1. Who we are and what this covers
This policy explains what personal information FAB Consultancy collects through https://fabconsultancy.co.za/, what we do with it, and what you can do about it.
FAB Consultancy (“we”, “us”, “me”) is an online business coaching and mentoring practice run by Fiona Byrns in South Africa. We are the “responsible party” for your information under the Protection of Personal Information Act 4 of 2013 (POPIA).
By using this website, you accept this policy. If you don’t agree with it, please don’t submit your details through the site.
Information Officer: Fiona Byrns, [email address to be added]. Registered with the Information Regulator: [registration number, if applicable].
2. What we collect
What you give us. When you join our newsletter or contact us, we collect your name and email address. If you write to us, book a call or become a client, we may also collect your phone number, business name, website, the details of your business and what you want help with, and anything else you choose to tell us.
What we collect automatically. Like most websites, ours records technical data when you visit: your IP address, browser and device type, the pages you view, the date and time, and the page that sent you here. This comes from server logs and cookies (see section 5).
Client work. If we work together, we may handle business information you share, such as account access, website content, customer lists and campaign data. We only use it to do the work you’ve asked for.
We don’t knowingly collect special personal information (health, religion, race, political views, criminal record, biometrics) through this site, and please don’t send any.
3. How and why we use it
POPIA lets us process personal information only on a lawful ground (section 11). These are the ones we rely on:
| What we do | Why | Lawful ground |
|---|---|---|
| Reply to your enquiry and book calls | You asked us to | Needed to take steps at your request / contract |
| Deliver coaching, mentoring and client work | To do what we agreed | Performance of a contract |
| Send the newsletter and offers | You signed up and can leave any time | Your consent (and POPIA section 69 on direct marketing) |
| Keep the site working and secure, understand what’s used | Running the business | Our legitimate interests |
| Keep invoices and records | Tax and company law | Legal obligation |
We don’t use your information for automated decision-making, and we don’t sell it.
4. Who we share it with
We share your information only with service providers who process it for us (called “operators” in POPIA) and who are bound to keep it confidential and secure. At the moment these are:
- GoHighLevel, the platform that hosts this website and runs our forms, email, scheduling and CRM.
- Email and calendar tools we use to reply to you and book meetings.
- Payment and accounting providers, if you buy something from us.
- Analytics providers, if we have analytics switched on (see section 5).
We may also disclose information if the law requires it, for example to SARS, a court or the Information Regulator, or to protect our rights. If the business is ever sold or restructured, your information may move to the new owner, who must honour this policy.
We never sell or rent your information to anyone.
5. Cookies, tracking and email
Cookies are small files your browser stores when you visit a site. We use essential cookies to make the site and forms work. We may also use analytics or advertising cookies, such as Google Analytics or a Meta pixel, to see which pages are useful and to measure campaigns. [Confirm which of these are live on the site before publishing.]
You can block or delete cookies in your browser settings. The site will still work, though some features like forms and booking may not.
Every marketing email has an unsubscribe link. Click it and you’re off the list. You can also email us and we’ll remove you. We’ll still send service messages that relate to work you’ve hired us for.
6. Information leaving South Africa
Our platform providers, including GoHighLevel, store and process data on servers outside South Africa, mainly in the United States. We also work with clients in the US and Canada. POPIA section 72 allows this where the recipient is bound by law, binding rules or an agreement that gives your information protection substantially similar to POPIA, or where you consent or it is needed to perform a contract with you. We choose providers who meet that standard.
7. How long we keep it and how we protect it
We keep your information only as long as we need it for the reason we collected it, or as the law requires. In practice: newsletter subscribers until they unsubscribe, enquiries for up to 24 months if they don’t lead to work, and client and financial records for five years after the work ends. After that we delete or anonymise it.
We protect it with reasonable technical and organisational measures: password-protected accounts, two-factor login where available, encrypted connections (HTTPS), and limited access. No system is perfectly secure. If there is a breach that puts your information at risk, we will tell you and the Information Regulator as POPIA section 22 requires.
8. Your rights
Under POPIA you can:
- ask us to confirm whether we hold information about you, and ask for a copy;
- ask us to correct or delete information that is wrong, out of date, incomplete or that we no longer have a reason to keep;
- object to us processing your information, including for direct marketing;
- withdraw consent at any time (this doesn’t undo what we did before you withdrew);
- complain to the Information Regulator (section 9).
To use any of these, email us at [email address to be added]. We may need to confirm who you are first, and we’ll reply within a reasonable time, normally 30 days.
Visitors from the US and Canada. If you live in California, you have the right under the CCPA to know, delete and correct your personal information, and to opt out of its sale or sharing; we don’t sell or share it for cross-context advertising. Canadian residents have similar access and correction rights under PIPEDA. Use the same email address and we’ll deal with it.
9. Complaints, children, changes and contact
Complaints. Please talk to us first so we can fix it. If you’re still unhappy, you can complain to the Information Regulator (South Africa): complaints.IR@justice.gov.za, https://inforeg.org.za/.
Children. This site is for business owners and adults. We don’t knowingly collect information from anyone under 18. If you think a child has sent us their details, tell us and we’ll delete them.
Other sites. The site may link to other websites, such as GoHighLevel, social media and client sites. We aren’t responsible for their privacy practices.
Changes. We’ll update this policy when how we handle information changes, and show the new date at the top. Continued use of the site after that means you accept the update.
Contact. FAB Consultancy, Fiona Byrns (Information Officer), [email address], [postal or physical address], South Africa.