Data is business-critical - and it needs to be handled properly. That’s our jam!
If your business collects, uses, stores or shares personal information (and that’s all of us), data protection laws apply to you.
We help businesses navigate POPIA and PAIA compliance, implement practical privacy and data governance frameworks, and manage data-related risk across their systems, people and operations.
This isn’t just about avoiding fines – it’s about protecting your business from cyber risk, reputational damage and commercial fallout.
Where relevant, we also advise on international data protection frameworks (like GDPR and cross-border transfer mechanisms), helping you stay compliant as your business grows, scales or operates globally.
Frequently Asked Questions
We provide practical, end-to-end support across your data lifecycle, including:
- POPIA and GDPR compliance (gap analysis to full framework implementation)
- PAIA manuals and compliance
- Privacy policies/notices (external-facing) and internal data handling policies
- Data mapping and risk assessments
- Data processing agreements (DPAs)
- Data protection clauses and addendums for agreements
- Cross-border data transfer compliance
- Website and app compliance (cookies, tracking, user data flows)
- Incident response planning and breach readiness
- Ongoing data protection advisory and outsourced Information Officer services
Yes. We offer fixed-fee packages designed around your business. Packages are tailored based on:
- Your size and stage of growth
- The volume and sensitivity of data you process
- The complexity of your data flows
- Your industry and regulatory exposure
- Whether you operate locally or internationally
You can explore these on our Packages page, or we can guide you to the right fit based on your setup.
We keep things practical and commercially focused - no overcomplication, no unnecessary legal theatre.
- Start with a gap analysis or scoping session
- Identify your risk level and compliance needs
- Implement a right-sized framework (this could be a package if suitable)
- Provide ongoing support and compliance implementation as your business evolves
Our focus is always on solutions that are legally sound, commercially practical and actually implementable.
Yes. If you collect or process personal information - even basic customer, client or staff data - POPIA applies.
The level of compliance required will depend on the nature, scale and sensitivity of your data processing.
Data protection isn't just about "compliance". It's about building a business that is:
- Trusted by clients, users and partners
- Protected against cyber and operational risk
- Shielded from regulatory penalties, legal liability and costly disputes
- Structured for growth, investment and scale
Getting this right early reduces risk, limits exposure and puts your business on a much stronger footing as it grows.
