Legal

    Privacy Policy

    Effective date: 7 October 2026Version: 1.1

    This Privacy Policy explains how Sieora (Pty) Ltd ("Sieora", "we", "us", or "our") collects, uses, shares, and protects personal information in accordance with the Protection of Personal Information Act, 2013 (POPIA) and other applicable data protection laws. It applies to visitors to our website, our clients and their authorised representatives, prospects we engage with, and individuals whose information we process in the course of delivering our services.

    Responsible party: Sieora (Pty) Ltd
    Address: Solomons Road, Sea Point, Cape Town, South Africa, 8060
    Email: privacy@sieora.com

    Information Officer

    Our Information Officer is responsible for overseeing compliance with this policy and with POPIA. For any privacy-related query, request, or complaint, contact:

    Information Officer: Daniel Kedar - COO
    Email: daniel@sieora.com

    Personal Information We Collect

    We may collect and process the following categories of personal information:

    • Identification information (name, surname, company name)
    • Contact information (email, phone, physical address)
    • Employment and professional information (job title, employer, experience)
    • Client and contractual information
    • Financial and billing information, where applicable
    • Technical and usage data (IP address, browser type, system logs)
    • Any other information voluntarily provided to us

    Purpose of Processing

    We process personal information for legitimate business purposes, including:

    • Providing our sales, lead generation, demand generation, staffing, and related operational services
    • Managing client relationships and contracts
    • Recruitment, onboarding, and workforce management
    • Sales, marketing, and outbound engagement activities (see Direct Marketing below)
    • Compliance with legal and regulatory obligations
    • Internal reporting, analytics, and business improvement
    • Protecting our legitimate interests and business operations

    Lawful Basis for Processing

    Personal information is processed on one or more of the following lawful grounds:

    • The consent of the data subject
    • The performance of a contract to which the data subject is a party
    • Compliance with a legal obligation
    • The pursuit of our legitimate interests, or those of a third party, where these do not override the rights of the data subject

    Direct Marketing

    Where we send electronic communications for direct marketing purposes, we do so in accordance with POPIA. We send electronic direct marketing to existing customers in relation to our own similar products and services, and to other individuals only where their consent has been obtained or another lawful basis applies. Every direct marketing communication includes a clear means to opt out, and we honour opt-out requests promptly. You may withdraw consent to direct marketing at any time by contacting daniel@sieora.com.

    Automated Processing

    We may use automated tools to organise, enrich, score, and prioritise information as part of our services. We do not make decisions that produce legal or similarly significant effects on an individual based solely on automated processing without meaningful human involvement.

    POPIA Principles

    Sieora processes personal information in accordance with the eight POPIA processing conditions: accountability, processing limitation, purpose specification, further processing limitation, information quality, openness, security safeguards, and data subject participation.

    Data Subject Rights

    Data subjects have the right to:

    • Request access to their personal information
    • Request correction or deletion of their personal information
    • Object to the processing of their personal information
    • Withdraw consent at any time, where processing is based on consent
    • Opt out of direct marketing at any time
    • Lodge a complaint with the Information Regulator (South Africa) or another applicable authority

    Requests may be submitted to daniel@sieora.com. We may need to verify your identity before actioning a request.

    Data Sharing and Disclosure

    We may share personal information with:

    • Our employees and authorised contractors
    • Third-party service providers and operators engaged under written agreements
    • Clients, where required for service delivery
    • Regulatory or legal authorities, where required by law

    We do not sell personal information to third parties.

    Confidentiality of Client Business Information

    Sieora recognises that clients disclose sensitive business information in the course of engaging our services. We treat all such information, including commercial arrangements, client and prospect data, contractual relationships, and organisational intelligence, as strictly confidential.

    This information is not disclosed to, accessed by, or used by any external party outside of the vetted and authorised subprocessors and partners engaged for the specific purpose of campaign planning, build, and delivery. Access is limited on a need-to-know basis, and all recipients are bound by written confidentiality obligations equivalent to our own. This commitment applies throughout the engagement and continues after its conclusion.

    Where we process personal information on behalf of a client, we act as an operator (processor) under that client's written mandate and instructions, and only to the extent necessary to deliver the agreed services.

    Cross-Border Data Transfers

    Our operations involve entities and infrastructure located in the United States, and personal information may therefore be processed in the United States and in other jurisdictions outside South Africa. Where personal information is transferred across borders, we do so only where the recipient is subject to adequate data protection safeguards, where the data subject has consented, or where the transfer is necessary for the performance or conclusion of a contract. We apply appropriate protections to all cross-border transfers.

    Data Security

    We implement appropriate technical and organisational security measures to protect personal information, including access controls and authentication, secure systems and infrastructure, confidentiality obligations for staff and operators, and ongoing risk assessments and security reviews.

    Data Retention

    Personal information is retained only for as long as necessary to fulfil the purposes for which it was collected, unless a longer retention period is required or permitted by law.

    Cookies and Tracking

    Our website may use cookies and similar technologies to enable core functionality and to understand how the site is used. Where required, we will request your consent for non-essential cookies. Advertising and measurement tools (Meta Pixel by Meta Platforms, Google Ads by Google, LinkedIn Insight Tag by LinkedIn, Reply.io and lemlist) load only after you select Allow in our cookie notice. With your permission they receive page views, device and browser data, and, after a confirmed enquiry is received, a lead event, used to measure and optimise our advertising and to recognise business visitors. If you decline, none of these load and our forms still work. The Google and LinkedIn events we send do not include your contact details or assessment answers. Google advertising personalisation and enhanced conversions are not enabled by this setup. We store your choice, the date and the notice version in your browser. You can change or withdraw your choice at any time using "Cookie settings" in the site footer.

    Providing Your Information

    Where we request personal information, we will indicate whether provision is voluntary or mandatory, and the consequences of not providing it. In most cases, failure to provide certain information may mean we are unable to deliver a requested service.

    Complaints

    If you believe we have not handled your personal information in accordance with POPIA, you may lodge a complaint with us at daniel@sieora.com, or directly with the Information Regulator (South Africa):

    Website: https://inforeg.org.za
    Complaints email: POPIAComplaints@inforeg.org.za

    (Please verify the Regulator's current contact details before publishing.)

    Changes to This Policy

    We may update this Privacy Policy from time to time. The most current version will always be available on our website, with the effective date shown above.

    ← Back to home