Disclaimer

You will find the latest information about our responsibilities here.

1. Processing of Personal Information

1.1 Purpose of Processing Personal Information

Crowd and Go processes personal information for purposes that include: providing business consulting services to clients; managing client relationships and engagements; recruiting, employing and managing staff; engaging and managing service providers; complying with legal, tax and regulatory obligations; and marketing and communicating with clients and prospective clients.

1.2 Description of the Categories of Data Subjects and of the Information or Categories of Information Relating Thereto

Categories of Data Subjects / Personal Information That May Be Processed:

  • Clients — Name, contact details, identity number, business registration details, banking details, engagement history
  • Service Providers — Name, contact details, registration number, VAT number, address, banking details
  • Employees — Name, identity number, contact details, address, qualifications, employment history, banking details, gender and race (for employment equity purposes)
  • Prospective Clients / Marketing Contacts — Name, contact details, business information

1.3 The Recipients or Categories of Recipients to Whom the Personal Information May Be Supplied

Category of Personal Information / Recipients or Categories of Recipients:

  • Identity number and names, for verification and compliance checks — Regulatory bodies, credit bureaus, background verification service providers
  • Financial and payment information — Banks, auditors, South African Revenue Service
  • Employee information — Payroll service providers, medical aid and retirement fund administrators, South African Revenue Service

1.4 Planned Transborder Flows of Personal Information

Crowd and Go does not currently process or store personal information outside the Republic of South Africa.

1.5 General Description of Information Security Measures

Crowd and Go has implemented the following security safeguards, among others, to protect the confidentiality, integrity and availability of personal information under its care:

  • Access controls and password protection for electronic records
  • Data encryption for sensitive information
  • Antivirus and anti-malware solutions
  • Restricted physical access to premises and paper records
  • Confidentiality undertakings by employees and service providers
  • Regular review of security measures and internal policies