Skip to Content

Privacy Policy

Last updated: 23 September 2026

This policy explains how CompassPoint Consulting (Pty) Ltd (2013/112566/07) (“we”, “us”, “our”) collects and uses personal information when you visit https://www.compasspointconsulting.co.za, complete the Let’s Talk form, email or call us, or otherwise deal with us.

We process personal information in line with the Protection of Personal Information Act 4 of 2013 (POPIA). We are a South African business. We do not operate a consumer app, user accounts or paid subscriptions on this website.

This policy is not a substitute for an engagement letter. Client work is covered by the agreement we sign with you.

1. Information officer

Information officer: Michael Muller
Email: michael@compasspointconsulting.co.za
Telephone: +27 72 997 4822
Postal address: 5 Ametis Close, Welgelegen 3, Cape Town, 7500, South Africa

You may complain to the Information Regulator (South Africa) at https://inforegulator.org.za/. Please contact us first so we can try to resolve the matter.

2. What we collect

Depending on how you deal with us, we may collect:

  • Identity and contact details: name, company name, email, telephone, role;
  • Message content you send through Let’s Talk or email;
  • Technical data: IP address, browser type, pages visited, approximate location, device information;
  • Usage data: how you use the Site (for example via cookies or analytics, if enabled);
  • If you become a client: the information needed to deliver the engagement (financial and business information you provide), under that separate agreement.

We do not intend to collect special personal information or information about children. Please do not send us that information through the website.

3. How we collect it

Directly from you: the contact form, email, telephone, meetings, and documents you send.
Automatically: cookies and similar tools when you browse the Site.
From third parties where relevant to an engagement (for example your accountant), with an appropriate basis.

4. Why we use it

We use personal information to:

  • respond to enquiries and decide whether we can help;
  • provide and administer consulting services we have agreed with you;
  • operate, secure and improve the Site;
  • keep records we are required to keep;
  • send service messages (for example confirming we received your form);
  • send occasional professional updates, only where we have a lawful basis and you can opt out.

The usual lawful bases under POPIA are: your consent (form submission and optional marketing), performance of a contract or steps before a contract, compliance with law, and our legitimate interests in running a professional practice — provided those interests do not override your rights.

5. Sharing

We do not sell personal information. We may share it with:

  • service providers who host the Site or email (including Odoo and Microsoft 365) and who process information on our instructions;
  • professional advisers (for example attorneys or insurers) where needed;
  • regulators or courts if the law requires it;
  • a buyer or successor if the practice is transferred, on the same terms as this policy.

6. Hosting outside South Africa

The Site is hosted on Odoo’s platform. Email is hosted on Microsoft 365. That means some information may be stored or processed outside South Africa. We use reputable providers and contractual protections. If you want more detail on a specific transfer, email the information officer.

7. Cookies

The Site may use cookies that are needed for it to work, and may use analytics cookies to understand how the Site is used. You can block cookies in your browser. Some features may then not work as intended.

8. Security and retention

We take reasonable technical and organisational steps to protect personal information. No website or email system is completely secure.

Enquiry data is kept for as long as needed to deal with the enquiry and for a reasonable period afterwards. Client files are kept according to our legal and professional obligations.