Privacy Policy

Last updated: February 1 2026

1. Introduction

This Privacy Policy explains how Almah Enterprise Pty Ltd (“the Firm”, “we”, “us”) collects, uses, stores, and protects personal information in accordance with the Protection of Personal Information Act, 4 of 2013 (POPIA).

We are committed to safeguarding personal information and ensuring that all data processing activities are lawful, reasonable, and transparent.

2. Responsible Party

For the purposes of POPIA, Almah Enterprise Pty Ltd, incorporated under the laws of the Republic of South Africa, is the Responsible Party in respect of all personal information processed through our website, digital platforms, payment systems, and professional engagements.

3. Personal Information We Collect

We may collect and process the following categories of personal information:

3.1 Information Provided Directly by You

Full name

Company or organisation name

Email address

Telephone number

Billing and invoicing details

Payment confirmation details (excluding full card numbers)

Information submitted through contact forms or service enquiries

3.2 Automatically Collected Information

IP address

Browser type and device information

Website usage data (pages visited, session duration)

Cookies and similar technologies

3.3 Professional Engagement Information

Where applicable, we may process information shared in the course of consulting engagements, including business, financial, or operational information provided voluntarily by clients.

4. Payment Information

All payment transactions are processed securely by third-party Payment Service Providers (PSPs) and acquiring banks.

We do not store full card numbers, CVV codes, or sensitive authentication data

Payment data is handled in accordance with PCI-DSS standards by our PSP

We receive only limited transaction references required for reconciliation and record-keeping

5. Purpose of Processing

We process personal information for the following lawful purposes:

To provide and deliver professional consulting services

To communicate with clients regarding services and engagements

To process payments and issue invoices

To comply with legal, regulatory, and contractual obligations

To improve website functionality and user experience

To prevent fraud, abuse, or unauthorised transactions

6. Lawful Basis for Processing

Personal information is processed on one or more of the following lawful grounds:

Performance of a contract

Compliance with legal obligations

Legitimate business interests

Consent, where required by law

7. Disclosure of Personal Information

We may disclose personal information only where necessary and only to:

Payment Service Providers and acquiring banks

Professional advisors (legal, accounting, compliance)

Regulatory authorities where required by law

Service providers who support our website or systems, under confidentiality obligations

We do not sell, rent, or trade personal information to third parties.

8. Cross-Border Data Transfers

Where personal information is processed or stored outside South Africa, we ensure that:

The recipient jurisdiction provides adequate data protection, or

Appropriate contractual safeguards are in place

9. Data Retention

Personal information is retained only for as long as necessary to:

Fulfil the purposes for which it was collected

Comply with legal and regulatory obligations

Resolve disputes and enforce agreements

Once no longer required, information is securely deleted or anonymised.

10. Data Security Measures

We implement appropriate technical and organisational safeguards to protect personal information, including:

Secure hosting environments

Access controls and authentication measures

Encryption where appropriate

Limitation of access to authorised personnel only

Despite best efforts, no system can be guaranteed 100% secure.

11. Cookies and Tracking Technologies

Our website may use cookies to improve functionality and analytics.

You may manage or disable cookies through your browser settings. Disabling cookies may affect website performance.

12. Data Subject Rights

In accordance with POPIA, data subjects have the right to:

Access their personal information

Request correction or deletion

Object to processing in certain circumstances

Withdraw consent where applicable

Lodge a complaint with the Information Regulator

Requests may be submitted to info@almah-enterprise.com.

13. Mandatory Disclosure

Where personal information is required by law or contract, failure to provide such information may limit our ability to provide services.

14. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of such sites.

15. Changes to This Policy

We reserve the right to update this Privacy Policy from time to time. Changes will be published on our website with an updated effective date.

16. Contact Information

For privacy-related queries or requests, please contact:

Almah Enterprise Pty Ltd

Email: info@almah-enterprise.com

17. Acceptance

By using our website or engaging our services, you acknowledge that you have read and understood this Privacy Policy.