Privacy Policy
This Privacy Policy applies to all visitors, prospective clients, and clients who interact with the website operated at eltrivok.site by Mabaso & Vorster Financial Consulting (Pty) Ltd Proprietary Limited (Pty Ltd), trading as Mabaso & Vorster Financial ("the Firm"), and to any personal information collected by the Firm through that website, including through the contact form and the email subscription facility described below. This Policy takes effect from 2026 and governs the processing of personal information in accordance with the Protection of Personal Information Act 4 of 2013 ("POPIA").
What Information Is Collected and How
1. The Firm collects personal information through two principal channels on its website, described individually below.
1.1 The contact form. When a visitor completes the contact form to enquire about the Firm's financial consulting services, the Firm collects the visitor's full name, email address, telephone number, and any additional information the visitor chooses to include in the free-text message field, which may include details of the visitor's financial circumstances or objectives volunteered for the purpose of the enquiry. This information is transmitted to the Firm's designated consulting staff for the sole purpose of responding to the enquiry.
1.2 The email subscription. Where a visitor elects to subscribe to the Firm's email updates, the Firm collects the visitor's email address and, where voluntarily supplied, the visitor's first name, for the purpose of distributing periodic newsletters, market commentary, and notices concerning the Firm's services. Subscription is effected by explicit opt-in action and is not a precondition for using any other part of the website.
1.3 The Firm's website hosting provider automatically logs limited technical information for security and operational purposes, including IP address, browser type, and access timestamps, as further described in the Firm's Cookie Policy.
Legal Basis for Processing
2. The Firm processes personal information only where a lawful basis under POPIA exists.
2.1 Processing of contact form data is undertaken on the basis of consent given by the data subject at the point of submission, and, where the enquiry proceeds to an engagement, on the basis that processing is necessary for the conclusion or performance of a contract with the data subject.
2.2 Processing of email subscription data is undertaken solely on the basis of the data subject's consent, which may be withdrawn at any time as described in section 6 below.
2.3 Processing of technical log data is undertaken on the basis of the Firm's legitimate interest in maintaining the security, integrity, and proper functioning of its website, which interest is not overridden by the interests or fundamental rights of the data subject.
Hosting and Third-Party Processors
3. The website is hosted by a third-party service provider engaged by the Firm under a written processing agreement. That provider processes personal information solely on the Firm's instructions and for the purposes described in this Policy, and is bound to implement appropriate technical and organisational security measures as required by section 20 of POPIA. Where any processor is located outside the Republic of South Africa, the Firm ensures that the processor is subject to a law, binding corporate rules, or a binding agreement that provides an adequate level of protection substantially similar to that afforded by POPIA, in accordance with section 72 of the Act.
Retention of Personal Information
4. The Firm retains personal information only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law, including the Financial Intelligence Centre Act 38 of 2001 and applicable tax and financial services record-keeping requirements. The table below summarises the Firm's standard retention periods.
| Category of Data | Retention Period |
|---|---|
| Contact form enquiries (no engagement follows) | 24 months from date of submission |
| Client records arising from an engagement | 5 years from termination of engagement, or longer where required by financial services or tax legislation |
| Email subscription data | Until the subscriber unsubscribes, plus 30 days for administrative processing |
| Website technical/security logs | 12 months |
Data Subject Rights
5. In accordance with section 5 of POPIA, every data subject whose personal information is processed by the Firm has the right to:
5.1 be notified that personal information about them is being collected;
5.2 establish whether the Firm holds personal information concerning them and to request access to that information;
5.3 request the correction, destruction, or deletion of personal information that is inaccurate, irrelevant, excessive, out of date, incomplete, misleading, or obtained unlawfully;
5.4 object, on reasonable grounds, to the processing of their personal information;
5.5 object to processing for purposes of direct marketing, including the right to opt out of the email subscription at any time by using the unsubscribe link included in every newsletter or by written request to the Firm;
5.6 not be subjected to a decision based solely on automated processing, including profiling, which produces legal or similarly significant effects, noting that the Firm does not currently engage in such automated decision-making; and
5.7 submit a complaint to the Information Regulator of South Africa where the data subject believes their rights under POPIA have been infringed.
How to Exercise These Rights
6. A data subject wishing to exercise any of the rights described above, to withdraw consent, or to unsubscribe from the email distribution list, may do so by contacting the Firm at [email protected] or +27 15 176 5600, or in writing to 47 Biccard Street, Polokwane Business Park, 0700 Polokwane, South Africa. The Firm will respond to any such request within a reasonable period and, in any event, within the time limits prescribed by POPIA. The Firm may request reasonable proof of identity before giving effect to a request in order to protect the data subject's information from unauthorised access.
Complaints to the Regulator
7. Where a data subject is dissatisfied with the manner in which the Firm has processed a request or handled their personal information, they may lodge a complaint with the Information Regulator of South Africa, whose contact details are published at www.justice.gov.za/inforeg. This right exists independently of, and is not a precondition to, any request made directly to the Firm.
Security Measures
8. The Firm implements appropriate technical and organisational measures to safeguard personal information against loss, unauthorised access, interference, modification, destruction, or disclosure, including restricted access controls, encrypted transmission of form submissions, and regular review of its processing arrangements with third-party service providers.
Changes to This Policy
9. The Firm may amend this Policy from time to time to reflect changes in its processing activities or in applicable law. The version published at eltrivok.site at any given time governs the Firm's processing activities, and material changes will be indicated by an updated effective date at the head of this Policy.
Contact
10. Enquiries regarding this Policy or the Firm's processing of personal information should be directed to Mabaso & Vorster Financial Consulting (Pty) Ltd Proprietary Limited (Pty Ltd), 47 Biccard Street, Polokwane Business Park, 0700 Polokwane, South Africa, email [email protected], telephone +27 15 176 5600, registration number 0701787155.