---
title: Astute Impact Privacy Policy
description: Read Astute Impact’s Privacy Policy on how we collect, use, protect, retain, and share personal information and your rights under applicable privacy laws.
---
[Skip to content](https://www.astuteimpact.com/privacy-policy#main-content)
[Homepage](https://www.astuteimpact.com/?hsLang=en)
- [Home](https://www.astuteimpact.com?hsLang=en)
- [Capabilities](https://www.astuteimpact.com/capabilities?hsLang=en)
- [Individuals](https://www.astuteimpact.com/capabilities/individuals?hsLang=en)
- [Teams](https://www.astuteimpact.com/capabilities/teams?hsLang=en)
- [Organisations](https://www.astuteimpact.com/capabilities/organisations?hsLang=en)
- [Services](https://www.astuteimpact.com/services?hsLang=en)
- [Insights](https://www.astuteimpact.com/astute-impact-insights?hsLang=en)
- [About](https://www.astuteimpact.com/about?hsLang=en)
- [Home](https://www.astuteimpact.com?hsLang=en)
- [Capabilities](https://www.astuteimpact.com/capabilities?hsLang=en)
- [Individuals](https://www.astuteimpact.com/capabilities/individuals?hsLang=en)
- [Teams](https://www.astuteimpact.com/capabilities/teams?hsLang=en)
- [Organisations](https://www.astuteimpact.com/capabilities/organisations?hsLang=en)
- [Services](https://www.astuteimpact.com/services?hsLang=en)
- [Insights](https://www.astuteimpact.com/astute-impact-insights?hsLang=en)
- [About](https://www.astuteimpact.com/about?hsLang=en)
# Privacy Policy
**Astute Impact (Pty) Ltd**
**Effective date:** 12 August 2026
**Last updated:** 12 August 2026
## 1. Who we are
Astute Impact (Pty) Ltd ("**Astute Impact**", "**we**", "**us**", "**our**") is a South African private company providing practical AI, automation, and Enterprise Intelligence consulting services to individuals, teams, and organisations.
- **Legal name:** ASTUTE IMPACT (PTY) LTD
- **Registration number:** 2026 / 491482 / 07
- **Registered office:** 50 Danie Theron Ave, General De Wet, Bloemfontein, Free State, 9301
- **Information Officer:** Johan Fourie
- **Contact email:** [astuteimpact.ai@gmail.com](mailto:astuteimpact.ai@gmail.com)
- **Website:** [www.astuteimpact.com](https://www.astuteimpact.com/?hsLang=en)
Under the Protection of Personal Information Act 4 of 2013 ("POPIA"), Astute Impact is the responsible party for personal information collected and processed through this website and in connection with our services. Where the General Data Protection Regulation ("GDPR") applies, Astute Impact may act as the data controller for relevant personal information.
## 2. What this policy covers
This Privacy Policy explains what personal information we collect when you visit [www.astuteimpact.com](https://www.astuteimpact.com/?hsLang=en), contact us through our enquiry forms, communicate with us through WhatsApp or email, engage with our Insights content, or become a client.
It explains why we collect personal information, how we use and protect it, when we share it, and the rights available to you under applicable law.
This policy applies to visitors, prospective clients, clients, and other individuals whose personal information we process in connection with our website or services.
## 3. Information we collect
### a) Information you provide directly
Depending on how you interact with us, we may collect:
- Name
- Email address
- Telephone or mobile number
- Company or organisation name
- Job title or role
- Information submitted through the "Start a Conversation" form
- The content of messages, enquiries, briefs, or business context you provide
- Information exchanged through email, WhatsApp, calls, or meetings
- Information provided when you engage us as a client, including relevant business, operational, project, document, or other information required to deliver the agreed services
### b) Information collected automatically
When you use our website, certain technical and usage information may be collected automatically through our website infrastructure and analytics technologies, including:
- IP address
- Browser type and version
- Device information
- Pages visited
- Referral source
- General website usage information
- Cookie identifiers and similar technologies
Further information about cookies is provided in Section 6.
### c) Information from third parties
Where relevant to a business enquiry or relationship, we may receive information from publicly available professional sources or from platforms through which you interact with Astute Impact, including LinkedIn, Facebook, Google, WhatsApp, or other communication platforms.
We do not intentionally collect special personal information as defined by POPIA or special category data as defined by GDPR through this website. Please do not provide sensitive information through general enquiry forms or other communications unless it is necessary and directly relevant to a service we are providing.
### Children
Our website and services are directed primarily at business owners, professionals, teams, and organisations. We do not knowingly collect personal information from children under 18 through the website.
If you believe that a child has provided personal information to us, please contact us so that we can assess and, where appropriate, delete the information.
## 4. Why we collect and use personal information
We may collect and use personal information for the following purposes:
| Purpose | What we use it for | POPIA basis | GDPR basis, where applicable |
| --- | --- | --- | --- |
| Responding to enquiries | Responding to messages submitted through our forms, WhatsApp, email, or other communication channels | Consent and/or legitimate interest | Consent and/or legitimate interest |
| Delivering services | Scoping, delivering, managing, and supporting consulting, automation, and Enterprise Intelligence services | Contract and/or legitimate interest | Performance of a contract and/or legitimate interest |
| Marketing communications | Sending Insights content, updates, or relevant information where you have opted in or where otherwise permitted by law | Consent and/or legitimate interest where permitted | Consent and/or legitimate interest where permitted |
| Website functionality and analytics | Operating, securing, maintaining, and improving our website and understanding how it is used | Legitimate interest and/or consent where required | Legitimate interest and/or consent where required |
| Legal and compliance purposes | Meeting accounting, tax, regulatory, legal, and other lawful obligations | Legal obligation | Legal obligation |
| Improving our services with AI tools | Supporting research, analysis, drafting, enquiry handling, workflow improvement, and delivery of services using AI-assisted systems | Legitimate interest and/or contract, as applicable | Legitimate interest and/or contract, as applicable |
We will not use your personal information for a materially different purpose from that for which it was collected without providing appropriate information and, where required, obtaining your consent.
## 5. Our use of AI
As an AI and automation consultancy, Astute Impact uses artificial intelligence tools, including large language model platforms and workflow or automation systems, in aspects of our internal operations and service delivery.
These tools may assist us with activities such as:
- Research and information analysis
- Drafting and reviewing communications
- Structuring and analysing business information
- Managing and responding to enquiries
- Developing workflows and automation
- Supporting aspects of consulting and client work
Where personal information is processed through AI-assisted systems:
- We use such systems to support our work and serve our clients rather than to replace human responsibility.
- A human at Astute Impact remains responsible for reviewing and acting on material AI-assisted outputs relevant to an enquiry or engagement.
- We do not intend to make solely automated decisions producing legal or similarly significant effects about individuals through the website.
- Where a specific client engagement involves an AI system processing the client's information in a materially different or more extensive way, that processing may be governed by separate contractual terms and, where appropriate, a data processing agreement.
We take reasonable steps to consider the security, confidentiality, purpose, and appropriateness of information before processing it through third-party AI or automation services.
## 6. Cookies and similar technologies
Our website is built and hosted using HubSpot, which uses cookies and similar technologies to support website functionality, remember preferences, provide analytics, and help us understand how visitors use the website.
These technologies may include:
- **Strictly necessary cookies** required for the website and forms to function
- **Analytics or performance cookies** that help us understand website usage
- **Functional cookies** that support preferences and website functionality
Where applicable law requires consent for non-essential cookies or similar technologies, we will seek that consent through the relevant website controls.
You may also control cookies through your browser settings. Disabling certain cookies may affect the functionality of parts of the website.
## 7. Who we share personal information with
We do not sell your personal information.
We may share personal information where reasonably necessary for the purposes described in this policy, including with:
- **Service providers and technology platforms** that support our business operations, website, forms, CRM, communications, document management, analytics, automation, or AI-assisted services. These may include HubSpot, WhatsApp/Meta, Google, Microsoft, and AI platform providers such as Anthropic.
- **Professional advisors**, including accountants, attorneys, or other professional service providers where necessary.
- **Regulators, courts, law enforcement agencies, or other authorities** where disclosure is required or permitted by law.
- **A successor business or transaction party** where Astute Impact is acquired, merged, reorganised, or otherwise undergoes a business transaction, subject to applicable privacy requirements.
Where appropriate, third-party service providers process information on our behalf and are subject to contractual, legal, or other appropriate obligations concerning the protection and use of personal information.
## 8. International data transfers
Some technology and service providers used by Astute Impact may store or process personal information outside South Africa, including in jurisdictions such as the European Union and United States.
Where personal information is transferred outside South Africa, we will do so in accordance with applicable requirements, including section 72 of POPIA where applicable.
Where GDPR applies, we will use an appropriate lawful transfer mechanism, such as an adequacy decision, Standard Contractual Clauses, or another legally recognised safeguard, where required.
## 9. When GDPR applies
Astute Impact is based in South Africa and is primarily subject to South African law, including POPIA.
The GDPR may apply to particular processing activities where its territorial requirements are met, including in circumstances where we offer services to individuals in the European Union or monitor their behaviour.
Where GDPR applies, individuals may have additional rights and protections under the GDPR, including the rights described in Section 10.
## 10. Your rights
Subject to applicable law and any lawful limitations, you may have the right to:
- Request access to personal information we hold about you
- Request correction of inaccurate or outdated personal information
- Request deletion of personal information where legally applicable
- Object to or request restriction of certain processing
- Withdraw consent where processing is based on consent
- Object to direct marketing
- Request data portability where applicable under GDPR
- Lodge a complaint with the relevant data protection regulator
Withdrawing consent does not affect the lawfulness of processing carried out before consent was withdrawn.
To exercise a privacy right or ask a question about how we process your information, contact us at **[astuteimpact.ai@gmail.com](mailto:astuteimpact.ai@gmail.com)**.
We will respond within the timeframes required by applicable law.
## 11. Data retention
We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including where necessary to meet contractual, accounting, tax, legal, regulatory, dispute-resolution, or legitimate business requirements.
We do not retain personal information indefinitely where there is no legitimate reason to do so.
As a general approach:
- **Enquiry information:** retained for as long as reasonably necessary to manage the enquiry and any resulting relationship, subject to applicable legal and business requirements.
- **Client records:** retained for the duration of the engagement and for any additional period required by applicable legal, accounting, tax, or other obligations.
- **Marketing information:** retained while the relevant marketing relationship or consent remains active, subject to lawful retention of records demonstrating consent or withdrawal.
Specific retention periods may vary depending on the nature and purpose of the information.
## 12. Security
Astute Impact takes reasonable technical and organisational measures to protect personal information against loss, unauthorised access, alteration, disclosure, or destruction.
These measures include, where appropriate:
- Access controls
- Need-to-know access to information
- Secure website connections
- Use of reputable technology and service providers
- Reasonable operational and security practices appropriate to the nature of the information being processed
No method of electronic transmission or storage can be guaranteed to be completely secure.
If we become aware of a security compromise affecting personal information, we will take appropriate steps and provide notifications where required by applicable law.
## 13. Complaints and regulators
If you have a concern about how Astute Impact has handled your personal information, we encourage you to contact us first so that we can investigate and attempt to resolve the matter.
You may also have the right to lodge a complaint with the Information Regulator of South Africa:
**Information Regulator (South Africa)**
Website: inforegulator.org.za
Where GDPR applies, you may also have the right to lodge a complaint with the relevant data protection supervisory authority in your jurisdiction.
## 14. Contact us
For privacy-related questions, requests, or complaints:
**ASTUTE IMPACT (PTY) LTD**
**Information Officer:** Johan Fourie
**Registration number:** 2026 / 491482 / 07
**Registered office:** 50 Danie Theron Ave, General De Wet, Bloemfontein, Free State, 9301
**Email:** [astuteimpact.ai@gmail.com](mailto:astuteimpact.ai@gmail.com)
## 15. Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our business practices, technology, services, or applicable law.
The **Last updated** date at the top of this page indicates when the policy was most recently revised.
Where material changes are made, we may provide additional notice where appropriate or required by law.
[](https://www.astuteimpact.com/?hsLang=en)
- [Home](https://www.astuteimpact.com?hsLang=en)
- [Capabilities](https://www.astuteimpact.com/capabilities?hsLang=en)
- [Services](https://www.astuteimpact.com/services?hsLang=en)
- [Insights](https://www.astuteimpact.com/astute-impact-insights?hsLang=en)
- [About](https://www.astuteimpact.com/about?hsLang=en)
---
- [Legal](https://www.astuteimpact.com/legal?hsLang=en)
- [/ Terms and Conditions /](https://www.astuteimpact.com/terms-and-conditions?hsLang=en)
- [Privacy Policy](https://www.astuteimpact.com/privacy-policy)
© 2026. All rights reserved.