Privacy Policy

1. Introduction

PC Quanti (“we”, “us”, or “our”) is an engineering and construction management consultancy. We are committed to protecting your personal information and respecting your right to privacy in accordance with the Protection of Personal Information Act, 2013 (POPIA) of South Africa, the UK General Data Protection Regulation (UK GDPR), and all other applicable data protection legislation.

This Privacy Policy explains how we collect, use, store, share, and protect personal information when you interact with our website pcquanti.co.za and our services.

2. Responsible Party

In terms of POPIA, the responsible party for the processing of your personal information is:

3. Information We Collect

We may collect the following categories of personal information:

3.1 Information You Provide

• Contact details — name, email address, phone number, and company name when you submit our contact form or correspond with us.
• Service enquiry details — the nature of your enquiry and the service area you are interested in.
• Professional information — job title, organisation, and project-related details shared in the course of engagement discussions.

3.2 Information Collected Automatically

• Usage data — pages visited, time spent on our website, referring URLs, and browser type.
• Device information — IP address, operating system, screen resolution, and device type.
• Cookies and analytics — we use analytics tools to understand how visitors use our website. See Section 9 for details.

4. Purpose of Processing

We process personal information only for lawful purposes as permitted under POPIA Section 9–12. These purposes include:

• Responding to your enquiries and providing requested information.
• Communicating with you about our services, proposals, and project engagements.
• Fulfilling our contractual obligations and managing our professional relationship with you.
• Improving our website, services, and user experience through aggregated analytics.
• Complying with legal obligations, including tax, regulatory, and professional requirements.
• Protecting our legitimate interests, including the security of our systems and the prevention of fraud.

5. Legal Basis for Processing

We rely on the following legal grounds under POPIA:

• Consent — where you voluntarily provide your personal information via our contact form or direct communication.
• Contractual necessity — where processing is necessary to perform a contract with you or to take pre-contractual steps at your request.
• Legitimate interest — where processing is necessary for our legitimate business interests, provided your rights are not overridden.
• Legal obligation — where we are required by law to process your information.

6. Sharing of Personal Information

We do not sell, rent, or trade your personal information. We may share your information in the following limited circumstances:

• Service providers — trusted third-party providers who assist us with website hosting, email delivery, form processing, and analytics, bound by appropriate data processing agreements.
• Professional advisors — accountants, auditors, or legal advisors where necessary for the conduct of our business.
• Legal requirements — where disclosure is required by law, regulation, court order, or governmental authority.

7. Cross-Border Transfers

As an international consultancy operating in South Africa and the United Kingdom, your personal information may be transferred to and processed in countries outside of South Africa. Where such transfers occur, we ensure that adequate safeguards are in place in compliance with POPIA Section 72, including:

• Transfers to countries with adequate levels of data protection as recognised by the Information Regulator.
• Binding agreements with recipients that ensure an equivalent level of protection for your personal information.
• Your prior consent where applicable.

8. Data Retention

We retain personal information only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. Our general retention practices are:

• Contact form submissions — retained for up to 24 months after your last interaction, unless an ongoing engagement requires longer retention.
• Contractual records — retained for the duration of the engagement and for a period of 5 years thereafter, or as required by professional and regulatory obligations.
• Analytics data — aggregated and anonymised data may be retained indefinitely for statistical purposes.

When personal information is no longer required, it will be securely deleted or de-identified.

9. Cookies and Analytics

Our website may use cookies and similar tracking technologies to enhance your browsing experience and gather usage statistics. These may include:

• Essential cookies — necessary for the website to function correctly.
• Analytics cookies — used to understand how visitors interact with our website, helping us to improve content and performance.

You can manage your cookie preferences through your browser settings. Disabling cookies may affect the functionality of certain parts of our website.

10. Security

We take reasonable technical and organisational measures to protect your personal information against unauthorised access, loss, destruction, or alteration, in accordance with POPIA Section 19. These measures include:

• Secure HTTPS encryption for all website communications.
• Access controls to limit personal information access to authorised personnel only.
• Regular review of our data processing practices and security measures.

While we strive to protect your personal information, no method of transmission or storage is completely secure. We cannot guarantee absolute security.

11. Your Rights Under POPIA

As a data subject, you have the following rights under POPIA and, where applicable, the UK GDPR:

• Right of access — request confirmation of whether we hold your personal information and obtain a copy of it.
• Right to correction — request that inaccurate or incomplete personal information be corrected or updated.
• Right to deletion — request the deletion or destruction of personal information that is no longer necessary for the purpose for which it was collected.
• Right to object — object to the processing of your personal information on reasonable grounds.
• Right to withdraw consent — withdraw previously given consent at any time, without affecting the lawfulness of processing carried out before withdrawal.
• Right to lodge a complaint — submit a complaint to the Information Regulator of South Africa if you believe your personal information has been unlawfully processed.

To exercise any of these rights, please contact us at info@pcquanti.co.za. We will respond to your request within a reasonable time, and in any event within 30 days as required by POPIA.

12. Information Regulator

If you are not satisfied with our response to your privacy concern, you have the right to lodge a complaint with the Information Regulator of South Africa:

13. Third-Party Links

Our website may contain links to third-party websites, including LinkedIn and WhatsApp. We are not responsible for the privacy practices or content of those external sites. We encourage you to review their privacy policies before providing any personal information.

14. Children's Privacy

Our website and services are directed at businesses and professionals. We do not knowingly collect personal information from children under the age of 18. If we become aware that we have inadvertently collected such information, we will take steps to delete it promptly.

15. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or business operations. Any material changes will be posted on this page with an updated effective date. We encourage you to review this page periodically.

16. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal information, please contact us: