Privacy Policy

---

The Art of People

Last updated: 2026-08-07

The Art of People ("we", "us", "our") is committed to protecting your personal information and respecting your privacy. This policy explains what personal information we collect, why we collect it, how we use and protect it, and the rights you have under the Protection of Personal Information Act, 2013 (POPIA).

We are the responsible party for the processing of your personal information as defined in POPIA.

Responsible party: The Art of People Registration number: (2026/580953/07) Registered / physical address: 12 Brompton Avenue Sea Point Information Officer: Ann-Mari Höfinger Information Officer email: [email protected] General contact email: info@theartof people.co.za

Our Information Officer is registered with the Information Regulator of South Africa and is responsible for ensuring our compliance with POPIA. You can contact the Information Officer using the details above with any question or request relating to your personal information.

This policy applies to personal information we process about:

• Visitors to our website and people who submit enquiries through it
• Subscribers to our newsletter, mailing list and marketing communications
• Delegates, clients and prospective clients for our courses, workshops and consulting services

It applies to information collected online, in person, by email, and through the platforms we use to deliver our services.

We collect only the information we need for the purposes set out in this policy.

Website visitors: We collect your name, email address, and any message or details you choose to provide when you complete a contact or enquiry form. We also collect technical information automatically, including your IP address, browser type, device information, and pages viewed, through cookies and analytics tools.

 See the Cookies section below.

Marketing list subscribers: When you subscribe to our newsletter or mailing list, we collect your name and email address, and we record your consent and communication preferences. We may also record whether you open our emails and which links you click, so we can understand what is useful to you.

Course and workshop clients: When you or your organisation book or express interest in a course, workshop or consulting engagement, we collect your name, job title, organisation, email address, telephone number, and billing information. Where relevant to delivering the session, we may collect dietary requirements, accessibility needs, and attendance records. Where you attend on behalf of an employer, we may share attendance and completion information with that employer.

We do not seek to collect special personal information (such as health, race, religious or political beliefs) except where you volunteer it for a specific purpose, for example an accessibility or dietary requirement, in which case we process it only for that purpose and with your consent.

We do not knowingly collect personal information from children under the age of 18. Our services are directed at working professionals and organisations.

We collect personal information directly from you when you complete a form, subscribe, book a course, email us, or interact with us in person. We collect technical information automatically through cookies and analytics when you use our website. Where you are booked onto a course by your employer or a colleague, we may receive your information from them.

Under POPIA we may process personal information only where we have a lawful basis. We rely on the following:

To respond to your enquiries and provide our services. Processing is necessary to conclude or perform a contract with you, or to take steps at your request before entering into one. This covers responding to enquiries, arranging and delivering courses and workshops, and managing bookings and payments.

To send marketing communications. Where you have subscribed to our mailing list, we process your information on the basis of your consent. Where you are an existing client, we may send you information about similar services on the basis of our legitimate interest, and you can opt out at any time.

To operate and improve our website. We process technical and analytics information on the basis of our legitimate interest in maintaining a secure, functioning website and understanding how it is used. Non-essential cookies are set only with your consent.

To meet our legal obligations. We process and retain certain information, such as invoicing and tax records, to comply with South African law.

We will only send you electronic marketing where you have consented, or where you are an existing customer and the marketing relates to our own similar services. Every marketing email includes an unsubscribe link, and you can withdraw your consent at any time by using that link or by contacting our Information Officer. Withdrawing consent does not affect the lawfulness of processing carried out before you withdrew it.

We do not sell your personal information. We share it only where necessary, and only with:

• Service providers (operators) who process information on our behalf, such as our email marketing platform, website host, analytics provider, payment processor, and scheduling tools. These providers are bound by contract to process your information only on our instructions and to keep it secure.
• An employer or booking organisation, where you attend a course arranged and paid for by them, limited to attendance and completion information.
• Authorities or advisers, where we are required to disclose information by law, or to establish, exercise or defend legal claims.

Some of our service providers store or process information on servers outside South Africa. Where we transfer your personal information across borders, we do so only in line with POPIA, and only where the recipient is subject to laws, binding rules or agreements that provide an adequate level of protection comparable to POPIA.

We take appropriate, reasonable technical and organisational measures to safeguard your personal information against loss, unauthorised access, and misuse. These include access controls, secure passwords, encryption where appropriate, and using reputable service providers who maintain their own security standards. If a security compromise affects your personal information, we will notify you and the Information Regulator as required by POPIA.

We keep personal information only for as long as necessary for the purposes described in this policy, or for as long as the law requires.

• Enquiry and prospect information: 24 months from last contact
• Client and course records: for the duration of the engagement and 5 years afterwards, or longer where tax and company law require
• Marketing list information: until you unsubscribe or ask us to remove you
• Financial and invoicing records: as required by South African tax law, currently five years

When information is no longer needed, we securely delete or de-identify it.

Under POPIA you have the right to:

• Be informed about how we collect and use your personal information, which is the purpose of this policy
• Access the personal information we hold about you, and request confirmation of whether we hold it
• Correct or update information that is inaccurate, irrelevant, excessive, out of date, incomplete, misleading or unlawfully obtained
• Delete or destroy your personal information in certain circumstances
• Object to the processing of your personal information on reasonable grounds
• Withdraw consent where our processing relies on your consent
• Opt out of direct marketing at any time
• Not be subject to a decision based solely on automated processing that affects you significantly
• Complain to the Information Regulator

To exercise any of these rights, contact our Information Officer using the details in section 1. To request access or correction, you may use the prescribed POPIA forms available from the Information Regulator. We will respond within a reasonable time and may ask you to verify your identity.

Our website uses cookies and similar technologies to make the site work, remember your preferences, and understand how the site is used. Essential cookies are necessary for the site to function. Analytics and marketing cookies are set only with your consent, which you can manage or withdraw at any time through your browser settings or our cookie banner. [ADJUST TO MATCH YOUR ACTUAL COOKIE SETUP, or link to a separate cookie policy if you have one.]

We may update this policy from time to time to reflect changes in our practices or the law. The current version will always be available on our website, and the date at the top shows when it was last updated. Where changes are significant, we will bring them to your attention.

For any question about this policy or about your personal information, or to exercise any of your rights, contact:

Information Officer: Ann-Mari Höfinger, The Art of People Email: [email protected] 

You have the right to lodge a complaint with the Information Regulator, although we would ask you to raise your concern with us first so we can try to resolve it.

Information Regulator (South Africa)JD House, 27 Stiemens Street, Braamfontein, Johannesburg, 2001 General enquiries: [email protected]POPIA complaints: [email protected]Website: https://inforegulator.org.za