Privacy Policy & Data Protection Notice

1. Responsible Party & Commitment to POPIA

ConsultX (Pty) Ltd (“ConsultX”, “we”, “us”, or “our”) is committed to protecting your privacy in strict compliance with the Protection of Personal Information Act, 4 of 2013 (POPIA) and the Promotion of Access to Information Act, 2 of 2000 (PAIA).

This Privacy Policy explains how we collect, process, store, and protect personal and financial information when you interact with our website (consultx.co.za), engage our AI advisory assistant (“Ask AnNa”), generate service quotes, or transact through our payment channels.

2. Information We Collect

We collect information that you voluntarily provide to us when scoping services, requesting quotes, or onboarding as a client:

• Contact & Identity Information: Full name, business email address, contact telephone number, and company name.
• Operational & Financial Metrics: Monthly transaction volumes, staff headcount, turnover bracket, balance sheet scale, and accounting software used (e.g. Xero, Sage, QuickBooks), necessary to produce binding service quotes.
• Statutory Compliance Details: Company registration numbers, CIPC filing details, and tax reference numbers when specifically requested for formal service execution.
• Transactional Records: Service selection, quotation reference numbers, date and time stamps of accepted proposals, and payment status.

4. Cookies, Local Storage & Tracking Technologies

We do NOT use invasive third-party cross-site advertising cookies or tracking pixels.

• Strictly Necessary & Functional State: We utilize first-party browser session storage and secure local storage to retain your active chat dialogue, diagnostic inputs, and quote items during your site visit so your session is not lost if you navigate between pages.
• Privacy-Preserving Aggregate Analytics: We collect aggregate, anonymized website navigation data (pages visited, device type, country) to evaluate site performance without associating IP addresses or browsing histories with personal identities.

5. Payment Processing Security (Paystack & Banking)

All electronic payments (credit card, debit card, Capitec Pay, and Instant EFT) are processed via our accredited payment partner, Paystack Payments (Pty) Ltd, a registered financial services provider certified to PCI-DSS Level 1 (the highest global standard for payment security).

ConsultX never collects, processes, or stores your raw credit card numbers, CVV security codes, or banking login credentials.

6. Your Statutory Rights Under POPIA

Under Sections 23 to 25 of POPIA, you have the right to:

• Request confirmation of whether we hold personal information about you.
• Request access to the record of your personal information.
• Request the correction, updating, or destruction of personal information that is inaccurate, irrelevant, excessive, or unlawfully retained.
• Object to the processing of your personal information on reasonable grounds.