Effective 15 August 2026
Controller and information collected
Sourcegridpath is the responsible party for personal information handled through this site and our engagements. We receive details you enter in the inquiry form—name, email, selected review and message—and business contact details, correspondence and documents later supplied for an accepted engagement.
Please do not include beneficiary names, identity numbers, medical information or other sensitive personal data in the form. If such information is needed exceptionally, we agree a suitable transfer and handling method first.
Purpose and lawful handling
We use information to respond to inquiries, assess scope, deliver commissioned reviews, administer contracts, keep financial records, secure our services and meet legal duties. We rely on consent where appropriate, steps requested before contract, performance of a contract and legitimate interests balanced against individual rights.
Sharing, retention and transfers
Access is limited to personnel and specialist reviewers who need the information and are bound by confidentiality. Necessary service providers may support secure storage, email and professional administration. We do not sell personal information.
Unsuccessful inquiry correspondence is ordinarily removed after 12 months. Engagement records are generally retained for five years after completion, subject to tax, contractual or dispute requirements. Where a provider processes information outside South Africa, we use contractual and organisational safeguards intended to provide an adequate level of protection.
Your rights
Subject to applicable law, you may request access, correction or deletion; object to or restrict certain processing; withdraw consent; and complain to South Africa’s Information Regulator. Some records must be retained despite a deletion request.
Send privacy requests to info@sourcegridpath.digital. We may verify identity before releasing information. Cookie details appear in our cookie notice.