Introduction
Welcome to PISA Consulting. We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, store, and protect personal information gathered through our coaching, mentoring and consulting services — including client records, assessments, proposals and related business documentation — and how we comply with applicable data protection laws. This includes South Africa’s Protection of Personal Information Act, 4 of 2013 (POPIA) and, where we process the personal information of individuals located in the European Union or United Kingdom, the General Data Protection Regulation (GDPR/UK GDPR).
Information We Collect
We may collect and process the following types of personal information:
- Contact Information: Your name, email address, phone number, postal address, employer and job title.
- Client Information: Information shared during coaching, mentoring or consulting engagements, including background and context you provide, notes taken during sessions, correspondence, and records of the services delivered to you or your organisation.
- Assessment Data: Responses, scores, reports and results generated through PISA self-assessment and diagnostic tools (for example, problem-solving, leadership, team, emotional intelligence, conflict management and related assessments), together with any interpretive notes prepared for you.
- Proposals and Business Documentation: Information contained in proposals, engagement letters, contracts, statements of work, invoices and other business records created in connection with our services to you or your organisation.
- Website and Social Media Usage Data: Non-personal and, where applicable, personal information such as IP addresses, browser type, device information and usage patterns collected when you visit our website or interact with our social media platforms.
Legal Basis for Processing
We only process your personal information where we have a lawful basis to do so. Depending on the circumstances, this may include:
- Consent: You have given clear consent for us to process your personal information for a specific purpose.
- Performance of a Contract: Processing is necessary to deliver the coaching, mentoring or consulting services you or your organisation have engaged us for, including preparing proposals and conducting assessments.
- Legitimate Interests: Processing is necessary for our legitimate business interests — such as maintaining client records and improving our services — provided this does not override your rights and interests.
- Legal Obligation: Processing is necessary to comply with a legal or regulatory obligation to which we are subject.
How We Use Your Information
We use your personal information for the following purposes:
- Service Delivery: To provide, administer and improve our coaching, mentoring and consulting services, including preparing proposals, conducting assessments, and communicating with you.
- Assessment Interpretation: To score, interpret and report on assessment tools, and to tailor coaching or consulting recommendations based on the results.
- Business Administration: To prepare and manage proposals, contracts, invoices and related records.
- Communication: To send you information about our services or relevant updates.
- Website Improvement: To improve and personalise your experience on our website or social media platforms.
- Legal Compliance: To comply with legal requirements and to protect our rights and safety.
How We Store and Safeguard Your Information
Client information, assessment data, and proposals or other business documentation are stored using access-controlled digital systems and, where applicable, secure physical files. Access is limited to personnel who require it to deliver our services or to meet legal and administrative requirements. Assessment results and client records are kept separate from general marketing information wherever practicable, and are only shared internally on a need-to-know basis.
Consent
By engaging our coaching, mentoring or consulting services, completing an assessment, receiving a proposal, or visiting our website or social media platforms, you consent to the collection and use of your personal information as described in this Privacy Policy.
Data Security
We take reasonable technical and organisational measures to protect your personal information, including client records, assessment data and business documentation, against unauthorised access, disclosure, alteration, loss and destruction.
International Transfers of Information
Where personal information is transferred outside of South Africa (for example, using cloud-based storage or service providers located in other countries, including the European Union or United Kingdom), we take reasonable steps to ensure the information continues to receive an adequate level of protection, consistent with the requirements of POPIA and, where applicable, the GDPR/UK GDPR.
Data Subject Rights
Subject to applicable law, you have the right to:
- Access: Request confirmation of, and access to, the personal information we hold about you, including assessment results and client records.
- Rectification: Request correction of inaccurate or incomplete personal information.
- Erasure: Request deletion of your personal information, subject to our legal and legitimate business record-keeping requirements.
- Restriction and Objection: Request that we restrict or object to certain processing of your personal information.
- Portability: Where applicable under the GDPR/UK GDPR, request that we provide your personal information in a structured, commonly used, machine-readable format.
- Withdraw Consent: Withdraw consent at any time, where processing is based on consent, without affecting the lawfulness of processing before withdrawal.
- Lodge a Complaint: Lodge a complaint with the South African Information Regulator or, for individuals in the European Union or United Kingdom, with the relevant supervisory authority.
To exercise any of these rights, please contact us at admin@pisaconsulting.com.
Third-Party Disclosure
We do not sell, trade, or otherwise transfer your personal information to third parties without your consent. We may share client information, assessment data or proposal details with service providers, sub-contractors or associates who assist us in delivering our coaching, mentoring or consulting services, subject to appropriate confidentiality and data protection commitments.
Data Retention
We retain client information, assessment data, proposals and related business documentation for as long as necessary to fulfil the purposes described in this Privacy Policy, to maintain a professional record of the services provided, and to comply with applicable legal, tax and regulatory requirements. Where information is no longer needed for these purposes, we take reasonable steps to securely delete or anonymise it.
Information Officer
In accordance with POPIA, PISA Consulting Services cc has designated an Information Officer responsible for ensuring compliance with this Privacy Policy and applicable data protection law. Any queries, requests or complaints regarding the processing of your personal information can be directed to the Information Officer at admin@pisaconsulting.com Paul Finnigan, Registration Number: 2026-065815.
Changes to Privacy Policy
We may update this Privacy Policy to reflect changes in our practices or legal requirements. The most recent version will be posted on our website with the last updated date.
Contact Information
If you have any questions or concerns about this Privacy Policy, please contact us at admin@pisaconsulting.com.