Privacy Policy (POPIA Compliant)
1. Introduction and Data Controller Designation
Hedges & Partners (Pty) Ltd ("we", "our", or "the Firm"), operating as an Authorized Financial Services Provider (FSP Licence No. 58193) located at Suite 402, Sovereign House, 42 Hans Strijdom Ave, Cape Town, 8001, South Africa, stands as the designated Responsible Party (Data Controller) pursuant to the Protection of Personal Information Act No. 4 of 2013 (POPIA).
2. Scope and Consent Protocols
This Policy covers all systematic user interactions, website navigation, form submissions, and direct digital communications. By completing any inquiry form, you actively represent and grant consent for the legal processing of your metrics.
3. Data Elements Collected
We collect: (a) Explicit details including name, business registration number, professional physical address, active email, and cell networks. (b) Automatic session statistics (IP logs, browser cookies, viewport metrics). (c) Third-party demographic evaluations.
4. Core Processing Lawful Foundations
We process your data strictly under valid POPIA processing guidelines, represented in this comprehensive schedule:
| Purpose of Processing | Categories of Elements Used | Lawful POPIA Ground |
|---|---|---|
| Onboarding Evaluation | Name, verified phone, financial projections, email target | Section 11(1)(b) - Contractual negotiation prep |
| FSP Statutory Audits | FICA identification validation details, legal records | Section 11(1)(c) - Compliance with statutory duty |
| Analytical Optimization | Anonymized browser logs, analytical metrics cookies | Section 11(1)(f) - Legitimate commercial interests |
5. External Sharing and Structural Transfers
Hedges & Partners does not execute business involving selling client metrics. Shared actions are restricted to: (a) External regulatory desks including the FSCA or SARS inside legal actions. (b) Trusted software vendors ensuring operations remain intact. (c) Secured offshore cloud hosting vaults located within jurisdictions proving equal data-protection compliance rules.
6. Mandatory Data Retention Lifespan
In accordance with the Financial Advisory and Intermediary Services Act (FAIS), we systematically store FICA records and transactional portfolios for a minimum period of 5 (five) years post-retrenchment of relevant business actions, after which data is scrubbed securely.
7. Your Rights under POPIA
You hold the full legal rights to: access stored assets, prompt corrections of faulty numbers, demand structural deletion of records (subject to FSP licensing constraints) and block direct promotional targeting. All formal petitions should route via email to our focal officer: [email protected].
Should you perceive that your personal data has been handled in breach of the law, you reserve the right to file an official complaint with the South African Information Regulator: JD House, 27 Stiemens Street, Braamfontein, Johannesburg, 2001 (Email: [email protected]).
8. Minors Safeguarding Policy
Our financial advisory frameworks do not address or record information pertaining to individuals below the age of 18 (eighteen).