers

Where personal information is transferred outside the Republic of South Africa, we ensure the recipient is subject to laws, binding rules or agreements providing an adequate level of protection consistent with POPIA.

7. Retention

We retain personal information only for as long as necessary to fulfil the purposes for which it was collected, including for legal, accounting or reporting requirements.

8. Your rights under POPIA

• Access to the personal information we hold about you.
• Correction or deletion of inaccurate or outdated information.
• Objection to processing in certain circumstances.
• Withdrawal of consent where processing is based on consent.
• Lodging a complaint with the Information Regulator of South Africa.

9. Security

We implement reasonable technical and organisational measures to safeguard personal information against loss, unauthorised access, alteration or disclosure.

10. Cookies

Our website may use cookies and similar technologies to provide essential functionality and understand usage. You can disable cookies through your browser settings.

11. Contact & Information Officer

To exercise your rights or to ask any question about this Privacy Policy, contact our Information Officer at privacy@nandiconsulting.co.za.

12. Information Regulator

You may also contact the Information Regulator of South Africa: inforegulator.org.za.

13. Changes to this policy

We may update this Privacy Policy from time to time. The latest version will always be available on this page.