Privacy policy

Information we collect

We collect and process the following types of personal data:

• Information you provide: when you submit a form, contact us, subscribe to updates, or engage with CapabilityFx services, we may collect personal information such as your name, email address, company, job title, phone number, and any other information you provide voluntarily.
• Automatically collected data: technical data such as your IP address, browser type, device type, pages visited, and interactions with our site, used to monitor performance, improve usability, and optimise your experience.
• Cookies and tracking technologies: we use cookies and similar technologies to support site functionality, personalise content, and analyse usage. You can manage cookie preferences via your browser settings.

How we use your information

We use your personal data to:

• Deliver, operate, and improve our services, including diagnostics, assessments, and capability-building solutions.
• Provide personalised reports and insights based on your inputs, preferences, and areas of interest.
• Respond to your enquiries and communicate updates related to our services, events, or resources.
• Analyse usage patterns and site performance to improve functionality and content relevance.
• Comply with legal and regulatory requirements, enforce our terms of use, and safeguard the integrity of our services.

Legal basis for processing (GDPR)

If you are located in the European Economic Area (EEA) or the United Kingdom, we process your personal data under the following legal bases:

• Consent: when you explicitly give permission, for example by subscribing to newsletters or opting in to communications.
• Contractual necessity: to fulfil our obligations in delivering services you request, such as providing access to assessments or follow-up resources.
• Legitimate interests: improving our services, maintaining business operations, and communicating relevant updates, provided these interests do not override your fundamental rights.
• Legal obligation: where necessary to comply with applicable laws, regulations, or lawful government requests.

How we share your information

We do not sell or rent your personal data. We may share your information only in the following circumstances:

• With trusted third-party service providers who support our operations, such as website hosting, analytics, CRM platforms, or payment processors. These partners are bound by strict confidentiality and data protection obligations.
• With legal or regulatory authorities when required to comply with applicable laws, respond to legal requests, enforce our terms of use, or protect the rights, safety, or security of our users, clients, or the public.

International data transfers

Your personal data may be transferred to, and processed in, countries outside your country of residence, including jurisdictions that may not offer the same level of data protection as your local laws.

When we transfer data internationally, we put appropriate safeguards in place, such as Standard Contractual Clauses approved by the European Commission and binding contractual agreements with service providers.

Data retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including providing services, complying with legal obligations, and resolving disputes. Where possible, we anonymise or securely delete data that is no longer required.

Your rights

Depending on your location and applicable data protection laws, you may have the following rights regarding your personal data:

• Access: request a copy of the personal data we hold about you.
• Correction: request corrections to inaccurate or incomplete information.
• Deletion: request that we delete your personal data in certain circumstances.
• Objection: object to certain types of processing, such as direct marketing.
• Restriction: request a limitation on how your data is processed.
• Data portability: request your data in a structured, commonly used format.
• Withdrawal of consent: where processing is based on consent, you may withdraw it at any time.

Data security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, misuse, or alteration, including secure server environments, encrypted data transmission, access controls, and regular monitoring. No system can guarantee absolute security, but we review and improve our safeguards continually.

Children's privacy

CapabilityFx does not knowingly collect or process personal data from individuals under the age of 16. Our services are intended for professionals, organisations, and individuals of legal working age. If you believe a minor has provided us with personal data, please contact us using the details below.

Changes to this policy

We may update this privacy policy from time to time. When we make material changes, we will revise the effective date at the top of the policy and, where appropriate, notify you through our website or other direct communications.

Contact us

If you have any questions or concerns about this privacy policy or your personal data, contact us at privacy@capabilityfx.com.

CapabilityFx (Pty) Ltd · Registration number 2025/350486/07 · 111 Puttick Avenue, Sundowner, Johannesburg, 2193, South Africa.