Privacy Policy
PRIVACY POLICY
INTRODUCTION
ControlPro (Pty) Ltd (“ControlPro”, “we”, “us”, “our”) is a governance, risk, compliance, and internal audit consultancy founded in 2015 by Director Thirusha Govender, based in Pietermaritzburg, South Africa. Thirusha Govender (CIA, CRMA, CBAP, GTP(SA)) brings over 20 years’ experience across external audit, public-sector internal audit, and business advisory.
At ControlPro, we believe a business is only as strong as its core — the internal systems, controls, and governance that hold everything else together. We partner with businesses and corporates to build that core, through internal audit, GRC advisory, independent reviews, and related services.
The business is subject to various laws protecting the privacy and confidentiality of clients. We are committed to protecting and respecting your privacy. This Privacy Policy describes how ControlPro collects, uses, discloses, retains, and protects your personal information, in accordance with the Protection of Personal Information Act, 2013 (Act 4 of 2013) (POPIA) and other relevant laws.
By using our website, you agree to be bound by the website Terms and Conditions. Please review them carefully before proceeding.
This Privacy Policy applies to any website, application, form, document, product, or service which is referenced in this policy. It also supplements any other privacy policies which may apply in respect of ControlPro and how we process your personal information.
The views and opinions expressed on this website, or any application, form, document, product, or service which is referenced in this notice do not necessarily reflect the views and/or opinions of the business or owners. Regardless of the professional knowledge and expertise the business possesses, it cannot inspect all information to determine the truthfulness, accuracy, reliability, completeness, or relevance thereof.
We reserve the right to update this privacy policy from time to time to reflect any changes in our business or the law. We will publish the updated Privacy Policy on our website at https://controlproconsulting.co.za/.
Any revised versions of the policy will be effective as of the date of posting on the website, so you should always refer to the website for the latest version of the policy. It is your responsibility to make sure you are satisfied with any changes before continuing to use our services. If we make a material change to how we use your personal information, we will provide you with an opportunity to opt out of such new or different use.
You do not need to register in order to visit the website. The main purpose of the website is to provide relevant information about the business to customers and the public, as well as a means for you to get in contact with us — including through the contact form and the Back-Office Health Checklist tool on the website.
POPIA defines personal information as information which relates to an identifiable, living, natural person, and where it is applicable, an identifiable, existing juristic person. This includes, but is not limited to, your name, sex, gender, address, contact details, identity number and medical or health information.
ControlPro Business contact details are as follows:
For more information about ControlPro’s privacy practices, or if you have any questions about this Privacy Policy, please e-mail us on the address indicated below.
E-mail: info@controlpro.works Telephone: 033 386 1302 / 072 028 2046 Website: https://controlproconsulting.co.za/
Information Officer:
Name: Thirusha Govender E-mail: info@controlpro.works Telephone: 033 386 1302 / 072 028 2046
DEFINITIONS
2.1. “Processing” refers to any operation or activity or any set of operations, whether by automatic means, concerning personal information, including — 2.1.1. the collection, receipt, recording, organisation, collation, storage, updating or modification, retrieval, alteration, consultation or use; 2.1.2. dissemination by means of transmission, distribution or making available in any other form; or 2.1.3. merging, linking, as well as restriction, degradation, erasure or destruction of information.
2.2. “Personal information” has the meaning assigned to it in the Protection of Personal Information Act, and “information” has a similar meaning unless the context requires otherwise and includes any information that identifies or relates specifically to you such as your name, age, identity number, contact details, gender, business details, qualifications, and information.
2.3. “POPIA” means the Protection of Personal Information Act, 2013 (Act 4 of 2013), and Regulations made in terms thereof.
2.4. “We” / “us” refers to the business and the business owner/director.
2.5. “You” / “your” refers to the data subject (i.e. the person or entity) whose personal information is in the possession of or under the control of or processed by the business.
CONSENT AND RIGHT TO ACCESS OF PERSONAL INFORMATION
If you provide consent to us to process your personal information, you may withdraw your consent at any time. This does not affect the processing of personal information that has already occurred. If you withdraw your consent, your personal information will only be processed as provided for in the law, and if the circumstances make it reasonable and lawful for us to do so, we may terminate our relationship with you.
You have the right to have access to your personal information subject to restrictions imposed in legislation. You may request access to your information in our possession or under our control and information of third parties to whom we supplied that information.
If you believe that any of the information we have about you is incorrect or out of date, you may request that we correct that information. Your request is however subject to several exceptions allowable by law. If we deny you access to your information, we will provide reasons to you. Costs may be applicable to such requests. If you wish to exercise this right and request access to your details or any personal and private information, please email the Information Officer at info@controlpro.works to request:
3.1. A copy of our Privacy Policy; and/or 3.2. A form requesting access to, or correction of, your information.
COLLECTION AND PROCESSING OF DATA
There are various laws that permit the processing of your personal information, including POPIA, Labour Law, and — where applicable to our accountable institution obligations — the Financial Intelligence Centre Act, 2001 (FIC Act). ControlPro will only process, collect, use, store or disclose your personal information in accordance with the law or otherwise with your consent, and will always strive to keep your information confidential, whether you supply it directly to us or whether it is collected lawfully from other sources. We do not use your personal information for commercial purposes beyond what is described in this policy.
When you become a client of the business, or use our website (including the Back-Office Health Checklist tool), we will use your personal information as follows:
- To provide internal audit, GRC advisory, independent review, training, and related consulting services;
- To communicate with you in respect of your service or quotation requests, including reminding you of appointments;
- For administrative purposes, including preparing invoices, collecting or reminding you of payment due for services rendered;
- For record-keeping purposes;
- Where applicable, to meet our obligations as a Financial Intelligence Centre (FIC) Accountable Institution under the FIC Act — including client identification and verification, screening against sanctions and Politically Exposed Persons lists, and record retention for the periods required by law; and/or
- For any other lawful purpose related to the activities of ControlPro, or as may be requested or authorised by you.
Depending on the circumstances, your personal information will be disclosed to the following persons and entities:
- Employees and service providers who assist us to provide the services and who perform functions related to the administration of the business, subject to confidentiality agreements;
- Debt collection agencies, if your account is outstanding;
- Credit Bureau;
- The Financial Intelligence Centre and other relevant regulators, where required by law;
- As required or permitted by law, including to comply with any legal obligation or to protect the rights, property or safety of our business, employees, customers, the public or others.
ACCURACY OF PERSONAL INFORMATION
It is important that we always have accurate information about you on record as it could impact on communication with you. It is your responsibility to inform us as soon as any of your personal information has changed. You may also request that we correct or delete any information. Such a request must be made in writing to the Information Officer and must provide sufficient details to identify the information and the correction or deletion required. Information will only be corrected or deleted if we agree that the information is incorrect or should be deleted. It may not be possible to delete all of the information if there is a legal basis to retain the information — for example, records we are required to retain under the FIC Act. Please contact the Information Officer via e-mail at info@controlpro.works to discuss how we can assist you with your request. If we correct any information and the corrected information will impact on any decision made or to be made about you, we will send the corrected information to persons to whom the information has been disclosed in the past if they should be aware of the changed information.
In the event that you provide personal information about another individual or entity to us, you must make sure that you may lawfully do so and obtain their consent. By providing us with the information, we will accept that you are acting lawfully. You should make sure that they are familiar with this Privacy Policy and understand how we will use and disclose their information.
PLANNED TRANSBORDER FLOWS OF PERSONAL INFORMATION
The business stores electronic information, including personal information of data subjects, on their computers, laptops, external hard drives, and on the cloud. The business is not planning to send any personal information about any data subject to any third party in a foreign country. Should this be required, relevant data subject consent will be obtained, where required, and transfers of such information will occur in accordance with the requirements of the law. However, the disclosures of information listed above may involve transmitting, storing, or processing information across national borders on the “Cloud.” ControlPro reserves the right to host the website on servers located outside of South Africa, and to perform website analytics. You consent to the transmission of data for these purposes.
In addition, personal information that you submit in the form of, or relating to, comments will be published on the Internet and will be accessible in any location around the world in which there is Internet access.
SECURITY
ControlPro is committed to ensuring the security of all data subjects’ personal information held in its care in order to protect it from unauthorised processing and access, as well as loss, damage or unauthorised destruction. We have implemented and review information protection measures to ensure the security, integrity, and confidentiality of this information in accordance with industry best practices. Only employees and service providers that require access to your information to perform their functions and render services to us are granted access to data subjects’ information, and only if they have signed confidentiality agreements or provided undertakings regarding appropriate security measures, maintaining confidentiality, and processing information only for the agreed purposes.
ControlPro will endeavour to inform both the data subject and the Information Regulator if any person has unlawfully obtained access to their personal information, subject to the provisions of the law.
SOCIAL MEDIA NETWORKING PLATFORMS & THE INTERNET
ControlPro uses social networking platforms such as WhatsApp, LinkedIn, Instagram, YouTube, and Facebook to communicate with the public about its services. When you communicate with us through these platforms, the relevant social networking platform may collect your personal information for its own purposes. These platforms have their own privacy policies, which are independent of ControlPro’s Privacy Policy. Unfortunately, the transmission of information via the internet is not completely secure. Although ControlPro does its best to protect your personal information, we cannot guarantee the security of your data transmitted through any of our platforms.
COOKIES
The ControlPro website uses “cookies” to distinguish you from other visitors to the website, https://controlproconsulting.co.za/, as well as to collect information about the use of the website, your preferences, and past browsing history. This allows us to improve our services and your experience when you use the website again. The cookies do not collect any personal information about data subjects. The information obtained will be shared with persons or entities to the extent necessary for them to administer and improve the website on our behalf.
By using the ControlPro website, you consent to the use of cookies in accordance with this Privacy Policy.
What are cookies? Cookies are small pieces of text sent by a website you visit. A cookie file is stored in your web browser and allows the Service or a third party to recognise you and make your next visit easier as well as the Service being made more useful to you.
We use cookies for the following purposes: – To enable certain functions of the website; – To provide analytics to better understand customer behaviour and needs; and – To store your preferences.
Third-party cookies: We may also use various third-party cookies to report and view analytics of the website or deliver advertisements on and through the website.
If you would like to delete cookies or instruct your web browser to delete or refuse cookies, please visit the help pages of your web browser. Please note, however, that if you delete cookies or refuse to accept them, you might not be able to use all the features on our website, you may not be able to store your preferences, and some of our pages might not display properly.
DIRECT MARKETING
If you have provided us with consent — for example, by completing a contact form or the Back-Office Health Checklist on our website — we may occasionally inform you, electronically or otherwise, about services offered by us that may be useful or beneficial to you. You may at any time withdraw your consent and opt out/unsubscribe from receiving such information.
CHANGING YOUR COMMUNICATION PREFERENCES
We only send information to people who have requested it and will at no time “spam” you. If you have requested information from us in the past, but have now changed your mind, please either click on the “unsubscribe” link in any one of our communications (if available), reply to any of our email messages using the word “unsubscribe” in the subject line, or contact us via the Contact page and leave your details for us to get back to you.
There is no charge associated with being removed from our newsletter or communications list.
CONCERNS AND COMPLAINTS
All enquiries, requests, or concerns regarding this Privacy Policy or relating to the processing of your personal information should be addressed to the Information Officer via e-mail at info@controlpro.works. You may also lodge a complaint with the Information Regulator, at the address below:
The Information Regulator (South Africa) JD House, 27 Stiemens Street, Braamfontein, Johannesburg, 2001 P.O. Box 31533, Braamfontein, Johannesburg, 2017 Complaints email: complaints.IR@justice.gov.za General enquiries email: inforeg@justice.gov.za
COPYRIGHT NOTICE
The contents of this website (including without limitation all articles, blog posts, statements, text, images, logos, and design) belong to ControlPro, unless otherwise stated. All rights are reserved.
LAWS APPLICABLE TO THIS PRIVACY POLICY
This Privacy Policy is governed by the laws of the Republic of South Africa.