Privacy policy
How we handle personal information, and what you can require of us under the Protection of Personal Information Act.
Draft: awaiting legal review. It states what the website actually does, but the retention periods, the information officer's details and the operator arrangements must be confirmed by Trevor and reviewed by an attorney before launch.
Who we are
TGM Group is the responsible party for the personal information described here. You can reach us at info@trevorgmenyatsogroup.co.za or 081 517 1016.
Information officer: Siyabonga Dube, registered with the Information Regulator on 13 August 2025 under registration number 2025-060527. Write to the address above, or email info@trevorgmenyatsogroup.co.za marked for their attention.
What we collect
We collect two kinds of information, and no more than that.
- What you send us. If you complete the enquiry form or email us, we receive your name, work email address, organisation, the problem category you selected and anything you wrote in the message field.
- What the website records. This site is static and carries no advertising trackers, no analytics cookies and no third-party scripts. Our host keeps standard server logs, which include IP addresses, for security and availability purposes.
We do not use cookies for tracking. We do not build profiles. We do not sell or rent personal information to anyone, under any circumstances.
Why we hold it, and for how long
We use what you send to respond to your enquiry, to prepare for a diagnostic and, if we go on to work together, to run the engagement. That is the whole purpose.
Retention: enquiries that do not lead to work are kept for 24 months and then deleted. Records relating to an actual engagement are kept for the period South African law requires for business records ([confirm period with accountant]) and then deleted.
Who else sees it
Two third parties handle your information on our instruction. Both act as operators under POPIA and are bound to protect it.
- Formspree (Formspree, Inc.) processes our enquiry form. When you submit it, what you typed is transmitted to and stored on Formspree's servers in the United States, and forwarded to our email address.
- Our email provider. Mail sent to our published address is handled by the mail platform attached to our domain registration. [Name the email host and its country]
Transfer outside South Africa
Because Formspree stores submissions in the United States, using the enquiry form transfers your personal information outside South Africa. Section 72 of POPIA permits this where the data subject consents to the transfer, and the consent checkbox on the form is that consent. It is required rather than optional for exactly that reason: without it there is no lawful basis to send your details abroad, so the form will not accept a submission without it.
If you would prefer your information stayed in South Africa, do not use the form. Email or telephone us instead, using the details in this policy, and say so.
Your rights
Under POPIA you may, at any time and at no cost:
- Ask what personal information we hold about you
- Ask us to correct anything that is wrong
- Ask us to delete it, where we are not required to keep it
- Object to our processing it
- Complain to the Information Regulator if you are not satisfied with how we responded
Email info@trevorgmenyatsogroup.co.za and we will respond within 30 days. Our PAIA manual sets out the formal access procedure.
Security
We take reasonable technical and organisational steps to protect personal information. This website is served over HTTPS only. If a breach affecting your information occurs, we will notify you and the Information Regulator as POPIA requires.
Changes
If this policy changes materially we will say so on this page and update the date below.
Last updated: [Date of legal sign-off]