Privacy Policy

Our commitment to your privacy

Archer Consulting (Pty) Ltd ("Archer Consulting", "we", "us", or "our") is committed to protecting the personal information of all individuals with whom we interact. This Privacy Policy explains how we collect, use, store, and protect your personal information in accordance with the Protection of Personal Information Act 4 of 2013 ("POPIA") and any applicable regulations.

By accessing our website at archer-grp.com or engaging our services, you acknowledge that you have read and understood this Privacy Policy.

Responsible party

The responsible party for the processing of your personal information is:

Personal information we collect

We may collect the following categories of personal information when you contact us, engage our services, or use our website:

• Identifying information — your full name, job title, and the organisation you represent
• Contact information — email address, telephone number, and postal or business address
• Correspondence — the content of emails, enquiries, or messages you send to us
• Professional information — your role, industry, and the nature of advisory services you require
• Technical information — IP address, browser type, and pages visited on our website (collected via standard server logs)

We do not collect sensitive personal information (as defined in POPIA) unless strictly required and with your explicit consent.

Purpose of processing

We process your personal information only for the following lawful purposes:

• To respond to your enquiries and provide the advisory services you have requested
• To fulfil our contractual obligations and manage our engagement with you
• To comply with applicable legal and regulatory obligations
• To send relevant service-related communications where you have consented or where we have a legitimate interest in doing so
• To improve our website and the quality of our services
• To maintain accurate business records

We will not process your personal information for any purpose incompatible with those listed above without your prior consent.

Lawful basis for processing

We process your personal information on one or more of the following lawful grounds under POPIA:

• Consent — where you have voluntarily provided your information and agreed to its use
• Contract — where processing is necessary to perform our obligations under a contract with you
• Legitimate interest — where we have a legitimate business reason that does not override your rights
• Legal obligation — where we are required to process your information to comply with applicable law

Sharing of personal information

We do not sell, rent, or trade your personal information. We may share your information only in the following limited circumstances:

• With trusted service providers who assist us in operating our business (such as email hosting or cloud storage providers), under strict confidentiality obligations and only to the extent necessary
• With professional advisors such as attorneys or accountants, where required
• Where required by law, court order, or a competent regulatory authority
• With your explicit consent

Any third party with whom we share your personal information is required to treat it with the same level of protection we apply, in accordance with POPIA.

Retention of personal information

We retain personal information only for as long as is necessary to fulfil the purpose for which it was collected, or as required by law. Client records are generally retained for a period of five years following the conclusion of an engagement, in line with standard professional and statutory requirements. Where information is no longer required, it is securely deleted or anonymised.

Security

We implement reasonable technical and organisational measures to protect your personal information against unauthorised access, disclosure, alteration, or destruction. These include access controls, encrypted communication channels, and restricted internal access to personal data.

While we take data security seriously, no method of transmission over the internet is completely secure. We encourage you to exercise care when transmitting sensitive information electronically.

Cookies and website analytics

Our website may use standard server logs to collect anonymised technical data such as IP addresses, browser types, and pages visited. This information is used solely to maintain and improve the performance of our website and is not linked to any identifiable individual.

We do not currently use tracking cookies or third-party analytics platforms. Should this change, this Privacy Policy will be updated accordingly.

Your rights as a data subject

Under POPIA, you have the following rights in relation to your personal information:

• Right of access — to request a copy of the personal information we hold about you
• Right to correction — to request that inaccurate or outdated information be corrected
• Right to deletion — to request that your personal information be deleted, subject to legal retention requirements
• Right to object — to object to the processing of your personal information on grounds relating to your particular situation
• Right to withdraw consent — to withdraw any consent you have given at any time, without affecting the lawfulness of prior processing
• Right to complain — to lodge a complaint with the Information Regulator of South Africa if you believe your rights have been infringed

To exercise any of these rights, please contact our Information Officer at info@archer-grp.com. We will respond within a reasonable time and in accordance with applicable law.

Information Regulator

If you are not satisfied with how we have handled your personal information, you have the right to lodge a complaint with the Information Regulator of South Africa:

Updates to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal obligations, or regulatory requirements. The effective date at the top of this page will be revised accordingly. We encourage you to review this page periodically. Continued use of our website or services following any update constitutes acceptance of the revised policy.

Questions or concerns

If you have any questions about this Privacy Policy or how we handle your personal information, please contact our Information Officer: