Who we are

The Change Consulting Group (Pty) Ltd (“CCG”) is the responsible party (data controller) for the personal information collected through this website. We are a management consultancy with offices in Johannesburg and Cape Town, South Africa. Our Information Officer is Nicola Preston, who is responsible for administration at The Change Consulting Group. You can reach her about this policy or your personal information through our contact form.

What this policy covers

This policy explains how we handle personal information collected through this website (the “Site”), including any enquiry you send us. Personal information that we process on behalf of a client as part of a consulting engagement is governed separately by our contract with that client, and is not covered by this policy.

Personal information we collect

We only collect personal information that you choose to give us. If you contact us through the enquiry form on this Site, we collect your name, your email address and the content of your message. We use this solely to respond to you and to provide the information or assistance you have asked for. You are not obliged to provide it, but without it we cannot respond to an enquiry.

Technical information

Like most websites, our web server automatically records limited technical information when you visit — such as your browser type, device and operating system, and the IP address you connect from. This is standard server-log information, used to keep the Site secure and working properly, and we do not use it to identify you personally.

Cookies and tracking

This Site does not set cookies of its own, and we do not use analytics, advertising or session-tracking tools of any kind. The one exception is that our pages load fonts from Google Fonts; when they do, your browser contacts Google’s servers, which receive your IP address as part of that request. Browser settings or extensions that block third-party font requests will prevent this, though the Site’s appearance may change.

How we use your information

We use the personal information you provide to:

• respond to your enquiry and provide the information or services you have requested;
• keep a record of our correspondence with you; and
• keep the Site secure and functioning correctly.

We rely on your consent (given when you submit an enquiry) and on our legitimate interest in responding to you as the lawful basis for this processing. We do not send newsletters or marketing communications.

How we share your information

We do not sell, rent or trade your personal information. Access is limited to CCG personnel who need it in order to respond to you, and we do not share it with third parties for their own purposes. The only external recipient is Google, in respect of the font requests described above.

Cross-border transfers

Because Google Fonts is operated globally, the technical request that carries your IP address may be processed on servers outside South Africa. Google publishes safeguards for such transfers in its own privacy documentation. The enquiry information you send us is handled through our own email system; it is not published or sold.

How we protect your information

The Site is served entirely over an encrypted (HTTPS) connection, and we apply appropriate technical and organisational measures to protect the personal information in our care against unauthorised access, alteration, disclosure or destruction.

How long we keep your information

We keep the personal information you send us for the duration of your enquiry and any related engagement, after which we delete it. We do not keep personal information for longer than we need it.

Your rights

Under South Africa’s Protection of Personal Information Act (POPIA) — and, where it applies, the EU or UK General Data Protection Regulation (GDPR) — you have the right to:

• ask what personal information we hold about you and request a copy of it;
• ask us to correct or update information that is inaccurate or incomplete;
• ask us to delete your information where we no longer have a reason to keep it;
• object to, or ask us to restrict, our processing of your information; and
• withdraw any consent you have given, at any time.

To exercise any of these rights, please contact our Information Officer through our contact form. There is no charge, and we will respond within a reasonable time.

Complaints

If you are not satisfied with how we have handled your personal information, you have the right to complain to the Information Regulator (South Africa). Details of how to lodge a complaint are available on the Regulator’s website at inforegulator.org.za. If you are in the European Union or the United Kingdom, you may also complain to your local data-protection supervisory authority.

Changes to this policy

We may update this policy from time to time. When we do, we will revise the date shown at the foot of this page, and we encourage you to review it periodically so that you stay informed about how we protect your information.

Your acceptance of these terms

By using this Site, you accept this policy. If you do not agree with it, please do not use the Site. Your continued use of the Site after any change to this policy will be taken as acceptance of that change.

Contacting us

If you have any questions about this Privacy Policy or how we handle your information, please contact us here.

This document was last updated on 17 July 2026.