Privacy Policy

Masegare & Associates Incorporated
Website: https://www.masegare.co.za/
Last Updated: September 2026
Effective for Website Use: 2026–2027

1. Introduction

Masegare & Associates Incorporated (“Masegare & Associates”, “MAI”, “we”, “us” or “our”) respects the privacy of our clients, prospective clients, employees, job applicants, suppliers, business partners and visitors to our website.

We are committed to protecting personal information and processing it responsibly, transparently and securely in accordance with applicable South African data-protection legislation, including the Protection of Personal Information Act 4 of 2013 (“POPIA”) and, where applicable, the Promotion of Access to Information Act 2 of 2000 (“PAIA”).

This Privacy Policy explains what personal information we may collect, why we collect it, how it may be used, stored and shared, and the rights available to individuals whose personal information we process.

2. Who We Are

Masegare & Associates Incorporated is a South African professional services firm providing services across areas including audit and assurance, accounting, governance, risk management, advisory, forensic services, financial reporting, technology and related professional services.

For purposes of POPIA, Masegare & Associates may act as a Responsible Party where we determine the purpose and means of processing personal information.

Our website is:

https://www.masegare.co.za/

Our principal business address is:

Block B, Midridge Office Estate South
International Business Gateway Park
Corner New Road and Sixth Road
Midrand, Gauteng, 1685
South Africa

General enquiries may be directed to:

Email: admin@masegare.co.za
Telephone: 011 420 0445

Privacy-related requests will be directed to the appropriate Information Officer or authorised representative of Masegare & Associates.

3. Personal Information We May Collect

Depending on how you interact with us, we may collect information including:

• Name and surname;

• Email address;

• Telephone or mobile number;

• Company or organisation name;

• Job title or professional information;

• Information submitted through website contact or consultation forms;

• Correspondence and communications with MAI;

• Curriculum vitae, qualifications, employment history and other recruitment information submitted by job applicants;

• Supplier, service-provider and business-partner information;

• Billing, transactional or financial information where relevant to a business relationship;

• Internet Protocol (IP) address;

• Browser, device and operating-system information;

• Website usage, navigation and technical information;

• Cookie and similar technology information; and

• Any other information voluntarily provided to us.

Where necessary and legally permitted, MAI may also process special personal information subject to the additional protections required by applicable law.

4. How We Collect Personal Information

We may collect personal information:

• Directly from you when you contact us, submit an enquiry, request a consultation or engage our services;

• When you submit employment or internship applications;

• Through contractual, supplier or professional relationships;

• Through correspondence by email, telephone or other communication channels;

• Automatically when you interact with our website, subject to applicable cookie and privacy settings;

• From publicly available sources where lawful and appropriate; and

• From third parties where you have authorised the disclosure or where another lawful basis permits us to obtain the information.

5. Why We Process Personal Information

Masegare & Associates may process personal information for purposes including:

• Responding to enquiries and requests for information;

• Providing quotations, proposals and professional services;

• Managing client and prospective-client relationships;

• Performing contractual obligations;

• Conducting professional engagements;

• Communicating with clients, suppliers and other stakeholders;

• Processing employment, internship and recruitment applications;

• Managing suppliers, service providers and business relationships;

• Maintaining financial, accounting and administrative records;

• Complying with statutory, regulatory, professional and contractual obligations;

• Protecting MAI’s systems, employees, clients, information and property;

• Preventing or detecting fraud, misconduct, security threats and unlawful activity;

• Improving our website, services and client experience;

• Conducting website analytics and performance monitoring;

• Managing events, training programmes and professional communications;

• Conducting marketing where permitted by law; and

• Establishing, exercising or defending legal rights.

We will endeavour to collect personal information only where it is adequate, relevant and reasonably necessary for the purpose for which it is processed.

6. Lawful Processing

MAI processes personal information in accordance with POPIA.

Depending on the circumstances, processing may take place because:

• You have provided consent;

• Processing is necessary to perform a contract or take steps requested before entering into a contract;

• Processing is necessary to comply with a legal obligation;

• Processing protects a legitimate interest of the data subject;

• Processing is necessary for the proper performance of a public-law duty by a public body, where applicable; or

• Processing is necessary for pursuing the legitimate interests of MAI or a third party, subject to applicable legal safeguards.

Where consent is relied upon, you may withdraw that consent subject to applicable law and any consequences associated with the withdrawal.

7. Website Contact and Consultation Forms

When you complete a contact, enquiry or consultation form on our website, we may collect information such as your:

• First name;

• Surname;

• Email address;

• Telephone number;

• Subject of enquiry; and

• Message or other information submitted.

This information is used primarily to respond to your enquiry, communicate with you and, where appropriate, establish or manage a professional relationship.

Information submitted through website forms should not include unnecessary confidential, sensitive or special personal information unless MAI specifically requests it through an appropriate secure process.

8. Recruitment and Job Applications

Where individuals apply for employment, internships, graduate programmes or other opportunities with MAI, we may process information including CVs, qualifications, identification information, employment history, references and other information relevant to the recruitment process.

Recruitment information will be used for purposes such as:

• Assessing suitability for a position;

• Communicating with applicants;

• Conducting lawful verification or reference processes;

• Managing recruitment and appointment decisions; and

• Meeting employment and regulatory requirements.

Applicant information will be retained only for as long as reasonably necessary for recruitment, legal, administrative or legitimate business purposes, subject to applicable retention requirements.

9. Cookies and Similar Technologies

Our website may use cookies and similar technologies to provide functionality, maintain security, remember user preferences, analyse website performance and improve user experience.

Cookies may include:

Strictly Necessary Cookies
These cookies support essential website functionality and security.

Functional Cookies
These cookies may remember preferences and improve website functionality.

Analytics Cookies
Where enabled, these technologies help us understand how visitors use our website, such as pages visited, time spent on the website, navigation patterns and general technical information.

Marketing Cookies
Where used, marketing or advertising technologies will be managed in accordance with applicable privacy and direct-marketing requirements.

Visitors may manage cookies through available cookie controls and their browser settings. Disabling certain cookies may affect website functionality.

Where consent is required for particular tracking technologies, MAI will seek appropriate consent before activating those technologies.

10. Website Analytics

Where analytics services are used, they may process technical information such as:

• IP address;

• Browser and device information;

• Operating system;

• Pages visited;

• Referring website;

• Approximate geographic information;

• Time spent on pages; and

• Website navigation patterns.

We use this information to understand website performance, improve content, enhance security and provide a better user experience.

Where third-party analytics providers are used, their processing is subject to appropriate contractual, privacy and security safeguards.

11. Comments

If commenting functionality is enabled on the MAI website, information entered into the comments form, together with certain technical information such as an IP address and browser information, may be collected for moderation, security and spam-prevention purposes.

If the website does not provide public commenting functionality, this section may not apply.

12. Media and Uploaded Information

Where users are permitted to upload photographs, documents or other media to the website, they should avoid submitting unnecessary personal or sensitive information.

Images may contain embedded metadata, including location information. Users should remove unnecessary location or other personal metadata before uploading images where appropriate.

13. Embedded Content and External Websites

Our website may contain embedded content or links to third-party websites, including videos, articles, social-media platforms or other external resources.

Third-party websites and platforms may process personal information independently and may use their own cookies or tracking technologies.

Masegare & Associates does not control the privacy practices of independent third parties. Visitors are encouraged to review the privacy policies of external websites before providing personal information to them.

14. Direct Marketing

MAI may communicate information regarding our services, training programmes, events, professional insights or related offerings where permitted by law.

Electronic direct marketing will be conducted in accordance with POPIA and other applicable requirements.

Where required, MAI will obtain appropriate consent before sending unsolicited electronic direct-marketing communications.

Where an existing client relationship permits relevant communications under applicable law, communications will remain subject to applicable requirements.

Marketing communications will provide an appropriate means of opting out or requesting that further marketing communications cease.

A person who withdraws consent or objects to direct marketing will have that preference respected in accordance with applicable law.

15. Who We May Share Personal Information With

MAI does not sell personal information.

Where reasonably necessary and legally permitted, personal information may be disclosed to:

• Employees and authorised representatives of MAI;

• Professional advisers;

• IT, hosting, cloud and cybersecurity service providers;

• Website and technology service providers;

• Accounting, auditing or administrative service providers;

• Recruitment and verification service providers;

• Consultants and subcontractors engaged to support legitimate business activities;

• Government departments, regulators, law-enforcement authorities or courts where required by law;

• Professional or regulatory bodies where legally or professionally required; and

• Other third parties authorised by the data subject or permitted by law.

Where third parties process personal information on behalf of MAI as operators, we take reasonable steps to require appropriate confidentiality, privacy and information-security safeguards.

16. International Transfers

Certain technology, cloud-hosting, communication, software or professional service providers used by MAI may process or store information outside South Africa.

Where personal information is transferred outside the Republic of South Africa, MAI will take reasonable steps to ensure that the transfer is conducted in accordance with POPIA, including applicable requirements relating to adequate protection, contractual safeguards, consent or other lawful grounds for cross-border processing.

17. Information Security

Masegare & Associates takes reasonable and appropriate technical and organisational measures to protect personal information against:

• Loss;

• Damage;

• Unauthorised destruction;

• Unlawful access;

• Unauthorised disclosure; and

• Unlawful processing.

Measures may include access controls, authentication, cybersecurity safeguards, employee confidentiality obligations, data-management procedures, monitoring, backup controls and other measures appropriate to the nature of the information and associated risk.

No internet-based system can be guaranteed to be completely secure. MAI therefore continually reviews and improves appropriate information-security measures.

18. Security Compromises

Where MAI has reasonable grounds to believe that personal information has been accessed or acquired by an unauthorised person, the matter will be managed in accordance with POPIA and applicable Information Regulator requirements.

Where required, affected data subjects and the Information Regulator will be notified as soon as reasonably possible, subject to any lawful restrictions on notification.

MAI will also take reasonable steps to contain, investigate and mitigate the consequences of a security compromise.

19. Retention of Personal Information

MAI retains personal information only for as long as necessary to fulfil the purposes for which it was collected or processed, subject to:

• Applicable legislation;

• Contractual obligations;

• Professional and regulatory requirements;

• Legitimate business requirements;

• Dispute-resolution requirements; and

• The establishment, exercise or defence of legal claims.

Once information is no longer required and there is no lawful reason to retain it, MAI will take reasonable steps to securely destroy, delete or de-identify it.

20. Your Rights

Subject to POPIA and other applicable legislation, a data subject may have the right to:

• Request confirmation of whether MAI holds personal information about them;

• Request access to their personal information;

• Request correction of inaccurate, outdated, incomplete or misleading information;

• Request deletion or destruction of information where legally permitted;

• Object to certain processing of personal information;

• Withdraw consent where processing is based on consent;

• Object to direct marketing;

• Request that marketing communications cease;

• Lodge a complaint with the Information Regulator; and

• Exercise applicable rights under PAIA.

Certain rights may be subject to lawful limitations, including legal, contractual, professional, regulatory, evidentiary or record-retention requirements.

21. Access to Information and PAIA

Masegare & Associates recognises rights of access to information under the Promotion of Access to Information Act 2 of 2000 (PAIA).

Requests for access to records should be submitted in accordance with MAI’s PAIA procedures and applicable legislation.

Where available, MAI’s PAIA Manual should be accessible through the Legal or Privacy section of this website.

PAIA Manual: [Insert link to MAI PAIA Manual]

22. Personal Information of Children

MAI’s website and professional services are not generally intended to collect personal information directly from children without an appropriate lawful basis.

Where personal information relating to a child must be processed, MAI will do so only where legally permitted and subject to appropriate safeguards and, where required, authorisation or consent from a competent person.

23. Automated Decision-Making

MAI does not intend to make decisions that produce significant legal consequences for individuals solely through automated processing unless such processing is lawful and appropriate safeguards are implemented.

Where automated tools are introduced that materially affect data subjects, MAI will review the associated privacy and legal requirements.

24. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect:

• Changes in legislation or regulations;

• Regulatory guidance;

• Changes to our website;

• New technologies;

• Changes to our services; or

• Changes to our information-processing practices.

The latest version will be published on the MAI website together with the relevant revision or effective date.

Visitors are encouraged to review this Privacy Policy periodically.

25. Contact Masegare & Associates

Questions, requests or concerns regarding this Privacy Policy or the processing of personal information may be directed to:

Masegare & Associates Incorporated

Address:
Block B, Midridge Office Estate South
International Business Gateway Park
Corner New Road and Sixth Road
Midrand, Gauteng, 1685
South Africa

Telephone: 011 420 0445
Email: admin@masegare.co.za
Website: https://www.masegare.co.za/

Please indicate “Privacy / POPIA Request” in the subject line where applicable so that the enquiry can be directed appropriately.

26. Information Regulator of South Africa

A data subject who believes that their personal information has been processed unlawfully may lodge a complaint with the Information Regulator (South Africa).

Information Regulator (South Africa)
Woodmead North Office Park
54 Maxwell Drive
Woodmead
Johannesburg, Gauteng
South Africa

Telephone: 010 023 5200
Email: enquiries@inforegulator.org.za

Complaints and other POPIA-related submissions may also be made through the Information Regulator’s official electronic services platform.

---

© 2026–2027 Masegare & Associates Incorporated. All Rights Reserved.