Black Heath Advisory Inc. (registration number 2013/084518/21), of 16 Invicta Road, Thandanani Office Park, Midrand, 1685, is the responsible party for the personal information you submit through this form.
What we collect: the information you provide above, plus the date and time of submission, the page you came from, and an anonymised record that you completed the anti-spam check. Fields marked with an asterisk are required, because without them we cannot respond. The remaining fields are optional and leaving them blank has no consequence.
Why we collect it: to respond to your enquiry, to assess whether our services match your needs, and, only if you opt in, to send you periodic insights. Our lawful basis is your consent under section 11(1)(a) of POPIA, and our legitimate interest under section 11(1)(f) in responding to business enquiries.
Who processes it: Black Heath Advisory partners and staff, all bound by professional confidentiality. Your submission is also handled by service providers acting only on our instruction and under written contract: Cloudflare, Inc., for bot protection and secure relay of the form; Microsoft Corporation, for storage and processing in our Microsoft 365 tenant; Resend, for the notification email that tells us an enquiry has arrived; and Google LLC, for delivery of the typefaces this site uses. If you use the website assistant, your messages to it are processed by Anthropic. We do not sell, rent, or share your information with anyone for marketing.
Where it is stored: your enquiry is stored only in our Microsoft 365 tenant in the Azure South Africa North region (Johannesburg). It reaches that tenant across Cloudflare's global network and may be processed in transit at a location outside South Africa. Google receives your IP address when a page on this site loads, in order to deliver the typefaces. These transfers are made under section 72 of POPIA on the basis of the providers' binding contractual commitments to a level of protection substantially similar to POPIA.
Analytics: we use Google Analytics only if you accept the banner on this site. If you decline, or ignore it, nothing loads and nothing is sent. You can withdraw at any time on the Privacy Notice page.
How long we keep it: 24 months from your last contact with us, after which it is deleted.
Your rights: under POPIA you may request access to, correction of, or deletion of your information, and you may object to its processing, at any time. You may also lodge a complaint with the Information Regulator (South Africa) at enquiries@inforegulator.org.za or complaints.IR@inforegulator.org.za.
Information Officer: privacy@blackheathadvisory.co.za | 010 502 0108