Privacy
Privacy policy
What this website collects, why, who helps process it and what you can ask for. Written to meet South Africa's Protection of Personal Information Act (POPIA).
Last updated 23 October 2026
Who is responsible
This website is run by Mitchell Roberts, a sole proprietor trading as Kent & Co, based in Cape Town, South Africa. He is the responsible party and the information officer for the personal information described here. Contact: hello@kentandcoadvisory.com.
What we collect
- Enquiry forms: your name, email address, company (if you give it), your message, the service you asked about and the page you sent it from.
- Newsletter sign-up: your email address and the wording you agreed to when you signed up.
- Courses waitlist: your name (if you give it) and email address.
- Bookings: when you book a session through Cal.com, your name, email address, the time you choose and anything you add to the booking form.
- Spam protection: a one-way, scrambled code made from your internet (IP) address. It lets us limit repeated submissions without storing the address itself.
- Website statistics: anonymous page-view and speed measurements through Vercel Web Analytics. It uses no cookies and does not identify you.
We do not use advertising or tracking cookies, and we do not buy or sell personal information.
Why we use it
- To reply to your enquiry and, if you choose, to work with you.
- To send the newsletter you asked for, until you unsubscribe.
- To tell you when the online courses open, if you joined the waitlist.
- To keep the website and its forms secure and free of spam.
We process this information because you asked us to (an enquiry or a sign-up), with your consent, or because it is needed to protect the website. We only use it for these purposes.
Who helps us process it
These services process information on our behalf, under their own security and data-protection terms:
| Service | What it does | Where |
|---|---|---|
| Supabase | Stores what you send through the website's forms.European Union (Ireland) | European Union (Ireland) |
| Vercel | Hosts the website and runs the code that receives form submissions.United Kingdom (London) and its global network | United Kingdom (London) and its global network |
| Resend | Sends the emails the website generates, such as enquiry notifications.European Union (Ireland) | European Union (Ireland) |
| Google (Gmail) | Where enquiry notifications and replies are kept, and the calendar and Google Meet links for booked sessions.Google's data centres, including outside South Africa | Google's data centres, including outside South Africa |
| Cal.com | Takes session bookings: your name, email, the time you choose and anything you add to the booking form.United States | United States |
| Cloudflare | Runs the website's domain and forwards email sent to hello@.Cloudflare's global network | Cloudflare's global network |
Some of these services store information outside South Africa, mainly in the European Union and the United Kingdom, whose data protection laws give protection comparable to POPIA, and in the United States for bookings. We use providers that commit to protecting personal information to a comparable standard. We will add any new service, such as a payment provider, to this list before we start using it.
How long we keep it
- Enquiries: up to three years after our last contact, unless you become a client, in which case records are kept for as long as tax law requires (five years).
- Newsletter and waitlist: until you unsubscribe or ask us to remove you.
- Spam and unconfirmed newsletter sign-ups: deleted after 30 days.
- Spam-protection codes: deleted after two days.
Your rights
Under POPIA you can ask us to:
- tell you what personal information we hold about you;
- correct or update it;
- delete it, where we have no legal reason to keep it;
- stop using it, including for the newsletter, at any time.
Email hello@kentandcoadvisory.com and we will respond within 30 days. If you are unhappy with how we handle your information, you can complain to the Information Regulator (South Africa) at inforegulator.org.za.
Security
Form submissions are sent over an encrypted connection and stored in a database that cannot be read from the public website. Access is limited to Mitchell Roberts.
Children
This website is for businesses and professionals. It is not aimed at children, and we do not knowingly collect their information.
Changes
If this policy changes, the new version will be posted here with a new date.