Legal

Privacy Policy

Last updated: 30 October 2026

Beyond Insights (Pty) Ltd
Suite 7, Ground Floor, Sunny Park
4 Sugar Farm Trail, Sunningdale
Durban, 4051, South Africa
info@beyondinsights.co.za

This policy explains how Beyond Insights (Pty) Ltd ("Beyond Insights", "we", "us" or "our") handles personal information. It applies when you visit beyondinsights.co.za, contact us or use our services. We decide why and how this information is used, which makes us the responsible party under the Protection of Personal Information Act 4 of 2013 (POPIA).

1. Information we collect

  • When you use the contact form, we collect your name, email address, optional contact number and your message.
  • We keep contact details and messages you share by email, WhatsApp, telephone or in meetings.
  • For client work, we collect business contacts, requirements, agreements and billing records.

Our hosting provider records technical information when you visit, including your internet protocol (IP) address, browser and device details, the pages requested and the time of the request. If a colleague or authorised representative gives us your contact details, we use them for the relevant business communication.

You choose whether to contact us. We need your name, email address and message to respond. Please do not send passwords, identity documents or sensitive personal information through the form.

2. Why we use information

We use personal information to respond to enquiries, prepare proposals, deliver services and keep business records. We also use it to secure our systems, prevent misuse, understand how the website is used, resolve disputes and meet legal duties.

We must have a lawful reason to process personal information. Under POPIA, this may be consent, a legal duty or a need to enter into or fulfil a contract. It may also be a legitimate interest, such as communicating with clients, improving this website or protecting our business. If we rely on consent, you may withdraw it for future use of your information.

3. Website analytics, cookies and third parties

This website is hosted on Amazon Web Services (AWS) and delivered through its CloudFront content delivery network. We measure page views from CloudFront's server access logs. These logs include IP addresses, requested pages, referrers and browser details. We use them in aggregate to understand traffic and to separate automated bots from human visitors. We do not use advertising trackers or third-party analytics scripts, and we do not use the logs to profile individuals.

We do not set cookies to track you. Our hosting and security providers may use cookies or similar technologies to keep the website working securely. You can manage cookies in your browser settings. External websites that we link to, including our social media pages, have their own privacy notices.

4. Sharing and processing outside South Africa

We do not sell personal information. We may share it with staff, contractors and service providers who need it for the purposes described here, such as our hosting and email providers. Providers acting for us must protect it and use it only as authorised. We may also disclose information when required by law or needed to establish or defend legal rights.

Service providers and sub-processors

Depending on the services we provide, we may use the providers below. When they process information for us on a client's behalf, they act as sub-processors.

  • Amazon Web Services (AWS) provides cloud hosting, content delivery, storage and computing services, including hosting this website.
  • Microsoft provides office software, email, collaboration, cloud computing and AI services.
  • Meta provides WhatsApp messaging, which we use to communicate with clients, research participants and other contacts who choose to message us there.
  • Anthropic provides artificial intelligence (AI) models and related data-processing services.

We share only the information needed for the service. Each client agreement covers authorised providers, confidentiality and security, and any approval or notice needed when sub-processors change. This list does not authorise providers to use client data to train AI models.

Some providers, including AWS, Microsoft, Meta and Anthropic, operate outside South Africa. Transfers of personal information must meet POPIA's requirements, which may mean protection under a law or binding agreement, or another lawful basis for the transfer.

Research data we process for clients is governed by our service agreements with them. We refer requests about records controlled by a client to that client.

5. How we protect and retain information

We use reasonable technical and organisational safeguards suited to the information and risks, including limiting access to people who need it. No system can guarantee complete security. If a security breach occurs, we will assess it and notify affected people and the Information Regulator where the law requires.

We keep information only as long as needed for its purpose, the business relationship and legal record-keeping duties. A lawful dispute or claim may require us to keep it longer. When there is no lawful reason to retain it, we delete it, destroy it or remove identifying details.

6. Your choices and rights

Subject to POPIA's conditions and legal exceptions, you may:

  • Ask whether we hold your personal information and request access to it.
  • Ask us to correct inaccurate information or delete information we are no longer entitled to hold.
  • Object to processing where the law permits, or withdraw consent where we rely on it.
  • Object to direct marketing and ask us to stop sending it.
  • Complain to the Information Regulator.

Send requests to info@beyondinsights.co.za, marked for the Information Officer. We may need to check your identity before releasing or changing records. We will explain any required process, permitted fee or reason we cannot fulfil a request. An enquiry does not subscribe you to marketing.

7. Children's information

This website and our business services are intended for adults. Please do not submit children's personal information through the contact form. Where research work involves children, we establish the required consent and safeguards before collecting any information.

8. Questions, complaints and changes

Contact us at the email or physical address above with questions about this policy. You can also complain directly to the Information Regulator South Africa, which oversees compliance with POPIA.

South African law governs this policy. We may update it when our services or legal duties change, and the date above shows the latest revision. Where required, we will give further notice or obtain consent before using information for a new purpose.

For website and service terms, read our Terms of Service.