Privacy Policy

01

Who we are

This policy is issued by the responsible party for processing of personal information collected through this website and our advisory services.

Registered company name	Vento Financial Consulting (Pty) Ltd
Company type	(Pty) Ltd
Registration number	2018/447213/07
VAT number	4610238915
Registered address	58 Kloof Street, Gardens, Cape Town, 8001, South Africa
Contact	+27 21 418 5623 · info@isvento.pro

02

Information Officer

In accordance with POPIA, Vento Financial Consulting (Pty) Ltd has appointed an Information Officer responsible for ensuring compliance with the Act and for handling requests relating to personal information. The Information Officer can be contacted at info@isvento.pro or +27 21 418 5623, marked for the attention of the Information Officer. Our Information Officer registration is maintained with the Information Regulator of South Africa.

03

Personal information we collect

We collect only the information reasonably necessary to provide our financial advisory services and operate this website.

Contact form and enquiry data — name, email address, phone number, company name and any information you choose to include in your message.
Client and engagement data — financial, tax and company information supplied in the course of an SME planning, SARS compliance or CFO advisory engagement.
Technical data — IP address, browser type, device information and pages visited, collected automatically via cookies and similar technologies.
Correspondence — records of calls, emails and meetings held in connection with our services.

04

Purpose and lawful basis of processing

We process personal information only where a lawful basis under POPIA applies, including consent, performance of a contract, compliance with a legal obligation, and our legitimate business interests. We use personal information to:

Respond to enquiries submitted through our contact form and prepare proposals for services.
Deliver SME financial planning, SARS tax compliance and CFO advisory services under an engagement letter.
Meet legal, regulatory, tax and accounting obligations, including record-keeping required by SARS and CIPC.
Operate, secure and improve this website, including through analytics where you have consented to non-essential cookies.
Communicate updates about our services, where you have opted in to receive such communications.

05

Cookies and website analytics

This website uses cookies. Essential cookies are required for the site to function and cannot be disabled. With your consent, we also use analytics cookies to understand how visitors use our pages, and marketing cookies to show relevant information about our services elsewhere. Full details of the categories used, their purpose and retention are set out in our Cookie Policy. You can change your preferences at any time via the cookie settings link in the site footer.

06

Disclosure of information

We do not sell personal information. We may share personal information with trusted third parties strictly where necessary, including: hosting and IT service providers who process data on our behalf under written agreements; professional advisors such as auditors and legal counsel; SARS, CIPC and other regulatory bodies where required by law; and analytics providers, in an aggregated or pseudonymised form where possible. All third-party processors are required to maintain appropriate security safeguards and to process personal information only for the purposes we specify, in line with POPIA operator obligations.

07

Cross-border transfers and hosting

Where our website hosting or software providers process data outside South Africa, we ensure such transfers comply with section 72 of POPIA — including reliance on providers subject to laws that provide adequate protection, or contractual safeguards that require a comparable standard of protection to POPIA.

08

Retention

We retain personal information only for as long as necessary to fulfil the purpose for which it was collected, including any legal, accounting or tax record-keeping requirements — typically five years following the end of an engagement, or longer where SARS or CIPC rules require. Website enquiry data that does not lead to an engagement is retained for a maximum of 24 months.

09

Security measures

We implement appropriate technical and organisational measures to protect personal information against loss, unauthorised access, alteration or disclosure, including encrypted data transmission, access controls, and contractual security obligations placed on our service providers.

10

Your rights under POPIA

As a data subject, you have the following rights in relation to your personal information.

Access — request confirmation of, and access to, personal information we hold about you.
Correction — request that inaccurate, incomplete or outdated information be corrected or updated.
Deletion — request deletion or destruction of personal information no longer needed for the purpose it was collected.
Objection — object to processing of your personal information, including for direct marketing purposes.
Withdraw consent — withdraw consent to processing at any time, without affecting the lawfulness of processing prior to withdrawal.
Complain — lodge a complaint with the Information Regulator of South Africa if you believe your information has been processed unlawfully.

To exercise any of these rights, contact our Information Officer at info@isvento.pro. We will respond within the timeframes prescribed by POPIA.

11

Information Regulator

If you believe we have not adequately addressed a concern regarding your personal information, you may contact the Information Regulator of South Africa: JD House, 27 Stiemens Street, Braamfontein, Johannesburg, 2001 · [email protected].

12

Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The date at the top of this page indicates when it was last revised. Material changes will be communicated where appropriate.