1. Who we are
Business Performance Consultancy ("BPC", "we", "us") is a management consulting firm based in South Africa, providing strategic planning, monitoring and evaluation, governance and risk, research, and sustainability and ESG advisory services.
For the purposes of POPIA, BPC is the responsible party for the personal information described in this policy.
2. Scope of this policy
This policy applies to personal information we collect through this website and through direct correspondence with us — for example when you call, email, or engage us on a mandate. It does not apply to information held by third-party websites we may link to.
3. What we collect
The personal information we may collect includes:
- Identifying details such as your name and the organisation you represent.
- Contact details such as your email address and telephone number.
- The content of your enquiry, including any information you choose to include about your organisation or mandate.
- Records of our correspondence and, where you engage us, information necessary to deliver the engagement.
- Basic technical information your browser sends when it requests a page, such as your IP address and the pages you visit. This is used only to serve the site and to keep it secure.
4. How we collect it
We collect information directly from you. The enquiry form on our Contact page does not transmit anything to this website or to a database: when you submit it, it opens your own email client with the details addressed to us. Nothing is stored on the web server, and no enquiry data is captured until you actually send that email.
We also collect information when you contact us by phone or email, or when you provide it to us in the course of an engagement.
5. Why we use it
We process personal information to:
- respond to your enquiry and correspond with you;
- scope, propose and deliver services you have asked us to provide;
- maintain our business records and meet our accounting, tax and other legal obligations;
- operate, secure and improve this website; and
- send you information about our services where you have asked us to or where you have not objected.
6. Our lawful basis
Under POPIA we process personal information where you have given us consent, where it is necessary to conclude or perform a contract with you, where it is necessary to comply with a legal obligation, or where we have a legitimate interest that is not overridden by your rights. Where we rely on consent, you may withdraw it at any time.
7. Cookies and analytics
This website does not set advertising or tracking cookies, and we do not run third-party analytics or profiling on it.
The site loads its typefaces from Google Fonts. As with any externally hosted resource, Google receives your IP address and browser details when the page loads. This is a technical consequence of delivering the page, not a use we make of your information.
8. Sharing your information
We do not sell or rent personal information. We may share it with:
- service providers who help us operate, such as our hosting provider, under confidentiality obligations;
- professional advisers such as auditors and accountants, where necessary; and
- a regulator, court or other authority where the law requires it.
9. Transfers outside South Africa
Some of our service providers may process information outside South Africa. Where that happens, we take reasonable steps to ensure the recipient is subject to laws, binding rules or contractual terms that provide a level of protection substantially similar to POPIA.
10. How long we keep it
We keep personal information only for as long as it is needed for the purpose we collected it for, or for as long as the law requires us to retain it. Enquiry correspondence that does not lead to an engagement is ordinarily removed once it is clear no engagement will follow. Records relating to a completed engagement are retained for the period required by applicable law and our professional obligations, after which they are securely destroyed or de-identified.
11. How we protect it
We apply reasonable technical and organisational measures to protect personal information against loss, damage, unauthorised access and disclosure. These include access controls, encrypted transmission of the site over HTTPS, and restricting access to those who need it. No method of transmission or storage is perfectly secure, but we take our obligations seriously.
12. Your rights
Under POPIA you have the right to:
- be told whether we hold personal information about you, and to request access to it;
- ask us to correct or delete information that is inaccurate, irrelevant, excessive, misleading or unlawfully obtained;
- object to our processing of your information;
- withdraw consent where our processing is based on consent; and
- complain to the Information Regulator.
To exercise any of these rights, contact us using the details below. We may need to verify your identity before we act on a request, and we will respond within a reasonable time.
13. Complaints
If you are not satisfied with how we have handled your personal information, you may complain to the Information Regulator (South Africa):
- Email: complaints.IR@justice.gov.za
- Website: inforegulator.org.za
14. Children
This website is intended for a professional audience and is not directed at children. We do not knowingly collect personal information from children.
15. Changes to this policy
We may update this policy from time to time. The version published on this page, with its "last updated" date, is the current one. Material changes will be reflected here.
16. Contact us
For any question about this policy or your personal information:
- Email: info@bpconsultancy.co.za
- Telephone: +27 61 450 4007
- Business Performance Consultancy, South Africa