Muzamani (Pty) Ltd (“Muzamani”, “we”, “us”, “our”) is committed to protecting the personal information of everyone who interacts with our website and services. This Privacy Policy explains what personal information we collect, why we collect it, how we use and protect it, and the rights available to you under the Protection of Personal Information Act, 2013 (POPIA).

1. Who We Are

Muzamani (Pty) Ltd is an independent audit, IT audit, and governance, risk and compliance (GRC) advisory firm, [registration number], with its registered office in [city/province], South Africa. For the purposes of POPIA, Muzamani (Pty) Ltd is the responsible party for the personal information described in this policy.

2. Information We Collect

We collect personal information in the following ways:

Contact and enquiry information — when you use our contact form or email us directly, we collect your name, organisation, email address, phone number, engagement type selected, and the content of your message.
Website usage information — [confirm and list: e.g. IP address, browser type, pages visited, via Google Analytics or similar, if analytics is/will be installed].
Newsletter or Insights subscription information — if you subscribe to receive articles or updates, we collect your name and email address.
Training and engagement information — if you book training or engage us for an audit/advisory service, we collect the information necessary to deliver that engagement, which may include organisational and role information relevant to the scope of work.

3. Why We Process Your Information

We process personal information for the following purposes, and on the following legal bases under POPIA:

To respond to enquiries and scope engagements — necessary for taking steps at your request prior to entering into an agreement.
To deliver contracted audit, advisory, or training services — necessary for the performance of a contract with you or your organisation.
To send Insights articles or updates you have subscribed to — based on your consent, which you may withdraw at any time.
To improve our website — based on our legitimate interest in understanding how our site is used, balanced against your privacy rights. [Remove or amend this row if no analytics tool is in use.]
To comply with legal, regulatory, or professional obligations — including record-keeping obligations arising from audit and assurance engagements.

4. How We Share Your Information

We do not sell personal information. We may share personal information with:

Service providers who support our operations — e.g. website hosting, email delivery, and [any CRM, form processor, or analytics tool actually used] — under contractual confidentiality obligations.
Professional or regulatory bodies, where required for compliance with audit, IIA, or ISACA professional obligations.
Legal or regulatory authorities, where required by law.

We do not share client engagement information with third parties beyond what is necessary to deliver the engagement, and always subject to the confidentiality terms of our engagement agreements.

5. International Transfers

Muzamani delivers engagements to clients across South Africa, Zimbabwe, the wider SADC region, and internationally. Where personal information is transferred outside South Africa — for example, in connection with an international or NGO client engagement — we take reasonable steps to ensure it receives a level of protection substantially similar to that required under POPIA, including through contractual safeguards where appropriate. [This section should be reviewed and strengthened by legal counsel if international engagements are a material part of the business, given cross-border transfer requirements can differ materially by jurisdiction.]

6. Data Retention

We retain personal information only for as long as necessary for the purposes described in this policy, or as required by applicable professional, tax, or legal record-keeping obligations relevant to audit and assurance work [confirm specific retention period — audit working papers are often subject to a defined minimum retention period under professional standards; state it explicitly once confirmed]. Contact form enquiries that do not proceed to an engagement are retained for [confirm period, e.g. 12 months] and then deleted.

7. Security

We take reasonable technical and organisational measures to protect personal information against loss, unauthorised access, alteration, or disclosure, consistent with the standards of confidentiality and information security we apply in our own audit and cybersecurity advisory work.

8. Your Rights Under POPIA

Subject to applicable law, you have the right to:

Access the personal information we hold about you
Request correction of inaccurate or outdated personal information
Request deletion of personal information, subject to our legal and professional retention obligations
Object to processing based on legitimate interest, including direct marketing
Withdraw consent at any time, where processing is based on consent (e.g. Insights subscription)
Lodge a complaint with the Information Regulator of South Africa if you believe your information has been processed unlawfully

To exercise any of these rights, contact us using the details in Section 10 below.

9. Cookies

[Confirm before publishing: does the live site use cookies for analytics, embedded content, or any tracking tool? If yes, list the specific cookies/tools and add a cookie consent banner; if no, state plainly that the site does not use tracking cookies. Do not leave this section generic — it should reflect what the site actually does.]

10. Contact Us

For any questions about this Privacy Policy, or to exercise your rights under POPIA, contact:

David Muzamani Chauke, CIA, CISA, MBA — Muzamani (Pty) Ltd

Contact page →

Information Regulator (South Africa): [inspectorate contact details / JDinfo@inforegulator.org.za or current published contact — confirm current details before publishing]

11. Changes to This Policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top of this page reflects the most recent revision. Material changes will be reflected on this page.