Privacy Policy

Masico Advisory Proprietary Limited (registration number 2020/563081/07) is the “Responsible Party” for your personal information under POPIA where we determine the purpose and means of processing it. Where we process personal information on behalf of a client, in the course of an engagement, the relevant client remains the Responsible Party and we act on its behalf.

Our Founder acts as Masico Advisory’s Information Officer and is responsible for overseeing compliance with this Privacy Policy and POPIA. If you have any questions about this Privacy Policy, or wish to exercise any right you may have under POPIA, please contact us at info@masico.co.za.

• Identity Data – full name, identity number, job title, or company details such as name, registration number and industry;
• Contact Data – email address, telephone number and (where relevant to an engagement) postal or physical address;
• Engagement and Transaction Data – information you or a client provide to us in the course of a corporate finance, legal advisory or strategy consulting engagement, including transaction, corporate, financial, and contractual information;
• Financial Data – bank account and billing details, where necessary to invoice for, or receive payment for, our services;
• Website Usage Data – information about how you use this website, collected automatically (see Cookies, below).

We collect personal information directly from you (for example, when you complete our contact form, correspond with us by email or telephone, or engage us or are engaged by us in connection with a transaction or matter). We may also receive personal information about you from a client or counterparty in the course of an engagement, or from a professional advisor, referral, or publicly available source (such as the Companies and Intellectual Property Commission).

We process personal information for purposes that include responding to your enquiry, fulfilling our contractual and professional obligations to clients, managing our client relationships (including billing and administration), complying with our legal and regulatory obligations, and protecting our legitimate business interests. We rely on one or more of the following lawful grounds recognised under POPIA: your consent; the necessity of processing to enter into or perform a contract with you; our legitimate interests (weighed against your interests and rights); or compliance with a legal obligation.

We may share personal information with our own personnel, advisors and/or consultants who require it to provide our services; with professional advisors, auditors and service providers who assist us in operating our business, on a confidential basis and only to the extent necessary; with a counterparty, co-advisor, or other party to a transaction, where necessary for the performance of an engagement and in accordance with our confidentiality obligations; and with regulators, courts, or other authorities, where we are legally required to do so. We require all third parties to whom we disclose personal information to protect it in accordance with POPIA, and we do not sell your personal information.

This website may use cookies and similar technologies to recognise repeat visitors and to understand, in aggregate, how the website is used, so that we can improve it. Cookies used by this website do not, of themselves, identify you personally. Most browsers allow you to refuse or delete cookies; please note that doing so may affect certain features of this website.

We may process or store personal information using service providers (for example, cloud email, document storage, or software providers) whose servers are located outside South Africa. Where we do so, we take reasonable steps to ensure your personal information continues to receive a level of protection substantially similar to that required under POPIA, including, where appropriate, by way of contractual safeguards with the relevant service provider.

We retain personal information only for as long as is necessary for the purposes for which it was collected, including to satisfy any legal, regulatory, accounting, or professional record-keeping requirement applicable to our engagements, after which it is securely deleted or anonymised.

We have put in place appropriate technical and organisational measures to protect your personal information against loss, misuse, unauthorised access, and unauthorised disclosure. In the event of a security compromise that has compromised your personal information, we will notify you and the Information Regulator as required under POPIA.

Subject to POPIA, you have the right to be notified that your personal information is being collected or has been accessed by an unauthorised person; to access the personal information we hold about you; to request the correction, destruction, or deletion of your personal information in appropriate circumstances; to object to the processing of your personal information; and to lodge a complaint with the Information Regulator, or to institute civil proceedings, regarding any alleged non-compliance with POPIA. To exercise any of these rights, please contact us using the details above.

We would appreciate the opportunity to address any concern you may have before you approach the Information Regulator, so please contact us in the first instance. You nonetheless have the right to lodge a complaint at any time with the Information Regulator of South Africa, whose details are: Woodmead North Office Park, 54 Maxwell Drive, Woodmead, Johannesburg, 2191; email enquiries@inforegulator.org.za or, for complaints specifically regarding personal information, POPIAComplaints@inforegulator.org.za; telephone 010 023 5200 (or toll-free 0800 017 160).

We may update this Privacy Policy from time to time to reflect changes in our practices or in applicable law. The version published on this website at the time you access it will apply, and we encourage you to review it periodically.