Last updated: 19 July 2026
NDCsa Africa respects your privacy and is committed to processing personal information lawfully, reasonably and transparently. This Privacy Policy explains how we collect, use, disclose, retain and protect personal information when you use www.ndcsaafrica.co.za, contact us, request an assessment or use our services.
This notice is intended to support our obligations under South Africa’s Protection of Personal Information Act 4 of 2013 (POPIA). It does not limit any rights you have under applicable law.
NDCsa Africa is the responsible party for personal information processed through this website and our services.
Depending on how you interact with us, we may process:
Please do not provide personal information that is not reasonably required for your enquiry or service.
We collect information:
We process personal information only for a specific, lawful purpose, including to:
Our lawful grounds may include your consent, steps requested before entering into an agreement, performance of an agreement, compliance with a legal obligation, protection of a legitimate interest, or another ground permitted by POPIA. Where we rely on consent, you may withdraw it at any time, but withdrawal does not affect processing that was already lawful.
An assessment may require identity, financial, debt-review and credit-record information. We request and use this information only where it is relevant to the assessment or service. We will obtain a credit profile only with the required authorisation or another lawful basis. Providing information does not guarantee a particular outcome, and recommendations depend on the facts and supporting evidence in each matter.
We may share personal information only where reasonably necessary and lawful, including with:
Our website currently uses services that may include WordPress and website plugins, Privyr CRM, email-delivery services, WhatsApp, Google Tag Manager, Google Analytics and Google-hosted review or mapping features. These providers process information under their own terms and privacy commitments. We require service providers acting for us to protect information and use it only for the authorised purpose.
We do not sell personal information.
Cookies and similar technologies help the website function, protect forms, remember preferences and understand how visitors use the site. We may use:
You can restrict or delete cookies through your browser settings. Blocking necessary cookies may affect website functionality. Where consent is required for a non-essential technology, we will rely on the applicable consent mechanism.
We may send marketing by email, SMS, telephone or similar electronic communication only where permitted by law. You can opt out at any time by using an unsubscribe method in the communication or by contacting us. Service, security and transactional messages may still be sent where necessary.
Some technology providers may process or store information outside South Africa. When personal information is transferred across borders, we take reasonable steps to ensure that the recipient is subject to a law, agreement or binding corporate rules that provide an adequate level of protection, or that another transfer ground permitted by POPIA applies.
We retain personal information only for as long as reasonably necessary for the purpose for which it was collected, any continuing service or relationship, and applicable legal, tax, regulatory, evidential or dispute-resolution requirements. Retention periods vary by record and purpose. When information is no longer required, we securely delete, destroy or de-identify it, subject to backup and legal-retention cycles.
We use reasonable technical and organisational safeguards appropriate to the nature of the information, including access controls, reputable service providers, website security measures, backups and staff or contractor confidentiality obligations. No internet transmission or storage system is completely secure. If a security compromise creates a legal notification obligation, we will notify the Information Regulator and affected data subjects as required by POPIA.
Subject to POPIA and other applicable law, you may:
To exercise a right, contact us using the details below. We may need to verify your identity before acting on a request. Some rights are limited where the law requires or permits us to retain or continue processing information.
Our website and services are intended for adults. We do not knowingly collect personal information from a child without the consent of a competent person or another lawful basis. If you believe a child has provided information improperly, please contact us.
Our website may link to websites or services operated by other organisations. Their privacy practices are governed by their own notices. We are not responsible for third-party websites that we do not control.
Please contact us first so that we can try to resolve your concern. You may also lodge a POPIA complaint with the South African Information Regulator:
We may update this Privacy Policy when our services, technology or legal obligations change. The current version will be published on this page with a revised “Last updated” date. Material changes may also be communicated through an appropriate website or direct notice.
For privacy questions, objections, access or correction requests, contact: