Privacy Policy

1. Who is responsible for your personal information

Debbie Pretorius is the responsible party for personal information processed through this website and the related employee healthcare benefits consulting enquiry process. Questions, objections, correction requests, or deletion requests may be sent to the privacy contact at debbie.pretorius@psg.co.za.

2. The personal information we collect

Depending on how you use the website, we may collect:

• Your name, work email address, telephone number, and preferred contact method.
• Your company name, job title or role, workforce size, and province or operating location.
• Your selected service, business enquiry, and employee healthcare benefit challenge.
• Your Benefits Fit Check answers, score, result, and related assessment information.
• Your request for the HR Benefits Toolkit and the consent recorded with that request.
• Technical information needed to operate, secure, and diagnose the website, such as request and device information that may be recorded by hosting or security services.
• Correspondence and records created when you contact Debbie or continue with a consultation.

3. How information is collected

We collect personal information when you:

• Request a consultation.
• Complete the Benefits Fit Check.
• Request or download the HR Benefits Toolkit.
• Contact Debbie by email, telephone, or another communication channel.
• Continue with a consultation or business relationship.

The website may also process limited technical information automatically where this is necessary for delivery, security, and reliable operation.

4. Why we process personal information

Personal information may be processed to:

• Respond to enquiries and contact you about the business request you submitted.
• Provide the requested assessment result, toolkit, consultation, or related service information.
• Understand your organisation’s employee healthcare benefit requirements.
• Manage prospective and existing client relationships and maintain appropriate records.
• Communicate relevant follow up information where permitted by law.
• Operate, protect, troubleshoot, and improve the website and its forms.
• Comply with applicable legal, regulatory, professional, and record keeping obligations.
• Establish, exercise, or defend legal rights.

We process information on one or more lawful grounds recognised by the Protection of Personal Information Act 4 of 2013, including your consent, steps taken at your request before entering into an agreement, performance of an agreement, compliance with legal obligations, and legitimate interests that do not unjustifiably interfere with your privacy.

5. Consent and direct marketing

Where we rely on consent, you may withdraw it at any time. Withdrawing consent does not affect processing that was lawful before the withdrawal, or processing permitted on another lawful basis.

Electronic direct marketing will be sent only where permitted by POPIA. Every marketing communication will provide a reasonable way to opt out. You may also object at any time by contacting the privacy contact above.

6. When information is shared

We may share personal information only where necessary with:

• Authorised staff, representatives, and professional advisers who require it for the stated purposes.
• Service providers that support website hosting, form processing, customer relationship management, communications, security, and technical operations.
• Medical schemes, insurers, gap cover providers, or other product and service providers when you request an evaluation, quotation, recommendation, or implementation, and where the disclosure is appropriate and lawful.
• Regulators, public authorities, courts, or other parties where disclosure is required or permitted by law.

Service providers are expected to process information only for authorised purposes and to apply appropriate confidentiality and security measures. We do not sell personal information.

7. Cross border processing

Some technology or service providers may process or store information outside South Africa. Where personal information is transferred across a border, reasonable steps will be taken to ensure that the transfer complies with POPIA, including section 72, and that an appropriate level of protection applies.

8. Retention

Personal information is retained only for as long as reasonably necessary for the purpose for which it was collected, to manage the relationship, to meet legal or regulatory requirements, or to establish, exercise, or defend legal rights. When information is no longer required, it will be deleted, destroyed, or deidentified where reasonably practicable and legally permitted.

9. Security

Reasonable technical and organisational safeguards are used to protect personal information against loss, damage, unauthorised destruction, unlawful access, or unauthorised processing. No internet transmission or storage system can be guaranteed to be completely secure. If a security compromise affecting your information occurs, notification will be made where POPIA requires it.

10. Your rights

Subject to POPIA and other applicable law, you may:

• Ask whether we hold personal information about you and request access to it.
• Request correction or deletion of inaccurate, irrelevant, excessive, outdated, incomplete, misleading, or unlawfully obtained information.
• Object to processing in the circumstances allowed by law.
• Withdraw consent where processing is based on consent.
• Object to direct marketing and request that marketing communications stop.
• Lodge a complaint with the Information Regulator.

We may need to verify your identity before acting on a request. Some requests may be limited by applicable law, lawful retention duties, or the rights of other people.

11. Cookies and browser storage

The website may use essential browser storage or similar technology to support requested functions, such as carrying limited form submission information to a confirmation page. Website hosting and security services may also use strictly necessary technologies to deliver and protect the site.

If you select “Allow analytics”, the website uses first party browser storage and a randomly generated visitor identifier to measure visits, sessions, pages viewed, referral source, campaign parameters, device category, and approximate country. The analytics system does not store your name, email address, form answers, or IP address. Analytics information is used to understand website performance and improve content and campaigns. You can decline analytics when the choice is shown. Advertising tracking technologies are not used by this analytics system.

12. External links

The website may link to third party websites or resources. Their privacy practices are governed by their own notices. Please review those notices before providing personal information to a third party.

13. Information Regulator

If you believe your personal information has been processed contrary to POPIA, you may lodge a complaint through the Information Regulator’s eServices Portal. The Regulator can be contacted at enquiries@inforegulator.org.za or 010 023 5200. Visit the official complaints pagefor current submission information.

14. Changes to this policy

This policy may be updated when processing practices, services, or legal requirements change. The current version and effective date will be published on this page.