Privacy

Privacy Policy

This notice explains how Stander Investment Holdings (Pty) Ltd (“SIH”, “we”) processes personal data when you use this website or contact the firm. It is issued to meet the transparency duties of the EU and UK GDPR, the UK Data Protection Act 2018, and South Africa’s Protection of Personal Information Act 4 of 2013 (POPIA).

Last updated 18 September 2026 · Stander Investment Holdings (Pty) Ltd

1. Data controller

The controller of personal data collected through this website is Stander Investment Holdings (Pty) Ltd, registration number 2017 / 351945 / 07, established and managed in the Republic of South Africa.

Privacy, access, correction, erasure, and objection requests must be sent through the Contact Us page, marked as a data protection request. SIH does not publish a personal email or street address on this website.

2. Personal data we collect

We collect only what is needed to operate the site and to respond to you:

• Identity and contact details you submit: name, email address, organisation, subject, and message.
• Enquiry type, including whether the message is a commercial enquiry or a data-protection request.
• Captcha verification, which is generated and checked in your browser and is not stored by SIH.
• Essential preference data: your cookie and privacy acknowledgement, stored locally on your device.
• Technical data automatically provided by your browser (such as IP address, browser type, and pages requested) in ordinary web-server logs used for security and fault diagnosis.

We do not collect special-category data through this website, and we do not use this site for automated decision-making or profiling.

3. Purposes and lawful bases

GDPR and UK GDPR require a lawful basis for each purpose. POPIA requires processing to be justified. We rely on the following:

• Responding to project, partnership, or capital enquiries — legitimate interests (GDPR Art. 6(1)(f)) and steps at your request prior to a contract (Art. 6(1)(b)); POPIA s11(1)(b) and (d).
• Handling data-subject rights requests — legal obligation (Art. 6(1)(c); POPIA Chapter 3).
• Website security, abuse prevention, and essential operation — legitimate interests (Art. 6(1)(f)).
• Recording your cookie acknowledgement — legitimate interests, and where required by ePrivacy rules, consent stored as an essential preference on your device.
• Where you tick the privacy box on the contact form, consent (Art. 6(1)(a); POPIA s11(1)(a)) to process the submitted details for the stated purpose. You may withdraw consent through Contact Us. Withdrawal does not affect processing already completed, or processing that SIH must continue on another lawful basis.

4. Cookies and similar technologies

This website does not use advertising cookies, social pixels, or analytics cookies.

The only client-side storage we set is an essential preference that records whether you have acknowledged this notice, so the banner is not shown on every visit. Strictly necessary storage of this kind does not require consent under the ePrivacy Directive, but we still explain it and let you review the choice.

If SIH later introduces analytics or marketing cookies, they will remain off until you opt in, and this policy will be updated first.

5. Recipients

Personal data submitted through the contact form is sent by your own mail application to SIH for handling. It is not sold, rented, or used for advertising networks.

• SIH personnel and professional advisers who need the information to respond or to meet a legal duty.
• Authorities where disclosure is required by law, regulation, or to protect SIH’s legal rights.
• Independent infrastructure providers that host this website, acting as processors under instruction, for security and availability only.
• LinkedIn, if you choose to leave this site via the LinkedIn link — that service is controlled by its own operator and privacy notice.

6. International transfers

SIH is established in South Africa. If you contact us from the EEA, the United Kingdom, or another country, your message is transferred to South Africa in order to be read and answered.

South Africa is not the subject of an EU adequacy decision. Where GDPR Chapter V applies, the transfer is necessary for the performance of steps requested by you before entering a contract, or for SIH’s legitimate interest in corresponding with you, with appropriate confidentiality and security measures. Commercial materials remain subject to the NCNDA.

7. Retention

SIH keeps personal data only for as long as the purpose requires, then deletes or destroys it. This website does not keep a copy of contact-form submissions.

The schedule below is the operational retention rule. A shorter period applies if you successfully request erasure and no legal hold remains. A longer period applies only where South African law, tax rules, or an active dispute require it.

• 12 months on this device

  Cookie and privacy acknowledgement

  Deleted automatically when the period ends; the notice is shown again.

• This visit only

  Captcha challenge

  Held in the browser during the form session and never written to SIH systems.

• Not stored

  Contact form contents on this website

  The site does not save name, email, or message. Your mail application carries the message to SIH.

• Up to 3 years after the last relevant exchange

  Commercial enquiry correspondence once received by SIH

  Deleted or securely destroyed unless a longer legal or dispute period applies.

• Up to 2 years after the request is closed

  Data protection requests and SIH’s response file

  Kept only to evidence that the request was handled, then deleted.

• Up to 30 days

  Security and hosting logs

  Overwritten in the ordinary operation of the host. Not used for marketing.

8. Security

SIH applies organisational and technical measures appropriate to a professional advisory firm, including restricted access to correspondence, confidentiality and NCNDA controls, and transport encryption on this website (HTTPS).

No method of transmission or storage is completely secure. You should not send payment-card numbers, identity documents, or other highly sensitive files through the public contact form.

9. Your rights

Where GDPR, UK GDPR, or POPIA applies to you, you may request the following through Contact Us, selecting a data protection request:

• Access to personal data we hold about you, and a copy of it.
• Rectification of inaccurate or incomplete data.
• Erasure, where the law allows (the right to be forgotten).
• Restriction of processing, and objection to processing based on legitimate interests.
• Data portability, where processing is based on consent or contract and is carried out by automated means.
• Withdrawal of consent, where consent was the basis used.
• Complaint to a supervisory authority, without affecting any other remedy.

SIH will respond within the time required by the applicable law (one month under GDPR, with a possible extension for complex requests; a reasonable period under POPIA). We may need to verify your identity before fulfilling a request.

EEA residents may complain to their local data protection authority. UK residents may complain to the Information Commissioner’s Office. In South Africa, complaints may be made to the Information Regulator.

10. Children

This website is intended for business counterparties and is not directed at children. SIH does not knowingly collect personal data from anyone under 18 through this site.

11. Changes

We may update this notice when our processing, the law, or this website changes. The date at the top of the page is the current version. Material changes will be reflected here before new optional cookies or new processing are introduced.

To exercise your rights or ask a privacy question, use Contact Us.