Privacy policy

1. Who is responsible

Global Executive Consultants (Pty) Ltd ("GEC") is the responsible party under the Protection of Personal Information Act (POPIA). Our Information Officer handles every privacy request and PAIA request: [email protected].

2. What we collect

Enquiry form. Your name, email address, organisation (optional), the service you selected, location, asset count if you gave one, and your message. If you use "Email us directly", that message is sent by your own mail application.

Tender quotations (/tenders/). Supplier name, email, phone, company registration and VAT numbers, proposal summary, quoted amount, delivery and warranty terms, insurance and compliance declarations, the quotation PDF, and the IP address and browser type of the submission, kept as an audit record.

Technical data. Cloudflare and Netlify process your IP address and request details to deliver the site and protect it from abuse. We do not run advertising pixels or analytics trackers. Your light/dark preference is stored in this browser's localStorage, not as a cookie; GEC staff pages keep a sign-in token in sessionStorage.

Content from other providers. Fonts load from Google Fonts, some pages load scripts from cdnjs (Cloudflare), and the bridge map pages load map tiles from Esri (ArcGIS Online). Those providers receive a standard request from your browser, including your IP address.

Path to Professionalism has its own privacy notice.

3. Why we collect it

To reply to your enquiry; to evaluate tender quotations fairly and keep an auditable procurement record; and to keep the site secure. We do not use any of it for marketing and we do not sell it.

4. Who processes it, and where

Netlify (hosting, form storage and server functions, United States). Cloudflare (DNS and security proxy, global network). Supabase (tender records and quotation documents in a private storage bucket, database hosted in the EU, Stockholm). Mailgun (notification emails to GEC, EU region). Google Fonts and Esri receive only the browser requests described above.

Because these providers process information outside South Africa, we rely on their data processing terms, which give protection comparable to POPIA (section 72).

5. How long we keep it

Enquiries: as long as needed to deal with your enquiry and any project that follows, then deleted. Tender quotations: for as long as our procurement records must be kept for audit, then deleted. Security logs: as held by Cloudflare and Netlify under their own retention.

6. How we protect it

Everything travels over HTTPS. Quotation documents sit in a private storage bucket that only GEC's server functions can read. Staff pages need Cloudflare Access and a staff token, and the database enforces row-level security so each account only sees its own records.

7. Your rights (POPIA)

You may ask for access to, correction of, or deletion of the personal information we hold about you, and you may object to its processing. Contact [email protected]. You may also lodge a complaint with the Information Regulator (South Africa).

8. Platform demos

The platform demos run on simulated or aggregated public data. TowerSentry sends its simulated sensor values to our server to compute the demo results; nothing you type into a demo is personal information, and none of it is stored.

9. Changes

We update this page when what the site does changes, and the effective date above changes with it.