Privacy Policy

Effective Date: 19 August 2026

1. Introduction

Prenessa Pillay Consulting ("Prenessa Pillay Consulting", "we", "us" or "our") respects your privacy and is committed to protecting the personal information entrusted to us.

This Privacy Policy explains how we collect, use, store, protect and otherwise process personal information when you visit our website, contact us, enquire about our services or engage with us.

We process personal information in accordance with the Protection of Personal Information Act 4 of 2013 ("POPIA") and other applicable South African laws.

2. Who is Responsible for Your Personal Information?

For purposes of POPIA, Prenessa Pillay Consulting is the Responsible Party in respect of personal information that we process and for which we determine the purpose and means of processing.

For privacy-related enquiries or requests concerning your personal information, please contact us at the email address above.

3. Personal Information We May Collect

Depending on how you interact with us, we may collect personal information such as:

• name and surname;
• company or organisation;
• job title or professional role;
• email address;
• telephone number where voluntarily provided;
• information contained in an enquiry or other communication;
• information provided when requesting a discovery call;
• information relevant to a potential or existing consulting engagement;
• correspondence between you and Prenessa Pillay Consulting; and
• limited technical information generated through your use of our website, where applicable.

We aim to collect only personal information that is reasonably necessary for a specific and legitimate purpose.

4. How We Collect Personal Information

We may collect personal information directly from you when you:

• contact us by email;
• submit an enquiry through our website;
• request a discovery call;
• communicate with us about our services;
• provide information in connection with a potential or existing consulting engagement; or
• otherwise voluntarily provide information to us.

Where permitted by law, we may also receive relevant professional or business information from referrals, professional networks, clients, service providers or publicly available sources.

5. Why We Process Personal Information

We may process personal information for purposes including:

• responding to enquiries;
• arranging meetings or discovery calls;
• understanding your project or business requirements;
• assessing potential consulting engagements;
• preparing proposals, quotations or agreements;
• providing consulting and advisory services;
• managing client and business relationships;
• communicating with you regarding existing or potential engagements;
• maintaining appropriate business, financial and administrative records;
• complying with applicable legal, regulatory, accounting or tax obligations;
• protecting our legitimate business interests and legal rights;
• operating, maintaining and securing our website; and
• improving our services and client experience.

We will not process personal information for purposes that are incompatible with the purpose for which it was originally collected, unless permitted or required by law.

6. Lawful Processing

We process personal information in accordance with the conditions for lawful processing set out in POPIA.

Depending on the circumstances, processing may be based on:

• your consent;
• taking steps at your request prior to entering into an agreement;
• the conclusion or performance of an agreement;
• compliance with a legal obligation;
• protecting a legitimate interest of a data subject; or
• pursuing our legitimate interests, where permitted by law.

We will process personal information only where we have a lawful basis to do so.

7. Sharing Personal Information

Prenessa Pillay Consulting does not sell personal information.

We may share personal information where reasonably necessary with:

• technology, hosting, communications or other service providers;
• professional advisers, such as legal or accounting advisers;
• contractors or service providers involved in delivering an agreed service;
• regulatory, governmental or law-enforcement authorities where required or permitted by law; or
• other parties where you have authorised us to do so.

Where third parties process personal information on our behalf, we take reasonable steps to ensure that appropriate confidentiality, security and data-protection obligations apply.

8. International Transfers

Some technology, hosting, cloud, communications or other service providers used by us may process or store personal information outside South Africa.

Where personal information is transferred outside South Africa, we will take reasonable steps to ensure that the transfer complies with the applicable requirements of POPIA.

POPIA specifically regulates the transfer of personal information outside the Republic and sets conditions under which such transfers may take place.

9. Information Security

We take reasonable and appropriate technical and organisational measures to protect personal information against:

• loss or damage;
• unauthorised destruction;
• unlawful access;
• unauthorised processing; and
• unauthorised disclosure.

The safeguards we use are intended to be appropriate to the nature of the personal information we process and the risks associated with that processing.

If a security compromise occurs that requires notification under POPIA, we will take the appropriate steps required by law, including notifying the Information Regulator and affected data subjects where applicable.

10. Retention of Personal Information

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected, or for as long as required or permitted by applicable law.

Retention periods may depend on:

• the nature of the information;
• the purpose for which it was collected;
• contractual obligations;
• legal and regulatory requirements;
• tax and accounting requirements; and
• the establishment, exercise or defence of legal rights.

When personal information is no longer required, we will take reasonable steps to securely delete, destroy or de-identify it where appropriate.

11. Cookies and Website Analytics

Our website may use cookies or similar technologies that are necessary for website functionality, security and performance.

If we use analytics, tracking or other technologies that collect personal information, we will provide appropriate information about their use and obtain consent where required by applicable law.

You may also control or disable certain cookies through your browser settings. Disabling certain cookies may affect some website functionality.

This section will be updated if necessary to accurately reflect the cookies, analytics or other technologies actually implemented on our website.

12. Direct Marketing

We process personal information for direct marketing in accordance with POPIA.

Where consent is required for unsolicited electronic direct marketing, we will obtain the required consent.

Where POPIA permits direct marketing to existing customers under the applicable conditions, we will provide an appropriate opportunity to object to further marketing communications.

You may request that we stop sending direct marketing communications at any time by contacting: contact@pillayconsulting.co.za

Any direct marketing communication sent electronically will identify the sender and provide an appropriate means for the recipient to request that further communications cease.

This reflects POPIA's specific requirements for electronic direct marketing under section 69.

13. Your Rights

Subject to applicable law, you may have the right to:

• request confirmation of whether we hold personal information about you;
• request access to personal information that we hold about you;
• request correction or updating of inaccurate or incomplete information;
• request deletion or destruction of personal information where permitted by law;
• object to certain processing of your personal information;
• withdraw consent where processing is based on your consent;
• object to or opt out of direct marketing; and
• lodge a complaint with the Information Regulator.

We may need to verify your identity before processing certain requests.

POPIA provides data subjects with rights relating to access, correction, deletion, objection and other aspects of the processing of their personal information.

14. Information About Other People

If you provide us with personal information relating to another person, you should ensure that you are authorised to provide that information and that the person concerned has been appropriately informed about the processing of their personal information where required by law.

15. Third-Party Websites

Our website may contain links to third-party websites or services.

These websites and services operate independently of Prenessa Pillay Consulting and may have their own privacy policies and terms.

We are not responsible for the privacy practices or content of third-party websites. We encourage you to review the applicable privacy policy before providing personal information to a third party.

16. Information Regulator

If you have concerns about how we process your personal information, we encourage you to contact us first so that we have an opportunity to address your concern.

You also have the right to lodge a complaint with the Information Regulator of South Africa.

The Information Regulator is the independent authority responsible for monitoring and enforcing compliance with POPIA and PAIA.

The Information Regulator's current published contact details can be found on its official website.

17. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our services, website, technology, business practices or applicable legal requirements.

The latest version will be published on this website with the applicable effective date.

18. Contact Us

If you have any questions about this Privacy Policy, wish to exercise a right relating to your personal information, or have a POPIA-related enquiry, please contact us: