Privacy Policy

This Privacy Policy applies to visitors to herlegacy.co.za and to anyone who submits a consultation or corporate enquiry through the forms on this website. It sits alongside our POPIA Policy, which sets out your rights under the Protection of Personal Information Act in more detail, and our Website Terms of Use.

Her Legacy Consulting is a business consultancy. This website exists to describe our services and to allow prospective clients to request a consultation. We do not operate an online store, a client portal or any service that requires ongoing account creation.

We collect personal information only when you choose to submit it through a form on this website, principally the consultation request form and the corporate enquiry form. The fields we ask for are limited to what is needed to respond to your enquiry properly.

To keep the enquiry forms usable and free of spam, we use a lightweight arithmetic question that a human can answer in a moment, together with rate limiting that restricts how many submissions can be made from the same source in a short period.

To apply that rate limiting, we generate a one way cryptographic hash of a fingerprint derived from the visitor's IP address at the moment a form is submitted. This hash cannot practically be reversed to reveal the original IP address. We do not store your raw IP address, and the hash is used only to detect unusual submission patterns, not to identify or track you as an individual across the site.

We use the information you submit for the following purposes only.

Information submitted through our forms is stored in the website's own database. We do not sell, rent or trade personal information, and we do not use the information you submit for third party marketing or advertising purposes. We do not share your information with third parties except where necessary to operate the website itself, such as a hosting or transactional email provider acting on our instructions, or where we are required to do so by law.

We retain enquiry information for as long as is reasonably necessary to respond to your enquiry, to maintain a record of the engagement if you become a client, and to meet any legal, accounting or reporting obligations that apply to us. Where information is no longer needed for these purposes, it is deleted or de-identified.

We take reasonable technical and organisational measures to protect the personal information in our care against loss, unauthorised access, alteration or disclosure. No system can be guaranteed completely secure, but we review our practices as our website and processes evolve.

You have rights over the personal information we hold about you, including the right to ask what information we hold, to have it corrected if it is inaccurate, and to ask that it be deleted where we are not required to keep it. These rights, and how the Protection of Personal Information Act applies to our processing, are set out fully in our POPIA Policy.

The simplest way to exercise any of these rights is to tell us through our consultation form, describing what you would like us to do. We do not publish a phone number or email address for enquiries of this kind; the form is our single channel for all correspondence, including privacy requests.

We may update this Privacy Policy from time to time as our website or our processes change. The date at the top of this page reflects the version currently in effect. We encourage you to review it periodically.