Privacy Policy
Processing is lawful only where a basis exists
Dovrano & Sons Financial Consulting (Pty) Ltd trading as Dovrano & Sons ("we", "us") processes personal information under the Protection of Personal Information Act 4 of 2013 (POPIA). Each processing activity below is anchored to a specific lawful basis under section 11 of POPIA — consent, contract performance, legitimate interest, or legal obligation. Where consent is the basis, it may be withdrawn at any time without affecting processing already carried out.
Purpose-to-basis reference table
| Processing purpose | Data involved | Legal basis (POPIA s11) |
|---|---|---|
| Responding to contact form enquiries | Name, email address, phone number (if given), message content | Necessary for taking pre-contractual steps at your request / legitimate interest in responding to enquiries |
| Operating the email subscription list | Email address, subscription timestamp | Consent, given by opting in |
| Sending consulting-related updates to subscribers | Email address, engagement data (opens/clicks, if tracked) | Consent, withdrawable via unsubscribe link |
| Fraud prevention and abuse monitoring on form submissions | IP address, submission metadata | Legitimate interest in securing our systems |
| Statutory bookkeeping where enquiries lead to engagements | Client identification and correspondence records | Legal obligation under applicable tax and financial-advisory record-keeping laws |
Contact form: what happens when you submit it
The contact form on dovrano.site collects the name, email address, optional phone number, and message you type. Submission transmits this data to our email inbox at info@dovrano.site and, where applicable, to a hosted form-processing service acting as our operator under section 20 of POPIA. We use the data solely to answer your enquiry about our financial consulting services. We do not add contact-form submitters to the email subscription list unless you separately opt in.
Email subscription: what happens when you sign up
Subscribing requires an affirmative opt-in action. We record your email address, the date and time of subscription, and confirmation status. Subscription emails are sent via a third-party mailing platform acting as our operator. Every email includes an unsubscribe link; clicking it removes you from future mailings and triggers deletion of your subscriber record within a reasonable period, subject to suppression-list retention required to honour your opt-out.
Cookies
The site uses cookies as described in our separate Cookie Policy. Strictly necessary cookies are placed without consent as they are required for the site to function; analytics and marketing cookies are placed only after you accept them via the consent banner.
Hosting and cross-border transfer
The website and associated form and mailing infrastructure may be hosted on servers located outside South Africa. Where personal information is transferred across borders, we rely on section 72 of POPIA, ensuring the recipient is subject to a law, binding corporate rules, or agreement providing an adequate level of protection substantially similar to POPIA.
Retention
Contact form correspondence is retained for as long as necessary to resolve the enquiry and for a reasonable period thereafter for record-keeping, ordinarily not exceeding 24 months from last contact unless a client relationship arises, in which case statutory financial and tax record-keeping periods apply. Subscription records are retained for the duration of the subscription plus a limited suppression period after unsubscription.
Recipients of personal information
Personal information is disclosed only to operators engaged to provide form-hosting, email delivery, and IT infrastructure services, each bound by written processing terms, and where required by law, regulator, or court order. We do not sell personal information.
Data subject rights and how to exercise them
Under POPIA you may request access to, correction of, or deletion of your personal information; object to processing based on legitimate interest; withdraw consent at any time; and lodge a complaint with the Information Regulator of South Africa. Requests should be directed to info@dovrano.site or +27 44 910 9522. We will respond within the timeframes prescribed by POPIA. The Information Regulator can be contacted at [email protected] if you believe your rights have been infringed.
Security measures
We apply reasonable technical and organisational measures, including access controls, encrypted transmission, and restricted operator access, to safeguard personal information against loss, unauthorised access, or disclosure, as required by section 19 of POPIA.
Information Officer
Our Information Officer can be contacted at info@dovrano.site or +27 44 910 9522, at our registered address: 48 Cradock Street, Wilderness Heights, 6530 George, South Africa, for any POPIA-related query, access request, or complaint.
Changes to this policy
This policy may be updated to reflect changes in our processing activities or legal requirements. The current version is always available at dovrano.site/privacy.html.