Privacy notice
This notice explains what personal information Proven Places collects through this website, why, and what you can ask us to do with it. We follow the Protection of Personal Information Act, 2013 (POPIA).
Who we are
Proven Places is a collaboration between TBL Consulting (Pty) Ltd and Musgrave & Field (Pty) Ltd, both South African companies. Together they are responsible for the personal information collected through this website. For anything about your information, including reaching our information officer, email info@provenplaces.com.
What we collect
| When | What |
|---|---|
| You use the readiness check | Your name, email address, business name, province and how many people work there; your mobile number, town, role and when you would like to be certified if you give them; what you run and what you have on site; your answers and result; and whether you ticked the call or updates boxes. |
| You download your criteria | Your name, email address and business name; your town, province, size band and role if you give them; what you run; and whether you ticked the call or updates boxes. |
| You comment on a requirement | Your comment, the requirement it is about, what you run, and your name, email address and business. Comments are never published with your name. |
| You send a partner message | Your name, organisation, email address, the kind of organisation and your message. |
| Any form you send | A scrambled code made from your internet connection, used only to stop floods of fake sign-ups. We cannot turn it back into your address. |
We do not use advertising or tracking cookies, and the website does not load anything from other companies' servers except the spam check on the forms. The pages remember what you picked and the details you last entered in your own browser, so you don't have to type them twice; this stays on your device.
Why we use it
- To send you your readiness plan or the criteria you asked for, and to call you about certification if you asked us to. You asked us to do this.
- To read and answer comments on the criteria in the next version of the standard.
- To send you occasional updates about Proven Places, only if you ticked that box. You can stop these at any time.
- To reply to partner messages.
- To understand which kinds of business are interested, so we can shape the standard. We only use totals for this, never anyone's details.
We do not sell your information, and we do not share it with anyone for their own marketing.
Who handles it for us
- Cloudflare hosts this website and the database that stores your details.
- Brevo sends our emails and keeps our contact list. Brevo stores data in the European Union, where data protection law gives a level of protection similar to POPIA.
Both work under contracts that require them to keep your information secure and use it only for us.
How long we keep it
We keep your details while you are working towards or holding a Proven Places mark and for 24 months after we last heard from you, unless you ask us to delete them sooner. Records of when you agreed to hear from us are kept for as long as we need to show that consent.
Your rights
You can ask us to show you the information we hold about you, correct it, delete it, or stop using it. Every email has a link to stop all emails. To ask for anything else, email info@provenplaces.com and we will respond within 30 days.
If you are unhappy with how we have handled your information, you can complain to the Information Regulator: inforegulator.org.za.
Security
The website is encrypted, the database cannot be reached from the internet, and only a small number of named people can see sign-ups. If we ever had a breach affecting your information, we would tell you and the Information Regulator as POPIA requires.