Privacy & POPIA

The consultation request form asks for your name, email address, telephone number, preferred date and time, preferred contact method, whether the enquiry is for you personally or for a business, the service area you want to discuss, an optional advisor preference and an optional note.

The form also records that you agreed to information being processed to respond to your request, and separately whether you chose to receive occasional educational updates. The marketing choice is optional and defaults to no.

Please do not enter identity numbers, account numbers, passwords, medical details or other sensitive information into free-text fields.

Information submitted in the consultation request form is collected for one purpose: to allow PWG to review, route and respond to your request. Appointment details are used to consider the requested meeting, and the service area and advisor preference are used to direct the request appropriately.

The website also records basic campaign attribution — the referring source, medium, campaign and landing page — with a submission so PWG can understand how a request arrived. This is used to understand enquiry sources, not to build an advertising profile.

Where you choose to receive educational updates, your contact details may be used to send those updates. You can ask us to stop at any time, and asking us to stop does not affect the handling of your request.

Form submissions are processed by the website server and stored through PWG's Supabase-backed data service. Access controls and database row-level security are configured for application data, but this summary is not a technical security guarantee.

A unique enquiry reference is generated by the database when your request is stored, and is shown to you so you can quote it. Your request is then made available to the PWG team responsible for responding to it, and to the advisor it is routed to.

A notification containing your request details is sent to PWG's internal notification address so the team sees it. Your email address is used as the reply address on that notification so PWG can respond directly to you.

To keep fake, automated and duplicate enquiries out of PWG's pipeline, the website runs an automatic check in the background when you send a request. It is handled by Cloudflare Turnstile and asks you for nothing: there is no email code, no SMS code and no verification link, and you never have to confirm anything yourself.

If the check cannot run, the request is still accepted and is marked for internal review instead of being blocked.

To recognise repeated or automated submissions, the website keeps a short anonymous fingerprint derived from the request. It is one-way, so it cannot be turned back into an internet address, and the website does not store your IP address or details about your device.

A submission that looks automated may be reviewed by the PWG team and rejected with a recorded reason. Genuine repeat enquiries are kept and handled by the same person as before.

Each stored request records the date it was submitted, the consent status, the time consent was captured and the version of the consent wording that applied at the time.

The anonymous fingerprint used for fraud checks is kept for 30 days and is then deleted automatically.

The approved notice must confirm the retention period for each category of record, the criteria used to decide when a record is no longer needed, and how records are securely disposed of. Those operational details have not yet been confirmed here.

Subject to applicable law, you may have the right to request access to the personal information PWG holds about you, to request correction or deletion where that is legally appropriate, to object to certain processing, and to withdraw consent where processing relies on it.

PWG publishes the name of its Information Officer on the Compliance & Client Information page. Requests about your personal information can be directed there using the published contact channel, and the Information Regulator is the body to approach if you believe your information has not been handled correctly.

Do not treat the general website contact channel as a formal privacy-request process until PWG has approved it as such.

The website can record which pages are visited and which actions are taken, such as requesting a consultation or opening a WhatsApp chat. These events are used to understand how the website is used.

No name, email address or telephone number is attached to an analytics event. If an analytics collector is configured, it receives the event name, the page path and the referring page only.

The website also uses MetriCool, an external measurement service, to count the pages visitors read. Nothing is measured until you agree to it in the cookie banner, and the tracker is never loaded on our internal development and testing environments.

Once you agree, the MetriCool tracker sends the address of the page you are viewing, the size of your screen and the site you arrived from. It does not read the consultation request form, it collects no contact details, and it is not used to build an advertising profile.

MetriCool receives this information on servers outside South Africa, so the information is transferred to another country. You can change your choice at any time using the 'Cookie settings' link in the footer, and declining measurement leaves the website fully usable.