logo
Legal

Privacy Policy & Data Protection

Your privacy is important to us - Learn how we protect your personal information

Last Updated: 26 September 2026

Table of Contents

1 Introduction

Welcome to TTD Consulting (Pty) Ltd ("TTD Consulting", "we", "us", or "our"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website https://ttdconsulting.net (the "Site") and use our services.

This policy is designed to comply with the Protection of Personal Information Act (POPIA) of South Africa and the General Data Protection Regulation (GDPR) of the European Union.

Quick Summary:

We only collect information necessary to provide and improve our services. You have full control over your data and can request access, correction, or deletion at any time.

2 Information We Collect

We collect information that you provide directly to us and information that is automatically collected when you use our Site.

2.1 Information You Provide to Us

  • Contact Information: Name, email address, phone number, company name, and job title when you fill out contact forms or request information about our services.
  • Career Applications: Resume/CV, cover letter, employment history, educational background, and other information you provide when applying for positions.
  • Communications: Information in your messages when you contact us via email, contact forms, or social media.
  • Project Information: Details about your project requirements and business needs when you inquire about our services.

2.2 Information Collected Automatically

When you visit our Site, we automatically collect certain information about your device and usage:

  • Device Information: IP address, browser type, operating system, device type, and unique device identifiers.
  • Usage Data: Pages visited, time spent on pages, links clicked, referral sources, and navigation paths.
  • Location Data: Approximate geographic location based on IP address.
  • Cookies and Tracking: Information collected through cookies, web beacons, and similar technologies (see Section 5 for details).

2.3 Information You Provide Through Our AI Tools

When you use the AI Readiness Assessment, Technology Advisor or Benedict Chat (hosted at radar.ttdconsulting.net), we collect the information described in Section 4. This may include your name, work email address, company, role, industry, organisation size, your answers and your chat messages.

3 How We Use Your Information

We use the information we collect for the following purposes:

3.1 Service Provision

  • To respond to your inquiries and provide information about our services
  • To process and evaluate job applications
  • To communicate with you about projects, proposals, and service delivery
  • To provide customer support and technical assistance

3.2 Website Improvement

  • To analyze how visitors use our Site and identify areas for improvement
  • To understand user preferences and optimize user experience
  • To test new features and functionality
  • To monitor and fix technical issues

3.3 Marketing and Communications

  • To send you newsletters, updates, and promotional materials (with your consent)
  • To inform you about new services, events, and company news
  • To conduct market research and gather feedback

3.4 Legal and Security

  • To comply with legal obligations and regulatory requirements
  • To protect against fraud, security threats, and abuse
  • To enforce our Terms of Use and other agreements
  • To resolve disputes and enforce our rights

4 AI Readiness Assessment, Technology Advisor & Benedict Chat

This section explains how we handle personal information when you use our free AI tools. It forms part of this Privacy Policy and applies alongside the rest of it.

4.1 What We Collect

  • AI Readiness Assessment: your name and work email address (required before results are shown), company, role, industry, organisation size, your answers to the assessment questions, your follow-up and marketing choices, and the report generated from your answers.
  • Technology Advisor: the contact details you provide (such as name, work email address, company and role) and your answers about your project, goals and requirements, together with the recommendations generated for you.
  • Benedict Chat: the messages you type, the responses generated, and technical session information (such as a session identifier and IP address) used for rate limiting and security. Please do not enter sensitive personal information into the chat.
  • Security checks: our forms use Google reCAPTCHA to protect against automated abuse. reCAPTCHA collects hardware and software information (such as device and application data) and sends it to Google for analysis.

4.2 Why We Use It

  • To generate and deliver your assessment report, recommendations or chat responses
  • To email your assessment report to you and give you access to it through a private link
  • To contact you about your results, but only if you ask us to (see 4.4)
  • To send you marketing communications, but only if you separately opt in (see 4.4)
  • To protect our services from fraud and automated abuse, and to monitor and improve their quality

4.3 AI-Generated Reports and Responses

Assessment reports, Technology Advisor recommendations and Benedict Chat responses are produced by automated analysis, including large language models provided through Azure OpenAI. Your AI readiness score is calculated from your own self-reported answers and placed against TTD's maturity framework.

  • This automated analysis relates to your organisation's readiness and technology choices. It is not a decision about you as a person and does not have legal or similarly significant effects on you.
  • AI-generated content may contain errors and is indicative only. It is not professional advice. See our Terms of Use.
  • You can ask for a TTD consultant to review your report or results by emailing info@ttdconsulting.net.

4.4 Follow-Up Contact and Direct Marketing Are Separate

In the AI Readiness Assessment you will see two separate, optional choices. Neither is required to receive your results.

  • Expert follow-up: a tick-box asking a TTD expert to contact you about your results. If you tick it, we will use your contact details only to follow up on your assessment.
  • Marketing opt-in: a separate tick-box to receive marketing communications (such as news, insights and event invitations) from TTD Consulting. In line with section 69 of POPIA, we will only send you electronic direct marketing if you have opted in, or if you are an existing customer and the marketing relates to similar products or services.

You can withdraw either choice at any time by using the unsubscribe link in any marketing email or by emailing info@ttdconsulting.net with the subject line "Opt out". Withdrawing does not affect processing that took place before you withdrew.

4.5 How Long We Keep It

  • Assessment results and reports: kept for 90 days, after which the private link stops working and the results are deleted.
  • Assessment lead records (your contact details, organisation details and choices): kept for 2 years from submission, unless you withdraw consent or ask us to delete them sooner.
  • Technology Advisor submissions: handled as contact inquiries and kept for 2 years from last contact, unless you ask us to delete them sooner.
  • Benedict Chat messages: kept only for as long as needed to operate, secure and improve the chat service.

5 Cookies and Tracking Technologies

We use cookies and similar tracking technologies to collect and store information about your interactions with our Site. You can control cookie preferences through our cookie consent manager.

5.1 Types of Cookies We Use

Cookie Type Purpose Duration Required
Necessary Essential for website functionality, including cookie consent preferences 1 year Required
Analytics Google Analytics GA4 - Track site usage, page views, and user behavior with anonymized IP addresses. Loaded only if you accept analytics cookies 2 years Optional
Session Recordings Microsoft Clarity - Record anonymized user sessions to improve UX. Loaded only if you accept session recordings 1 year Optional
Marketing LinkedIn Insight Tag - Measure the effectiveness of our advertising and campaigns. Loaded only if you accept marketing cookies Varies Optional

5.2 Third-Party Analytics and Marketing Services

Google Analytics (GA4)

  • Provider: Google LLC
  • Purpose: Website analytics and reporting
  • Data Collected: Page views, session duration, bounce rate, device type, geographic location (city-level)
  • Privacy Measures: IP anonymization enabled, Google Consent Mode v2 implemented
  • Opt-out: Google Analytics Opt-out Browser Add-on
  • Privacy Policy: Google Privacy Policy

Microsoft Clarity

  • Provider: Microsoft Corporation
  • Purpose: Session recording and heatmap analysis
  • Data Collected: Mouse movements, clicks, scrolling behavior, page interactions (all anonymized)
  • Privacy Measures: Personal data masking, GDPR-compliant processing
  • Privacy Policy: Microsoft Privacy Statement

LinkedIn Insight Tag

  • Provider: LinkedIn Ireland Unlimited Company / LinkedIn Corporation
  • Purpose: Measuring the effectiveness of our LinkedIn advertising and campaigns
  • When it loads: Only after you accept marketing cookies
  • Privacy Policy: LinkedIn Privacy Policy

5.3 Managing Your Cookie Preferences

You can manage your cookie preferences at any time by:

  • Clicking the "Cookies" link in our website footer
  • Using your browser settings to block or delete cookies
  • Using the cookie consent modal that appears on your first visit

Important:

Blocking necessary cookies may affect website functionality.

6 Data Sharing and Disclosure

We do not sell your personal information. We may share your information in the following circumstances:

6.1 Service Providers

We share information with third-party vendors who perform services on our behalf:

  • Hosting Providers: For website hosting and infrastructure
  • Analytics Providers: Google Analytics, Microsoft Clarity and the LinkedIn Insight Tag (as described in Section 5)
  • Communication Tools: Email service providers for newsletters and transactional emails
  • Security Services: DDoS protection and security monitoring

All service providers are contractually obligated to protect your data and use it only for the specified purposes.

6.4 Operators Who Process Information on Our Behalf

Under POPIA, the following providers act as operators, processing personal information on our behalf and under our instructions:

  • Microsoft (Microsoft Azure, including Azure OpenAI): hosting, storage, email delivery and the AI models that generate assessment reports, Technology Advisor recommendations and Benedict Chat responses. Under Microsoft's terms for Azure OpenAI, your prompts and outputs are not used to train Microsoft's or OpenAI's foundation models.
  • Google (reCAPTCHA and Google Analytics): protecting our forms from automated abuse and, if you accept analytics cookies, website analytics.

These providers may process information outside South Africa. See Section 10.

6.2 Legal Requirements

We may disclose your information if required by law or in response to:

  • Valid legal processes (court orders, subpoenas, warrants)
  • Government or regulatory requests
  • Protection of our rights, property, or safety
  • Investigation of fraud, security issues, or violations of our Terms of Use

6.3 Business Transfers

In the event of a merger, acquisition, reorganization, or sale of assets, your information may be transferred as part of that transaction. We will notify you via email and/or a prominent notice on our Site of any change in ownership or use of your personal information.

7 Data Retention

We retain your personal information only as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required by law.

Retention Periods

  • Contact Inquiries: 2 years from last contact
  • AI Readiness Assessment Results: 90 days
  • AI Readiness Assessment Lead Records: 2 years from submission, unless you withdraw consent or request earlier deletion
  • Job Applications: 1 year from application date (unless you request earlier deletion)
  • Analytics Data: Up to 26 months (Google Analytics default)
  • Cookie Consent Records: 1 year from consent date
  • Legal Records: As required by applicable law (typically 5-7 years)

After the retention period expires, we securely delete or anonymize your personal information.

8 Your Privacy Rights

Under POPIA and GDPR, you have the following rights regarding your personal information:

Right to Access

You can request a copy of the personal information we hold about you.

Right to Rectification

You can request correction of inaccurate or incomplete personal information.

Right to Erasure

You can request deletion of your personal information, subject to legal retention requirements.

Right to Restrict Processing

You can request that we limit how we use your personal information in certain circumstances.

Right to Data Portability

You can request a machine-readable copy of your personal information to transfer to another service.

Right to Object

You can object to our processing of your personal information for direct marketing or legitimate interests.

How to Exercise Your Rights

To exercise any of these rights, please contact us at:

We will respond to your request within 30 days. You may also lodge a complaint with your local data protection authority if you believe we have violated your privacy rights.

Complaints to the Information Regulator (South Africa)

If you are not satisfied with how we have handled your personal information, you have the right to lodge a complaint with the Information Regulator:

9 Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction.

Security Measures Include:

  • Encryption: HTTPS/TLS encryption for data in transit
  • Access Controls: Role-based access and authentication systems
  • Monitoring: Regular security audits and vulnerability assessments
  • Employee Training: Data protection training for all staff
  • Incident Response: Procedures for detecting and responding to data breaches

Important:

No method of transmission over the internet is 100% secure. While we strive to protect your personal information, we cannot guarantee absolute security.

10 International Data Transfers

TTD Consulting is based in South Africa. If you access our Site from outside South Africa, your information may be transferred to, stored, and processed in South Africa or other countries where our service providers operate.

We ensure that international data transfers comply with POPIA and GDPR requirements through:

  • Standard Contractual Clauses (SCCs) with service providers
  • Adequacy decisions recognizing equivalent data protection standards
  • Your explicit consent where required

Our operators, Microsoft (Microsoft Azure, including Azure OpenAI) and Google (reCAPTCHA and Google Analytics), may process personal information outside South Africa. In line with section 72 of POPIA, we only transfer personal information to operators that are bound by law, binding corporate rules or binding agreements that provide an adequate level of protection, and we rely on those providers' contractual and technical safeguards, including their data processing terms.

11 Children's Privacy

Our Site is not intended for children under the age of 18. We do not knowingly collect personal information from children under 18. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at info@ttdconsulting.net, and we will delete such information promptly.

12 Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by:

  • Updating the "Last Updated" date at the top of this policy
  • Posting a notice on our homepage
  • Sending an email to registered users (for significant changes)

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

13 Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Information Officer: Treveshan Naidoo

Email: info@ttdconsulting.net

General Inquiries: info@ttdconsulting.net

Website: https://ttdconsulting.net

Phone: +27 (0) 78 537 2460