Privacy Policy

This website is operated by Elevyn Enablement (registration number 2018/616974/07), referred to in this policy as “Elevyn”, “we” or “us”. Elevyn Enablement is the responsible party, as defined in the Protection of Personal Information Act, 2013 (POPIA), for personal information collected through this website. This policy explains what we collect, why, and the choices you have.

We collect information you choose to give us, and limited technical information when you use the site:

• Contact details such as your name, work email address, phone number, company and job title.
• Information you provide about your organisation and project when you complete a form.
• Technical and usage information — such as pages visited, approximate location derived from your IP address, browser and device type — but only if you accept analytics cookies.

We do not ask for special personal information (such as health, religious or biometric information) and ask you not to include it in forms.

• To respond to enquiries and consultation requests — processing is necessary to take steps you have asked for before any agreement is concluded, and is based on the consent you give when submitting the form.
• To send Elevyn HCM development updates — only if you register interest, based on your consent, which you may withdraw at any time.
• To understand and improve how the website is used — only with your consent to analytics cookies.
• To keep the website secure and working — based on our legitimate interest in operating a safe, reliable website.

We do not sell personal information, and we do not use it for direct marketing without your consent.

With your consent, this website uses Google Analytics for Firebase to understand how visitors use the site — for example, which pages are viewed and how people move between them. Analytics only loads after you choose “Accept analytics” in the cookie banner. If you decline, no analytics cookies are set.

• Analytics cookies set by Google (names beginning with _ga) to distinguish visitors and sessions.
• A record of your choice, stored in your browser’s local storage, so we don’t ask again on every visit.

Analytics data is retained by Google for 14 months and then deleted automatically. You can change your choice at any time using “Cookie settings” at the bottom of every page; Google’s handling of analytics data is also governed by Google’s own privacy terms.

When you submit a form, the information is checked in your browser and sent to Web3Forms, a form delivery service that forwards it to us by email so that our team can respond. We ask for your consent before submission and only request the information needed to reply.

Information you submit through our forms is delivered to us by email via Web3Forms and kept in our business email system. If you accept analytics, usage data is processed and stored by Google.

Some of these service providers store or process information outside South Africa. Where personal information is transferred across borders, we only use providers that are subject to laws, binding corporate rules or agreements that provide an adequate level of protection, as required by section 72 of POPIA.

We apply reasonable technical and organisational measures to protect personal information against loss, damage, misuse and unauthorised access, and we will notify you and the Information Regulator if we become aware of a security compromise affecting your information, as POPIA requires.

We use the following providers (operators, in POPIA terms) to run this website. They process information on our behalf and under our instructions:

• Google Firebase — website hosting, and analytics with your consent.
• Web3Forms — delivery of form submissions to us by email.
• Our business email provider — storage of enquiries and correspondence.

We keep personal information only for as long as we need it for the purposes above, unless a longer period is required by law:

• Enquiries and consultation requests: up to 24 months after our last contact with you. If your enquiry leads to a business relationship, the information is then kept for the period required by that relationship and our legal and tax obligations.
• Elevyn HCM interest registrations: until you ask to be removed, or 24 months after the last update we sent you, whichever comes first.
• Analytics data: 14 months, after which Google deletes it automatically.
• Your cookie choice: stored in your own browser until you clear it or change it using “Cookie settings”.

When information is no longer needed, we delete or de-identify it.

Under POPIA, you have the right to:

• ask whether we hold personal information about you, and request access to it;
• ask us to correct, update or delete information that is inaccurate, out of date or no longer needed;
• object to the processing of your personal information on reasonable grounds;
• withdraw your consent at any time, without affecting processing that took place before you withdrew it;
• lodge a complaint with the Information Regulator (South Africa) at inforegulator.org.za.

To exercise any of these rights, email hello@elevyn.co.za. We may need to verify your identity before acting on a request, and we will respond within a reasonable time.

We may update this policy from time to time, for example when we add new services or providers. The latest version will always be published on this page. This version is effective from 18 October 2026.

For privacy questions, requests or complaints, contact the Information Officer of Elevyn Enablement at hello@elevyn.co.za, or use our contact form.

Elevyn Enablement · Registration number 2018/616974/07