Privacy & POPIA Policy
What personal information MCH Advisory (Pty) Ltd processes as responsible party, why, who processes it, and your rights.
This policy describes how MCH Advisory (Pty) Ltd ("MCH", "we", "us"), as responsible party, collects, uses, shares and protects personal information in connection with MCH Publications and the MCH Research platform. It forms part of the MCH Publications policy framework and is incorporated into the Terms of Service.
Responsible party and Information Officer
MCH Advisory (Pty) Ltd is the responsible party for personal information processed in connection with MCH Publications.
Our Information Officer and privacy contact can be reached at contact@mchadvisoryservices.com. Please use this address for privacy questions, requests to exercise your rights and privacy complaints.
Personal information we collect
Depending on how you use MCH Publications, we may collect:
- account and contact information
- payment metadata received from payment providers
- subscription status
- site activity
- research and product usage
- communications preferences
- support communications
- approximate location, device and browser information, where collected
- cookies and analytics data, as described in the Cookie Policy
Lawful purposes of processing
We process personal information for the following purposes:
- account administration
- service delivery
- fraud prevention and security
- analytics and product improvement
- legal compliance
- direct marketing, where consent or another lawful basis permits
Processors and operators
We use third-party operators that process personal information on our behalf in order to deliver the service, including:
- hosting providers
- payment providers
- email providers
- analytics providers
Cross-border processing
Personal information may be processed by operators located outside the Republic of South Africa. Where that occurs, the transfer takes place subject to applicable data-protection law.
Retention
We retain personal information for as long as it is needed for the purposes for which it was collected and for as long as applicable law requires.
Security
We apply appropriate, reasonable technical and organisational measures to protect personal information against loss, unauthorised access and unlawful processing.
Access, correction and deletion
Where applicable law provides, you may request access to your personal information, correction of inaccurate information, or deletion of personal information. Requests may be sent to the Information Officer at contact@mchadvisoryservices.com.
Direct marketing and consent
Consent to the Terms of Service is separate from consent to direct marketing. Marketing boxes are not pre-ticked.
Where you consent to direct marketing, we store:
- consent status
- the timestamp
- the consent wording and its version
- the source or form through which consent was given
- the user identifier
Every marketing communication includes an unsubscribe mechanism. You may object to direct marketing or opt out at any time, by using that mechanism or by contacting contact@mchadvisoryservices.com.
Opting out of marketing does not stop necessary operational communications, such as payment receipts, password resets, security alerts, cancellation confirmations, material Terms updates and account notices.
Complaints and escalation
Privacy concerns may be raised with the Information Officer at contact@mchadvisoryservices.com. If you are not satisfied with our response, the matter may be escalated to the relevant regulator.
Our general complaints process is set out in the Complaints Policy.
Questions about this policy: contact@mchadvisoryservices.com. All policies: MCH Publications legal.