Disclaimer and Privacy Policy
Our Section 18 POPIA notification: what personal information Assent Compliance collects, why we collect it, who we share it with and the rights you have.
Last updated: 20 October 2026
1. Website disclaimer
The information on this website and in our seminar and webinar marketing material is general information about our training programmes. It is not legal, tax, financial or professional advice for your particular circumstances, and you should obtain advice suited to your own practice before acting on it.
We take reasonable care to keep the content, dates, venues and prices on this website accurate and current, but we do not warrant that it is complete or free of errors. Dates, venues and programme content may change; registered delegates will be informed of any change that affects them.
To the extent permitted by law, including the Consumer Protection Act 68 of 2008, Assent Compliance (Pty) Ltd is not liable for any loss or damage arising from the use of, or reliance on, this website or any website linked from it. Links to third-party websites are provided for convenience and we are not responsible for their content or privacy practices.
All content on this website, including text, course outlines, logos and graphics, belongs to Assent Compliance (Pty) Ltd or its licensors and may not be reproduced without our written permission.
2. Section 18 POPIA notification
Section 18 of the Protection of Personal Information Act 4 of 2013 (POPIA) requires a responsible party that collects personal information to take reasonably practicable steps to make the data subject aware of certain matters. This notice sets out those matters for personal information collected by Assent Compliance through this website, our registration form, email, telephone, our seminars and webinars, and our invoicing.
In this notice, "we", "us" and "our" mean Assent Compliance (Pty) Ltd, and "you" means the person whose personal information we process, including delegates, the contact person who registers delegates, and representatives of the practices and organisations we deal with. "Personal information" and "processing" have the meanings given in POPIA, and include information about juristic persons such as a medical or dental practice.
3. Responsible party and Information Officer
| Responsible party | Assent Compliance (Pty) Ltd, registration number 2017/000982/07 |
|---|---|
| Information Officer | Daniël François (Frank) Marais, Director |
| marais@assentcompliance.co.za | |
| Telephone | 061 515 5194 |
| PAIA manual | Section 51 PAIA manual |
4. Personal information we collect and its source
| Category | Examples |
|---|---|
| Identity and contact details | Name and surname, job title, email address, mobile and landline numbers |
| Practice and billing details | Practice or company name, practice number, VAT number, billing and postal address, the person responsible for payment, purchase order numbers |
| Registration and attendance details | Seminar or webinar selected, town and date, names of the delegates registered, dietary requirements you choose to tell us, attendance records, assessment results and certificates of attendance |
| Professional registration details | Professional council and registration number, where you need CPD points recorded for a programme |
| Payment and transaction details | Pro-forma and tax invoices, proof of payment, EFT reference and payment history. We do not ask for or store card numbers |
| Correspondence | Emails, messages, enquiries, quotation requests and feedback you send us |
| Technical information | IP address, browser type, pages visited and date and time of access recorded in our web server logs, and whether marketing emails were opened or clicked |
| Photographs | Event photographs taken at seminars. Tell the presenter on the day if you prefer not to appear in photos we publish |
Source of the information
We collect most personal information directly from you. Where a practice manager or colleague registers you as a delegate, or a practice gives us the details of the person responsible for payment, we collect your information from that person, who must have your permission to give it to us. We may also use publicly available business contact details of healthcare practices for business-to-business communication about our training, subject to section 10 below.
5. Why we collect it
We process personal information only for purposes that are specific, explicitly defined and lawful, namely to:
- process seminar and webinar registrations, confirm bookings and send joining instructions, venue details and programme changes;
- issue pro-forma invoices, tax invoices and statements, reconcile payments and recover amounts owed;
- keep attendance registers, issue certificates of attendance and record or report CPD points to the relevant accreditor or professional council;
- answer enquiries and prepare quotations for in-house training;
- provide course material, templates and follow-up support to delegates;
- send you information about our training programmes, where permitted (see section 10);
- keep our website, email and systems secure, and improve our programmes using feedback and anonymised statistics;
- keep accounting and tax records and comply with our other legal obligations.
6. Voluntary or mandatory supply, and the consequences of not supplying it
Supplying personal information to us is voluntary. However, fields marked as required on our registration form, and the details we need to issue a valid tax invoice, are needed to provide the service. If you do not supply them we may not be able to confirm your booking, issue a tax invoice, admit you to a seminar or webinar, issue a certificate of attendance or record your CPD points. Information such as dietary requirements, feedback and marketing preferences is entirely optional.
7. Laws that require or authorise collection
We collect and keep certain information because the law requires or authorises it, including:
- the Value-Added Tax Act 89 of 1991 and the Tax Administration Act 28 of 2011, which prescribe the content of tax invoices and require us to keep records;
- the Companies Act 71 of 2008, which requires accounting records to be kept;
- the Electronic Communications and Transactions Act 25 of 2002 and the Consumer Protection Act 68 of 2008, which govern online transactions and marketing;
- the continuing professional development rules of the relevant professional councils, where CPD points are recorded;
- POPIA itself, which permits processing that is needed to conclude or perform a contract with you, to comply with a legal obligation, or to pursue our legitimate interests or those of a third party to whom the information is supplied.
8. Who we share it with
We do not sell personal information. We share it only where needed for the purposes above, with:
- presenters and co-facilitators of the programme you attend;
- seminar venues and caterers, limited to delegate names and dietary requirements;
- CPD accreditors and professional councils, where CPD points are recorded;
- our service providers (operators) who host or process information on our behalf, including our website hosting provider, our email and office software provider, our cloud accounting software provider, our email marketing platform and the online meeting platform used for webinars;
- our bank, for payment processing and reconciliation;
- our external accountants, auditors and legal advisers;
- the South African Revenue Service and other regulators or authorities where the law requires it.
Operators process personal information only on our instructions, and we require them to keep it confidential and secure as section 21 of POPIA requires.
9. Transfers outside South Africa
Some of our service providers, including our email and office software, cloud accounting software and online meeting platform, may store or process personal information on servers outside South Africa. We use only providers that are subject to laws, binding corporate rules or contractual terms providing an adequate level of protection substantially similar to POPIA, as section 72 of POPIA requires.
10. Direct marketing
We send information about our seminars, webinars and related training by electronic communication only to:
- existing clients and delegates, about similar training we offer, where you were given the opportunity to object when your details were collected; or
- persons who have consented to receive it.
Every marketing email includes an unsubscribe link, and you may also opt out at any time by emailing marais@assentcompliance.co.za. Opting out does not affect communication about a booking you have already made.
11. Security and retention
We take appropriate, reasonable technical and organisational measures to prevent the loss of, damage to, unauthorised destruction of, and unlawful access to personal information. These include encrypted (HTTPS) connections to this website, access controls and password protection on our systems and mailboxes, and restricting access to personal information to people who need it.
We keep personal information only for as long as needed for the purpose for which it was collected, unless the law requires or permits us to keep it longer. Accounting, tax and invoice records are kept for at least five years as required by tax and company law. Attendance and CPD records are kept for as long as the relevant CPD rules require. Marketing contact details are kept until you opt out. Thereafter records are destroyed, deleted or de-identified.
If we have reasonable grounds to believe that your personal information has been accessed or acquired by an unauthorised person, we will notify you and the Information Regulator as section 22 of POPIA requires.
12. Cookies and website logs
This website does not use advertising or tracking cookies. Our web server automatically records technical information in its logs, such as IP address, browser type and pages requested, which we use only to keep the website secure and running.
13. Your rights
Subject to POPIA and the Promotion of Access to Information Act 2 of 2000 (PAIA), you have the right to:
- be told whether we hold personal information about you and, on request, receive a record or description of it and of the third parties who have had access to it (sections 23 and 24 of POPIA; the procedure is set out in our PAIA manual);
- ask us to correct or delete personal information that is inaccurate, irrelevant, excessive, out of date, incomplete, misleading or unlawfully obtained, or to destroy or delete a record we are no longer authorised to keep;
- object, on reasonable grounds, to processing based on our legitimate interests, and object at any time to processing for direct marketing;
- withdraw consent you have given, without affecting processing that took place before withdrawal;
- not be subject to a decision based solely on automated processing that has legal consequences for you. We do not make such decisions;
- lodge a complaint with the Information Regulator and institute civil proceedings.
To exercise any of these rights, email our Information Officer at marais@assentcompliance.co.za. We may ask you to verify your identity before acting on a request, and will respond within a reasonable time.
14. Complaints to the Information Regulator
Please contact us first so we can try to resolve your concern. You are also entitled to lodge a complaint with the Information Regulator (South Africa):
| Physical address | JD House, 27 Stiemens Street, Braamfontein, Johannesburg, 2001 |
|---|---|
| Postal address | PO Box 31533, Braamfontein, Johannesburg, 2017 |
| Complaints | POPIAComplaints@inforegulator.org.za |
| General enquiries | enquiries@inforegulator.org.za |
| Website | inforegulator.org.za |
15. Changes to this notice
We may update this notice from time to time. The current version is always available on this page, and the date at the top shows when it was last changed.
