Business Readiness Hub

Privacy Notice

Version:
2026-07-12.v1
Effective date:
12 July 2026
Responsible party:
Business Readiness Hub
Registered company details:
Available on written request via email.

Draft document. This document is subject to final legal review before public release. It is published in draft form so that users of the Business Readiness Hub platform are informed while final review is completed.

1. Who we are

Business Readiness Hub (Registration number available on request) is the responsible party for personal information processed through the Business Readiness Hub platform. Business Readiness Hub is a trading name of Business Readiness Hub. Our registered address is available on written request via email. You may contact us at info@businessreadinesshub.co.za.

2. What this notice covers

This notice explains what personal information we collect through the Business Readiness Hub platform, why we collect it, how we use and share it, how long we keep it, and the rights you have under the Protection of Personal Information Act, 2013 (POPIA).

3. Types of personal information we collect

  • Registration information (name, email, password credentials handled by our authentication provider).
  • Business profile information (business name, sector, contact details, and other information you enter about your business).
  • Assessment answers you provide in the Quick Assessment and Comprehensive Assessment.
  • Readiness scores, generated reports and action plans derived from your answers.
  • Assistance requests and funding-support requests you submit.
  • Communication records for operational emails we send you.
  • Technical information required to run the platform (for example, an anonymous session identifier and, where you agree, analytics cookie data).

4. Why we collect personal information

  • Registration information is used to create and manage your account and to authenticate you.
  • Business profile information is used to personalise your assessments, reports and action plans.
  • Assessment answers are used to calculate your readiness scores and to generate your reports and action plans.
  • Readiness scores are calculated automatically from your answers using a weighted scoring method across the platform's readiness categories.
  • Reports and action plans are generated for your benefit so you can see your current readiness and priority next steps.
  • Assistance requests are processed so our team can respond to your request for help.
  • Funding-support requests are processed where you have qualified for and requested funding-support engagement.
  • Operational emails (registration verification, password reset, Quick Report access, assessment notifications, assistance and funding-support updates, security notifications, deactivation and reactivation confirmations) are sent to run the service you have asked for.
  • Marketing emails are sent only where you have given separate, optional marketing consent, and you can withdraw that consent at any time from Settings.

5. How we collect personal information

We collect personal information directly from you when you visit our website, complete the Quick Assessment, register an account, complete a comprehensive assessment, submit an assistance or funding-support request, or contact us by email. We also collect limited technical information generated by your use of the platform.

6. Cookies and analytics

We use strictly necessary cookies to keep you signed in and to secure the platform. Analytics cookies are disabled by default and only used after you accept them through the cookie preferences interface. Where configured, our product analytics provider is PostHog, used in a privacy-preserving configuration (no session recording, no heatmaps, no autocapture, no advertising integrations). Marketing cookies are not currently used. See our Cookie Notice for details, and change your choices at any time through Cookie Preferences in the footer.

7. Service providers who process information on our behalf

We use trusted service providers to host the platform, provide authentication, store data, and deliver operational emails. These providers act as operators on our instructions and are contractually required to keep information confidential and secure. Some providers may process personal information outside South Africa; where they do, we rely on appropriate safeguards required by POPIA.

8. Security safeguards

We apply reasonable technical and organisational measures to protect personal information, including encrypted transport, access controls, role-based permissions, database row-level security and audit logging of privileged actions.

9. Data retention

We retain personal information for as long as your account is active, and for a further reasonable period after account deactivation so that you may return and continue where you left off. Where we are required by law or by legitimate legal, contractual, operational, audit, fraud-prevention or dispute management purposes, we may retain limited personal information beyond that period. Information that no longer needs to be retained may be deleted, destroyed or de-identified. Information that is retained only for limited purposes will be restricted from further unnecessary processing.

10. Account deactivation and reactivation

You can deactivate your account at any time from Settings. Deactivation pauses your access to the platform. It does not immediately delete all your information. We preserve your business profile, assessment answers, readiness scores, reports, action plan and request history so that you may return and reactivate your account where you left off. Marketing and reminder communications are stopped during deactivation. Personal information may be retained where required or permitted for legal, contractual, operational, audit, fraud-prevention or dispute management purposes, and information that no longer needs to be retained may be deleted, destroyed or de-identified.

11. Your rights

  • Request access to the personal information we hold about you.
  • Request correction of inaccurate or outdated information.
  • Object to certain processing.
  • Request restriction of processing.
  • Request deletion or destruction of personal information where we no longer have a lawful basis to retain it.
  • Withdraw consent, including marketing and analytics consent.
  • Lodge a complaint with the Information Regulator of South Africa.

The preferred channel for privacy requests is info@businessreadinesshub.co.za. We will also consider valid requests received through another reasonably accessible channel. We may need to verify your identity before we act on a request.

12. Age restriction

Business Readiness Hub is intended for use by persons who are 18 years of age or older. The platform is not intended for and must not be used by persons under 18.

13. Changes to this notice

Where we materially update this Privacy Notice we will publish a new version and require you to acknowledge the updated version before continuing to use the authenticated platform. Previous acceptance records are preserved.

14. Contact us

Business Readiness Hub
Registration number: available on request
Trading as Business Readiness Hub
available on written request via email
info@businessreadinesshub.co.za