1. Who is responsible
| Responsible party | Letsau Mogale (Pty) Ltd, reg. 2026/750332/07 |
|---|---|
| Information Officer | L J Mogale, Director |
| Address | C37 Cotswold Fenns, 117 Inanda Road, Hillcrest, 3610, KwaZulu-Natal |
| info@letsaumogale.com (subject line “POPIA request”) | |
| Telephone | 072 456 1142 |
This policy explains how we process personal information under the Protection of Personal Information Act, 2013 (POPIA). It applies to this website, our book orders, and our speaking, coaching, programme and mentoring work.
2. What we collect
| When you pre-order or buy | First name, surname, email, mobile number, number of copies, delivery option and delivery address, payment reference, proof of payment you send us. |
|---|---|
| When you pay with Ozow | From Ozow we receive the transaction reference, amount, status and a transaction ID. We never receive your banking login, PIN or OTP. |
| When you take the self-check | Your answers are scored in your own browser and are not sent anywhere. If you ask for your results by email, we receive your first name, email address and scores. |
| When you enquire | Name, email, organisation, enquiry type and whatever you write in your message (for example event dates and audience). |
| When we work with you | Contact details of the people we deal with, invoicing details, and notes needed to deliver the engagement. In coaching, notes about goals and progress that the leader shares with us. |
| When you visit the site | Our web host keeps standard server logs (IP address, browser type, pages requested, date and time) for security and to keep the site running. |
We don’t knowingly collect special personal information (such as health, religious or political beliefs) through the site. Please don’t include it in a message unless it matters to your enquiry. If you do, you consent to us using it for that enquiry only. We don’t knowingly collect information about children; a parent or guardian should order for anyone under 18.
3. Why we use it, and on what basis
| Fulfil your order or engagement | Take and confirm your order, match your payment, deliver the book, issue invoices, deliver the service, handle returns and refunds. Basis: to conclude and perform a contract with you (POPIA s11(1)(b)). |
|---|---|
| Answer your enquiry | Reply to you and prepare a proposal. Basis: steps you asked for before a contract; our legitimate interest in responding. |
| Keep records the law requires | Accounting and tax records. Basis: legal obligation (for example, the Companies Act and the Tax Administration Act). |
| Keep the site and payments secure | Detect fraud, spam and misuse, verify payment notifications. Basis: legitimate interest. |
| News about the book, events and new work | Only if you have said yes. Basis: your consent, which you can withdraw at any time. |
If you don’t give us information we need for an order (for example a delivery address), we can’t complete that order.
4. Who we share it with
We share only what each party needs to do its job, and we require them to keep it secure and confidential (POPIA s20–21). We don’t sell or rent personal information.
| Ozow (South Africa) | Processes instant EFT payments, if you choose to pay that way. |
|---|---|
| Our bank (Capitec) | Receives your EFT payment and the reference you use. |
| Courier company | Your name, delivery address and mobile number, to deliver your parcel. |
| Afrihost (South Africa) | Hosts this website, its server logs and our mailbox. Order, enquiry and self-check forms are received and stored on this server in South Africa, and it runs the scripts that send your confirmation email and process Ozow payment notifications. |
| Our accountant and professional advisers | Financial records, where needed for accounting, tax and legal advice. |
| Authorities | Where the law requires it, for example SARS or a court order. |
5. Information sent outside South Africa
Our website forms are received and stored on our own server in South Africa; we no longer use a foreign form relay. Some of our service providers (for example email or cloud software) may store data in other countries. POPIA (s72) allows this where it is needed to carry out your request or a contract with you, or where you consent, and where the recipient is bound by protections substantially similar to POPIA. The site’s fonts are hosted on our own server, so your visit is not shared with a font service.
6. Cookies and tracking
This website does not set cookies and does not use advertising, analytics or social media tracking. If you pay with Ozow, Ozow’s payment pages may use their own cookies, under their own policy. If we add analytics in future, we will update this policy first and ask for consent where required.
7. How long we keep it
| Orders, invoices and payment records | 7 years from the end of the financial year, as company and tax law require |
|---|---|
| Enquiries that don’t lead to work | Up to 2 years, then deleted |
| Coaching notes | For the engagement plus 1 year, then destroyed, unless the leader asks for earlier deletion |
| Server logs and payment notification logs | Up to 12 months |
| Marketing list | Until you unsubscribe |
After that we delete, destroy or de-identify the information, unless the law requires us to keep it longer or it is needed for a legal claim.
8. How we protect it
- The whole site is served over encrypted HTTPS, with security headers that stop other sites from framing it or injecting content.
- Payment secrets (such as our Ozow private key) are stored on the server outside the public website, never in the page code.
- Payment notifications are checked with a cryptographic signature before we act on them, and amounts are checked against the order.
- Access to our mailbox and records is limited to people who need it, protected by strong passwords and two-step verification where available.
- We will never ask for your banking password, PIN or OTP.
If we believe your personal information has been accessed by someone without authority, we will tell you and the Information Regulator as soon as reasonably possible, as POPIA s22 requires.
9. Your rights
Under POPIA you may:
- ask whether we hold personal information about you, and for a copy of it;
- ask us to correct, update or delete information that is inaccurate, out of date, excessive or unlawfully held;
- object to us processing your information on the basis of legitimate interest, and to direct marketing at any time;
- withdraw consent you have given, without affecting what we did before;
- complain to the Information Regulator.
Email info@letsaumogale.com with the subject “POPIA request”. We may ask you to confirm your identity first. We reply within 30 days. There is no charge for asking whether we hold your information or for correcting it; the PAIA Manual explains the formal request process and any prescribed fees for copies of records.
10. Marketing
We only send news about the book, events or new work if you opt in, or if you bought from us and we offer you similar products or services with a simple way to opt out each time (POPIA s69). Every message tells you how to stop receiving them. We don’t make unsolicited calls or send SMS marketing.
11. Complaints to the Information Regulator
Please contact us first so we can put things right. You also have the right to complain to the Information Regulator (South Africa):
| Website | inforegulator.org.za (complaint forms are available on the site) |
|---|---|
| General enquiries | enquiries@inforegulator.org.za |
12. Changes to this policy
We will update this policy when the way we handle information changes, and show the new date at the top. Significant changes will be highlighted on the site.