Introduction and Our Commitment to Privacy
At KRT Financial Consultants (Pty) Ltd, we are deeply committed to protecting the privacy and security of the personal information of our clients and all visitors to our website, https://krtconsultants.co.za.
As a financial service provider, we understand the sensitive nature of the financial and professional information we handle. This policy explains how we comply with the Protection of Personal Information Act (POPIA) of South Africa and other relevant regulations regarding the collection, use, disclosure, and protection of your personal information.
1. Information We Collect
We collect information necessary to provide our consulting services, manage your professional relationship with us, and process payments. We classify the data we collect into two categories:
A. General Personal Information (POPIA Section 1)
This data is collected when you request a consultation, register on our site, or make an inquiry:
-
Identifiers: Names, Email Address, Phone Number, Mailing Address.
-
Professional Details: Company name, job title, and nature of your inquiry.
-
Transaction Data: Payment Information (processed securely by third-party processors, where applicable).
-
User Account Details: Login credentials and screen display choices (if you register an account).
B. Sensitive Financial Information (POPIA Section 26)
As a financial consultancy, we may collect private financial, tax, or proprietary business information when you become a client. This is treated with the highest level of security and confidentiality:
-
Financial Records: Income statements, tax information, balance sheets, and investment details.
-
Proprietary Business Data: Client-specific data necessary for providing strategic advice.
2. How We Use and Justify Your Information
We use your personal information only for the specific purposes for which it was collected, or for a legitimate legal reason:
We will never sell or rent your personal information, including sensitive financial information, to third parties for marketing purposes.
3. Disclosure and Sharing of Your Information
We may share your personal information with the following parties, strictly on a need-to-know basis and subject to stringent confidentiality agreements:
-
Internal Personnel: Consultants, administrative staff, and IT personnel who require access to provide services.
-
Third-Party Processors: Service providers who assist us with processing payments, delivering products, or providing technical customer support (e.g., outsourced accounting or IT providers).
-
Professional Referrals: Other professionals (auditors, legal counsel, specialist advisors) as required for the provision of advice, and only with your knowledge or implied consent.
-
Legal/Regulatory: When legally required to comply with a subpoena, court order, or to fulfill our duties under POPIA or other South African legislation (e.g., SARS requirements).
4. Website-Specific Data Handling
The following details explain how data is managed specifically through the use of our website:
Comments and Spam Detection
When visitors leave comments, we collect the data shown in the comments form, the visitor’s IP address, and browser user agent string to aid in automated spam detection. An anonymized string (hash) from your email may be checked by the Gravatar service (see their policy: https://automattic.com/privacy/). Approved comments will display your profile picture publicly alongside your comment.
Cookies
We use cookies to manage your site experience:
-
Comment Cookies: If you opt-in, cookies store your name, email, and website for one year for convenience when leaving follow-up comments.
-
Login Cookies: Temporary cookies are set when you visit our login page, discarded upon closing your browser. Login cookies last two days, and screen options cookies last a year. Selecting “Remember Me” extends the login duration to two weeks.
-
Tracking: We may also use non-essential cookies to analyze website traffic and improve user flow. You may manage or opt-out of these cookies through your browser settings.
Embedded Content and External Links
Articles on this site may include embedded content (e.g., videos, images) from other websites. This content behaves as if you visited the other site directly. These external sites may collect data about you, use their own cookies, and track your interaction, especially if you have an account and are logged in to that third-party service.
5. Your POPIA Rights
You have the following rights regarding the personal data we hold about you:
-
Right of Access: You can request to receive an exported file of the personal data we hold about you.
-
Right of Rectification: You have the right to request that we correct or update any incomplete or inaccurate data.
-
Right of Erasure (“Right to be Forgotten”): You can request that we erase any personal data we hold about you. Note that this right does not apply to any data we are legally obliged to keep for administrative, legal, or security purposes (e.g., financial audit trails, regulatory files).
-
Right to Object: You have the right to object to the processing of your personal information for direct marketing purposes.
If you leave a comment, the comment and its metadata are retained indefinitely for continuity, but you may request its removal. For registered users, we store the information provided in your user profile and you may see, edit, or delete most of it at any time.
6. Data Security and Breach Notification
We take reasonable technical and organizational measures to protect your personal information from unauthorized access, loss, misuse, or alteration. However, no data transmission over the internet can be guaranteed to be 100% secure.
In the unlikely event of a security breach that affects your personal information, we will notify you and the Information Regulator in accordance with the requirements of POPIA.
7. Changes and Contact
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by posting the new Privacy Policy on our website.
If you have any questions or concerns about this Privacy Policy, your POPIA rights, or our use of your personal information, please contact us:
-
Designated Contact: The Information Officer
-
E-mail: info@krtconsultants.co.za
(This Privacy Policy was last updated on 10/11/2025.)
