Privacy notice
How Bundlepathbase collects, uses, retains and protects personal information under South African privacy law. Effective 15 August 2026.
Who is responsible
Bundlepathbase is the responsible party for personal information handled through this website. Contact our privacy lead at info@bundlepathbase.digital or at Level 11, 35 Florida Road, Durban 4001.
Information we collect
The enquiry form collects your name, email, selected review type, optional application-value range and message. We also receive information you choose to send by phone or email. Essential browser storage records your cookie preference. Ordinary server logs may record IP address, browser type, requested page and time for security and fault diagnosis.
Do not place identity numbers, bank details, health information or complete funding files in the website form. If an engagement proceeds, its secure intake and engagement letter explain the additional applicant, supplier and transaction records required.
Why we use it
We process enquiry information to respond, assess independence and scope, prepare an estimate, prevent misuse and keep a record of business communications. The grounds are your request before a possible contract, performance of an agreed engagement, legal duties and our legitimate interests in securing and administering the practice.
We do not sell personal information or use enquiry details for unrelated advertising.
Sharing and operators
Information may be handled by hosting, email, professional-administration and security providers acting under appropriate instructions. We disclose it where law requires, to protect lawful rights, or with your authority. Professional engagement records are shared according to the engagement letter and applicable duties.
Some service providers may process information outside South Africa. Where that occurs, we use a lawful transfer basis and require protection substantially similar to POPIA safeguards.
Retention
Unsuccessful general enquiries are normally deleted after 12 months. Contract, tax and professional engagement records are retained for the period required by law and our documented record policy, generally at least five years after completion. Security logs are held for a shorter operational period unless an incident requires preservation.
Your rights
Subject to lawful limits, you may ask whether we hold your information, request access or correction, object to certain processing, ask for deletion where retention is unnecessary, or withdraw consent where consent is the basis. We may need to verify identity before acting.
You may complain to South Africa’s Information Regulator if a concern is not resolved. Details are available at inforegulator.org.za.
Security and incidents
We use access controls, secure transfer arrangements, backups and staff confidentiality measures proportionate to the records. No internet transmission is risk-free. A qualifying security compromise will be investigated and notified as required.
Changes and contact
Material updates will receive a new effective date on this page. Privacy requests can be sent to info@bundlepathbase.digital with “Privacy request” in the subject.