Privacy Policy

This Privacy Policy explains how personal information is handled when you use the Ndumi Hadebe website, contact the practice, make an enquiry, or complete an online resource such as the Blind-Spot Discovery.

Questions about this policy or your personal information can be sent to hello@ndumihadebe.com.

Depending on how you use the website, we may collect your name, email address, organisation or company details, enquiry information, booking-related information, assessment responses and scores, consent records, and information you choose to provide in forms.

We may also receive limited technical and usage information needed to operate, secure, measure, and improve the website, such as page activity, referral information, browser or device information, and analytics data where those services are enabled.

If you complete the Blind-Spot Discovery, we process the details you submit so that we can calculate and reveal your result, provide the three-pillar score breakdown, maintain a record of your consent, and send relevant follow-up communications where you have agreed to receive them.

The assessment may use your email domain to classify the submission as an individual or corporate lead. This is used only to route relevant follow-up and does not make an automated decision that produces legal or similarly significant effects about you.

We process personal information only for legitimate and defined purposes, including responding to enquiries, delivering requested resources or assessment results, managing bookings and client relationships, sending communications you have consented to receive, operating and securing the website, improving services, and meeting legal or regulatory obligations.

Where electronic direct marketing requires consent, we will request that consent before sending it. You may withdraw marketing consent or unsubscribe at any time.

Where consent is requested, it must be given through a clear affirmative action. For the Blind-Spot Discovery, the consent checkbox is not selected by default and the assessment cannot be submitted without the required consent.

Withdrawing consent does not affect processing that was lawfully carried out before the withdrawal. You may also object to certain processing where the Protection of Personal Information Act, 2013 (POPIA) gives you that right.

We may use trusted service providers to host the website, deliver email communications, provide analytics, store information, and support website or business operations. They receive only the information reasonably necessary for the service they provide and are expected to protect it appropriately.

We do not sell personal information. We may disclose information where required by law, to protect legal rights or security, or as part of a legitimate business transfer subject to appropriate safeguards.

Some technology or email service providers may process information outside South Africa. Where personal information is transferred across borders, we take reasonable steps to use providers and arrangements that support appropriate protection as required by applicable law.

We keep personal information only for as long as it is reasonably needed for the purpose for which it was collected, to maintain appropriate business records, to resolve disputes, or to meet legal and regulatory requirements. Information that is no longer required will be deleted, de-identified, or securely disposed of where appropriate.

We use reasonable technical and organisational safeguards designed to protect personal information against loss, unauthorised access, misuse, alteration, or disclosure. No internet service can guarantee absolute security, so we also review and improve safeguards as the website and its service providers change.

Subject to POPIA and other applicable law, you may ask whether we hold personal information about you, request access to it, ask for inaccurate or outdated information to be corrected, request deletion where applicable, object to certain processing, or withdraw consent for marketing communications.

To make a privacy request, contact hello@ndumihadebe.com. We may need to verify your identity before acting on a request so that personal information is not disclosed to the wrong person.

If you have a privacy concern, please contact us first so that we can try to resolve it. You also have the right to lodge a complaint with South Africa's Information Regulator.

The Information Regulator provides an online complaints service through its eServices portal. Current general contact channels include helpdesk@inforegulator.org.za, 010 023 5200, and the toll-free number 0800 017 160.

We may update this policy when the website, services, legal requirements, or service providers change. The latest version will be published on this page with its updated date.