1. Who We Are

Cyrusgrace Consultancy provides professional consulting, organisational development and workplace training services.

For purposes of applicable data protection legislation, Cyrusgrace Consultancy is responsible for the processing of personal information collected through our website and related business activities.

If you have questions about this Privacy Policy or how we process personal information, you can contact us at:

info@cyrusgraceconsultancy.co.za

2. Personal Information We Collect

The personal information we collect depends on how you interact with Cyrusgrace Consultancy.

Workshop Registration

When you register for a workshop through our website, we collect information including:

• First name and surname
• Email address
• Telephone or mobile number
• Organisation or company name
• Selected workshop
• Selected workshop location
• Selected workshop date

We also process information relating to your registration and payment, including the amount payable, payment reference and payment status where applicable.

Contact and Enquiry Information

When you submit an enquiry through our website, we collect:

• First name and surname
• Email address
• Telephone or mobile number
• Your message or enquiry

We may also receive other personal information that you voluntarily include in your communication with us.

We aim to collect personal information that is reasonably necessary for the purpose for which it is collected.

3. How We Collect Personal Information

We may collect personal information when you:

• register for a workshop through our website;
• submit a contact or enquiry form;
• communicate with us by email or other communication channels;
• make or arrange a payment for our services; or
• otherwise voluntarily provide information to us in connection with our services.

Where reasonably practicable, personal information is collected directly from the individual to whom it relates.

4. How We Use Personal Information

We may use personal information for purposes including:

• processing and managing workshop registrations;
• communicating with registered participants;
• responding to enquiries and requests;
• confirming workshop details;
• processing and reconciling payments;
• providing our services;
• maintaining business and transaction records;
• managing our relationship with customers and participants;
• communicating important information relating to a service or registration;
• complying with applicable legal and regulatory obligations;
• protecting the security and integrity of our website and services; and
• addressing complaints, disputes or other legitimate business matters.

We will not use personal information for purposes that are incompatible with the purpose for which it was collected, except where permitted or required by applicable law.

5. Lawful Processing

Cyrusgrace Consultancy processes personal information in accordance with applicable data protection legislation.

Depending on the circumstances, the processing of personal information may be necessary to:

• provide a service or perform an agreement with you;
• respond to a request or enquiry;
• administer a registration or payment;
• comply with a legal or regulatory obligation;
• protect legitimate business interests; or
• obtain your consent where consent is required.

We aim to process personal information lawfully, reasonably and in a manner that respects the privacy of the individual.

6. Workshop Registration and Payments

When you register for a paid workshop, Cyrusgrace processes information necessary to administer your registration and payment.

Payments made through our website are processed using Paystack, a third-party payment service provider.

When a payment is initialized, information necessary to process and identify the transaction is transmitted to Paystack. This includes the email address associated with the registration, payment amount, currency and payment reference. Registration information such as your name, surname, telephone number, organisation, selected workshop, location and session date may also be transmitted to Paystack as transaction metadata.

Cyrusgrace does not require you to provide your full card number, card security code or other card-payment credentials directly to us through our website. Payment details entered during the payment process are handled through Paystack's payment platform.

After a successful payment, Cyrusgrace verifies the transaction and records the completed registration in its business records. These records may include your name, surname, email address, telephone number, organisation, workshop, location, session date, payment reference, payment status and the date and time of payment.

We may also use this information to confirm your registration, administer the workshop, reconcile payments, maintain transaction records and communicate with you regarding your registration.

7. Sharing Personal Information

We do not sell or rent your personal information.

We may disclose or share personal information where reasonably necessary to operate our business, provide our services, process payments, respond to enquiries or comply with legal obligations.

This may include sharing information with:

• payment service providers such as Paystack;
• website, hosting or technical service providers where necessary to operate our website and systems;
• professional advisers where reasonably necessary;
• regulatory, governmental or law-enforcement authorities where required or permitted by law; and
• other parties where disclosure is authorised or required by applicable law.

Where appropriate, we will take reasonable steps to ensure that third parties processing personal information on our behalf maintain appropriate confidentiality and security measures.

8. Email and Other Communications

We may use the contact details you provide to:

• respond to enquiries;
• communicate about workshop registrations;
• confirm registration details;
• provide payment or transaction-related information;
• communicate changes to workshop arrangements; and
• provide other important information relating to a service you have requested.

Where we send promotional or marketing communications, we will provide an appropriate means of opting out where required by applicable law.

9. Information Security

Cyrusgrace Consultancy takes reasonable technical and organisational measures to protect personal information against unauthorised access, loss, misuse, alteration, disclosure or destruction.

These measures may include access controls, secure website connections, restricted access to business systems and other safeguards appropriate to the nature of the information being processed.

However, no method of transmitting or storing information electronically can be guaranteed to be completely secure.

10. Retention of Personal Information

We retain personal information for as long as reasonably necessary for the purpose for which it was collected, to provide our services, to administer workshop registrations, to maintain appropriate business and transaction records, or where retention is required or permitted by applicable law.

For example, contact enquiries may be retained in our business systems, and completed workshop registrations may be retained together with associated payment and transaction records.

We do not currently specify a fixed retention period for all categories of personal information because the appropriate retention period may depend on the nature and purpose of the information and applicable legal or business requirements.

When personal information is no longer required, we will take reasonable steps to securely delete, destroy or de-identify it where appropriate and where permitted by applicable law.

11. Your Rights

Subject to applicable law, you may have rights relating to your personal information, including the right to:

• request access to personal information we hold about you;
• request correction of inaccurate or incomplete personal information;
• request deletion or destruction of personal information where legally applicable;
• object to certain forms of processing;
• withdraw consent where processing is based on consent; and
• lodge a complaint regarding the processing of your personal information.

Requests relating to personal information should be sent to:

info@cyrusgraceconsultancy.co.za

We may need to take reasonable steps to verify your identity before responding to certain requests.

12. Complaints

If you believe that your personal information has been processed unlawfully or that your privacy rights have been infringed, we encourage you to contact us first so that we can investigate and attempt to resolve the matter.

You may also have the right to lodge a complaint with the Information Regulator of South Africa, which is responsible for monitoring and enforcing compliance with POPIA.

Further information about the Information Regulator and its complaint process is available through the official Information Regulator website.

13. Third-Party Websites and Services

Our website may contain links to websites or services operated by third parties, including payment service providers.

Cyrusgrace Consultancy is not responsible for the privacy practices, security or content of third-party websites or services.

Where you are directed to a third-party service, we recommend reviewing that provider's privacy policy and terms before providing personal information.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our services, website, legal requirements or information-processing practices.

The updated version will be published on our website with a revised effective date.