Privacy Policy

This Privacy Policy explains how Dovenaro Financial Consulting (Pty) Ltd, trading as Dovenaro ("we", "us", "our"), processes personal information in connection with our financial consulting services and our website at dovenaro.site. We process personal information in accordance with the Protection of Personal Information Act 4 of 2013 ("POPIA").

1. Your Rights and How to Exercise Them

As a data subject under POPIA, you have the following rights in respect of the personal information we hold about you:

• Right to access: you may request confirmation of whether we hold personal information about you and request a copy of that information.
• Right to correction: you may request that we correct or update inaccurate, incomplete, misleading or outdated personal information.
• Right to deletion: you may request that we delete or destroy personal information that we are no longer authorised to retain, or that was collected unlawfully.
• Right to object: you may object, on reasonable grounds, to the processing of your personal information, including processing for direct marketing purposes.
• Right to withdraw consent: where processing is based on your consent (for example, our email newsletter), you may withdraw that consent at any time, without affecting the lawfulness of processing carried out before withdrawal.
• Right to lodge a complaint: you may lodge a complaint with the Information Regulator of South Africa if you believe we have processed your personal information unlawfully.

We will acknowledge receipt of any request within 5 business days and will provide a substantive response, or the requested information, within 21 business days of receipt of a complete and verifiable request. Where a request is complex, we may extend this period by a further 21 business days and will notify you in writing of the extension and the reasons for it. There is no charge for a first access request in a 12-month period; a reasonable fee may be charged for repeat or excessive requests, calculated in accordance with the prescribed fee schedule under POPIA.

2. Contact Us About Your Personal Information

To exercise any of the rights listed above, or to raise any query about this policy, please contact us using the details below. Please mark your request "POPIA Request" so it can be routed promptly.

If you are not satisfied with our response, you may escalate your complaint to the Information Regulator of South Africa (JZ Cuillé Building, 27 Stiemens Street, Braamfontein, Johannesburg; [email protected]).

3. Who We Are

Dovenaro Financial Consulting (Pty) Ltd, registration number 4663999082, trading as Dovenaro, is a financial consulting business registered with the Companies and Intellectual Property Commission (CIPC). We are the responsible party (equivalent to a "data controller") in respect of the personal information described in this policy.

4. What Personal Information We Collect and Why

4.1 Contact Form

When you submit an enquiry through the contact form on dovenaro.site, we collect the personal information you provide, typically your name, email address, telephone number, and the content of your message, which may include details about your financial circumstances or objectives if you choose to share them. We process this information to respond to your enquiry, to assess whether we can assist you with our consulting services, and to keep a record of our correspondence. The legal basis for this processing is your consent, given by submitting the form, and, where applicable, our legitimate interest in responding to prospective client enquiries. We retain contact form submissions for 24 months from the date of last contact, after which they are deleted or anonymised, unless a longer period is required to comply with a legal obligation or to establish, exercise or defend a legal claim.

4.2 Email Subscription

If you subscribe to our email updates, we collect your email address and, where provided, your name. We process this information to send you newsletters, market commentary, and updates about our consulting services. The legal basis for this processing is your consent, obtained through an opt-in mechanism at the point of subscription. Every email we send includes an unsubscribe link; unsubscribe requests are actioned within 2 business days. We retain subscriber data for as long as you remain subscribed, and for 30 days thereafter to process the unsubscribe and update our suppression list, after which the record is deleted.

4.3 Automatically Collected Information

When you visit dovenaro.site, our hosting provider and analytics tools may automatically log technical information such as your IP address, browser type, device type, pages visited, and time of visit. This information is used to operate and secure the website and, where you have consented via our cookie banner, to understand how visitors use the site. See our separate Cookie Policy for details of the categories of cookies used and how to manage your preferences.

5. Hosting and Third-Party Processors

Our website and the data collected through it are hosted and processed with the assistance of third-party service providers, including our website hosting provider, email delivery platform, and analytics provider. These providers act as operators (equivalent to "processors" under POPIA) and process personal information only on our documented instructions and under written agreements that require them to apply appropriate security safeguards and to notify us without undue delay of any security compromise. Where any provider is located outside South Africa, we take reasonable steps to ensure that the recipient is subject to a law, binding corporate rules, or agreement that provides an adequate level of protection substantially similar to POPIA before any transfer takes place.

6. Security Safeguards

We implement appropriate technical and organisational measures to protect personal information against loss, unauthorised access, interference, modification, or destruction, including access controls, encrypted transmission of form submissions, and restricted internal access to personal information on a need-to-know basis. In the event of a security compromise that has compromised the confidentiality, integrity or availability of personal information, we will notify the Information Regulator and affected data subjects as soon as reasonably possible after discovery, in accordance with section 22 of POPIA.

7. Retention

We do not retain personal information for longer than is necessary to fulfil the purposes for which it was collected, subject to any longer retention period required by law (for example, financial and tax record-keeping obligations, which may require retention of certain records for up to 5 years). Retention periods applicable to specific categories of data are set out in sections 4.1 and 4.2 above.

8. No Sale of Personal Information

We do not sell, rent, or trade personal information collected through this website to third parties for their own marketing purposes.

9. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The date of the most recent revision will be indicated below. Material changes will be communicated to active email subscribers by email at least 7 days before they take effect.

Last updated: 2026