1. Introduction

We respect your privacy and are committed to protecting the personal information you share with us. This Privacy Notice explains how we collect, use, disclose, and safeguard your personal information in accordance with the Protection of Personal Information Act, 2013 (POPIA) and other applicable South African laws.

This Notice applies to all persons with whom we interact, including clients, training participants, prospective clients, suppliers, website visitors, and business partners.

2. Who We Are

Ample Vista (Pty) Ltd is a South African-based firm specialising in risk and compliance consulting and offering an e-learning platform for professional training. For purposes of this Notice, we are the “responsible party” in terms of POPIA.

3. What Personal Information We Collect

We collect personal information that is relevant to the nature of our services and your interaction with us. This may include:

• Identification and contact details: name, surname, ID/passport number, email address, phone number, physical address, and employer details.
• Professional and business details: job title, company name, professional memberships, industry, services rendered or received.
• Financial and billing information: banking details, payment information, invoicing contact details.
• Technical data: website usage data, IP address, cookies and similar technologies.
• Special personal information (only when necessary): such as dietary requirements, health conditions (e.g., for accessibility at events), and, in limited cases, information related to criminal records or demographic data if required for due diligence or compliance.

We will only collect special personal information where required by law or where we have your explicit consent.

4. How We Collect Your Information

We collect personal information:

• Directly from you when you contact us, request services, register for training, attend events, or visit our website.
• From third parties such as your employer, public databases, credit bureaus, professional networks, or marketing partners.
• Automatically through your interaction with our website and communications.

If you provide us with someone else's personal information, please ensure that you have their consent and that they are informed of this Notice.

5. Why We Process Your Information

We use your personal information for the following purposes:

• To deliver services: manage engagements, provide training and consulting services, issue certificates, and support your use of our platform.
• To comply with legal obligations: tax, contractual and regulatory compliance.
• To manage our business: including communication, invoicing, administration, event management, and relationship management.
• For marketing and communication: to share updates, newsletters, invitations to events or training (with an option to opt-out at any time).
• To improve our website and services: monitor and analyse usage and trends to improve user experience.

Where necessary, we rely on your consent, our legal obligations, or our legitimate interests as the lawful basis for processing.

6. Who We Share Your Information With

We only share your information where necessary and in accordance with POPIA, including with:

• Our employees, contractors, and service providers are bound by confidentiality obligations.
• Professional advisors, legal or regulatory authorities, and external auditors.
• Technology and training partners (e.g., hosting or webinar platforms).
• Third-party platforms used for payment, e-learning delivery or analytics.
• Any third party as required by law, court order or legal process.

Some of these recipients may be based outside South Africa. In such cases, we ensure appropriate legal safeguards are in place to protect your data (e.g., standard contractual clauses or lawful exemptions under POPIA).

7. Retention of Personal Information

We retain personal information only for as long as necessary to fulfil the purposes for which it was collected or to comply with legal and regulatory requirements. Where no legal or contractual obligation exists, we will delete or de-identify your data once it is no longer required.

8. Your Rights

You have the right to:

• Be informed that we are collecting your personal information.
• Access and request a copy of the personal information we hold about you.
• Request correction, deletion or destruction of your personal information.
• Object to or restrict our processing of your personal information.
• Withdraw consent where processing is based on consent.
• Lodge a complaint with the Information Regulator if you believe your rights have been infringed.

To exercise any of these rights, please contact us as set out below. We will respond within a reasonable time and in accordance with the "Promotion of Access to Information Act 2 of 2000” (PAIA).

9. Security Measures

We implement appropriate technical and organisational security measures to protect personal information from loss, misuse, unauthorised access, alteration or disclosure. These include:

• Access controls and password protection.
• Regular staff training on data protection.
• Secure hosting environments for digital data.
• Confidentiality agreements with all staff and contractors.

While we take every precaution to secure your data, please note that internet-based communications are not fully secure. Use of our website and email communications is at your own risk.

10. Amendments to This Privacy Notice

We may update this Privacy Notice from time to time to reflect changes in our operations or legal obligations. The latest version will always be available on our website. Where substantial changes are made, we will notify you directly if possible.

11. Contact Us

If you have questions about this Notice or wish to exercise your rights, please contact our Information Officer:

Information Officer
Kate Robyn Symington-Vincent
kate@amplevista.co.za

In the event you are not satisfied with our response to your query, you may lodge a formal complaint with the Information Regulator:

Email:

• General: enquiries@inforegulator.org.za
• POPIA Complaints: POPIAComplaints@inforegulator.org.za
• PAIA Complaints: PAIAComplaints@inforegulator.org.za