Privacy Policy — Cholaw Consulting (Pty) Ltd

Last updated: 21 September 2026

1. Who we are

Cholaw Consulting (Pty) Ltd (“Cholaw Consulting”, “we”, “us” or “our”) is a private company registered in the Republic of South Africa under registration number 2017/398305/07, with its registered address at 14 Suid Street, Miederpark, Potchefstroom, 2530, North West Province.

We are the responsible party (data controller) for the personal information described in this policy. This policy explains what happens to personal information in connection with this website, cholawconsulting.co.za, and our consulting engagements.

2. What this website collects

This website is a static, informational site. It does not run a database, and it does not store submissions on our servers. Specifically:

No cookies. This website does not set cookies on your device.
No analytics or tracking. We do not use Google Analytics, advertising pixels, or any third-party tracking or profiling tools.
No accounts. There is no login, registration or user profile on this site.

The enquiry form

The contact form on our home page does not transmit data to us over the internet. When you click “Send message”, the details you typed are placed into a draft email that opens in your own email application. Nothing is sent until you choose to send that email yourself. At that point, your message reaches us the same way any ordinary email does.

When you do email us, we receive the information you chose to include — typically your name, organisation, email address, telephone number, the nature of your enquiry and your message.

Information collected automatically by our service providers

Hosting. This website is hosted by Vercel Inc. As with any web host, its servers automatically process technical request data such as your IP address, browser type and the pages requested, in order to deliver the site and maintain security.
Fonts. Typefaces are loaded from Google Fonts (fonts.googleapis.com and fonts.gstatic.com). Making that request discloses your IP address to Google, which may log it. We do not receive or control this data.

3. Information we collect in our work

In the course of providing accreditation, human settlements, project and programme management services to municipalities, provincial departments and other public-sector clients, we may process personal information such as names, job titles, contact details and correspondence of client representatives and stakeholders, and information contained in project documentation, reports and beneficiary or community records supplied to us by a client.

Where a client supplies us with personal information for a project, that client generally remains the responsible party, and we process the information as an operator on their behalf and on their instructions.

4. Why we process personal information

To respond to enquiries and provide information you have asked for.
To deliver, manage and report on consulting engagements.
To prepare proposals, tenders and accreditation submissions.
To issue invoices, keep accounting records and manage our business.
To comply with legal, regulatory, tender and record-keeping obligations.

We rely on one or more of the following POPIA justifications: your consent; the performance of a contract; compliance with a legal obligation; the protection of a legitimate interest; or the proper performance of a public-law duty by a public body.

5. Who we share information with

We do not sell personal information, and we do not share it for advertising. We may share it with:

Our service providers — for example, our website host, email provider and accounting or IT support — who process it on our instructions.
Clients and project partners, where it is necessary to carry out the engagement.
Government departments, regulators, auditors or courts, where required by law or by the terms of a public-sector engagement.
Our professional advisers, such as auditors or attorneys.

Where a service provider processes information outside South Africa, we take reasonable steps to ensure it is subject to a level of protection comparable to POPIA.

6. How long we keep it

We keep personal information only as long as necessary for the purpose it was collected for, or as long as the law requires. Project and financial records are generally retained for at least five years in line with South African tax, company and public-procurement record-keeping requirements. Enquiries that do not lead to an engagement are deleted once they are no longer needed.

7. How we protect it

We take reasonable technical and organisational measures to safeguard personal information against loss, unauthorised access and misuse. This website is served over an encrypted HTTPS connection. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security.

8. Your rights under POPIA

Subject to the conditions in POPIA, you have the right to:

Ask what personal information we hold about you, and request access to it.
Request that we correct, update or delete information that is inaccurate, irrelevant, excessive, out of date, incomplete, misleading or unlawfully obtained.
Object to the processing of your personal information on reasonable grounds.
Withdraw consent, where our processing relies on your consent.
Lodge a complaint with the Information Regulator.

To exercise any of these rights, contact our Information Officer using the details below. We may need to verify your identity before acting on a request.

9. Information Officer

Laws M.K. Mohlomi — Managing Director and Information Officer
Cholaw Consulting (Pty) Ltd
14 Suid Street, Miederpark, Potchefstroom, 2530
Email: lawson@cholawconsulting.co.za
Telephone: (018) 000 5255

10. The Information Regulator

If you are not satisfied with how we have handled your personal information, you may complain to the Information Regulator (South Africa):

JD House, 27 Stiemens Street, Braamfontein, Johannesburg, 2001
Email: enquiries@inforegulator.org.za
Website: inforegulator.org.za

11. Changes to this policy

We may update this policy from time to time. The version published on this page is the current one, and the “last updated” date above reflects when it last changed.