Legal and compliance
Privacy Notice
Effective 1 January 2027
1. Who we are
InfraVerity Advisory (Pty) Ltd ("InfraVerity", "we", "us") is the responsible party for personal information collected through this website. Our company details are on the Legal page.
2. Information we collect
| Source | Information |
|---|---|
| Enquiry form | Name, organisation, role, email, telephone, enquiry type, other parties involved and your outline of the matter |
| Email and telephone | Any information you choose to send us |
| Website analytics | Pages visited, time on site, device and browser type, and a shortened IP address. We use cookieless analytics and cannot identify you from this data. |
| Security and server logs | IP address, date and time of access, and pages requested, used only to keep the site secure |
3. Information about other parties
The form asks for the other organisations involved in your matter. We use this only to check for conflicts of interest. Please give organisation names, not individuals' personal details, wherever possible.
4. What not to send
Please do not send confidential or privileged information, or special personal information such as health or criminal records, through this website. We ask for the detail we need once we have confirmed we have no conflict.
5. Why we use your information
| Purpose | Lawful basis (POPIA, section 11) |
|---|---|
| Checking for conflicts of interest | Our legitimate interest in acting independently |
| Responding to your enquiry and discussing a possible appointment | Steps you have asked us to take before a contract |
| Keeping the website secure and working | Our legitimate interest |
| Understanding how the website is used | Our legitimate interest, using data that does not identify you |
We do not use enquiry details for marketing, and we do not sell personal information.
6. Who we share it with
We share personal information only with service providers who process it for us under written agreements:
- Our website host, in South Africa.
- Microsoft, which provides our email.
- Our website support provider, where they need access to maintain the site.
We may disclose information where the law requires it.
7. Transfers outside South Africa
Our email provider may process information outside South Africa. We use it only under terms that give protection comparable to POPIA, as section 72 requires.
8. How long we keep it
| Information | Retention |
|---|---|
| Enquiry form entries on the website | Deleted after 30 days |
| Enquiry emails that do not lead to an appointment | Three years from our last contact, for conflict checks, then deleted |
| Enquiries that lead to an appointment | Kept under the terms of that appointment |
| Analytics data | Twelve months |
| Security and server logs | Twelve months |
9. Security
We use encrypted connections, restricted access, two-factor authentication and regular backups to protect your information. If we believe your information has been compromised, we will notify you and the Information Regulator as POPIA requires.
10. Your rights
You may ask us to:
- Confirm whether we hold your personal information, and give you a copy.
- Correct or delete information that is inaccurate, out of date or no longer needed.
- Stop processing your information, where you object on reasonable grounds.
Requests for records follow the process in our PAIA Manual. We may need to verify your identity first.
11. Cookies
This website sets only the cookies it needs to work. See our Cookie Notice.
12. Children
This website is not intended for children, and we do not knowingly collect their information.
13. Contact and complaints
Information Officer: Hloso Fuyana Pr Tech Eng, info@infraverity.com.
If you are not satisfied with our response, you may complain to the Information Regulator:
- Website: inforegulator.org.za (complaints are lodged through the eServices portal)
- Email: POPIAComplaints@inforegulator.org.za
14. Changes to this notice
We may update this notice. The current version and its effective date always appear on this page.