Privacy
Policy.

FlexiConsult (Pty) Ltd ("FlexiConsult", "we", "us", or "our") is a company registered in the Republic of South Africa. We provide enterprise ERP consulting, Microsoft Dynamics 365 implementation, SAP enterprise project services, digital transformation advisory, and managed support services.

Our registered office is located in Sandton, Johannesburg, Gauteng, South Africa.

For all privacy-related queries, contact us at: privacy@flexiconsult.co.za

This Privacy Policy applies to all personal information collected through our website (flexiconsult.co.za), our contact and lead qualification form, and any related communications.

We are committed to processing personal information in accordance with the Protection of Personal Information Act 4 of 2013 (POPIA) and its associated regulations. POPIA is South Africa's primary data protection legislation and governs how responsible parties (like FlexiConsult) must collect, process, store, and destroy personal information about data subjects.

When you complete our contact or strategy call request form, we collect the following categories of personal information:

• Identity Information: Full name • Contact Information: Work email address • Organisational Information: Company name • Operational Context: Current ERP system environment, service of interest, description of your primary business challenge, and implementation timeline

We do not collect sensitive personal information (as defined under POPIA Section 1), biometric data, or financial information through our website.

We collect and process your personal information for the following lawful purposes:

• To evaluate your enquiry and match it to the appropriate consulting service or specialist • To contact you to schedule a discovery consultation • To manage our business relationship with you or your organisation • To maintain our client relationship management (CRM) records • To comply with our legal and contractual obligations • To improve our services and website based on aggregate, anonymised usage patterns

We will only process your personal information for the purposes stated above. We will not process it for any other purpose without your explicit consent.

Under POPIA, we process your personal information on the following grounds:

• Consent: By submitting our contact form, you consent to the processing of your information as described in this policy. • Legitimate Interest: Processing is necessary for FlexiConsult's legitimate business interests in responding to professional enquiries, provided those interests do not override your rights and freedoms. • Contractual Necessity: Where you engage FlexiConsult for services, processing is necessary for the performance of that contract.

Your personal information is stored securely in our customer relationship management (CRM) system. We implement appropriate technical and organisational measures to protect personal information against unauthorised access, disclosure, alteration, or destruction, including:

• Encrypted data transmission (HTTPS/TLS) • Access controls restricting data to authorised personnel only • Regular security reviews of our systems and processes

We retain personal information for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. Enquiry data from non-converting leads is typically reviewed and purged after 24 months.

We do not sell, rent, or trade your personal information to third parties.

We may share your information with:

• Our CRM platform provider (Microsoft Dynamics 365), solely for the purpose of managing our business relationships, under a data processing agreement • Our technology and infrastructure providers, under appropriate confidentiality and data processing obligations • Law enforcement or regulatory authorities where required by law

All third-party service providers who process personal information on our behalf are contractually required to handle that information in accordance with POPIA.

As a data subject under POPIA, you have the following rights:

• Right of Access: You may request a description of the personal information we hold about you. • Right to Correction: You may request that we correct or update inaccurate or incomplete information. • Right to Deletion: You may request that we delete your personal information, subject to our legal retention obligations. • Right to Object: You may object to the processing of your personal information on grounds relating to your particular situation. • Right to Lodge a Complaint: You have the right to lodge a complaint with the Information Regulator of South Africa.

To exercise any of these rights, please contact us at: privacy@flexiconsult.co.za

Information Regulator contact details: • Website: www.justice.gov.za/inforeg/ • Email: inforeg@justice.gov.za

Our website may use cookies and similar tracking technologies to improve your browsing experience and to understand how visitors interact with our site.

Essential cookies (required for the site to function) are placed automatically. Analytics cookies (used to understand aggregate visitor behaviour) will only be placed with your consent, where required.

You can manage cookie preferences through your browser settings at any time.

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The "Last Updated" date at the top of this page will reflect the most recent revision. We encourage you to review this policy periodically.

For material changes, we will provide notice via our website or by direct communication where appropriate.

If you have any questions about this Privacy Policy, wish to exercise your rights, or have a concern about how we handle your personal information, please contact our Information Officer:

Email: privacy@flexiconsult.co.za Postal address: FlexiConsult (Pty) Ltd, Sandton, Johannesburg, Gauteng, South Africa

We will respond to all legitimate requests within 30 days.