Privacy & Cookie Notice

Provara Group (Pty) Ltd

This Privacy & Cookie Notice explains how Provara Group (Pty) Ltd collects, uses, shares, protects and retains personal information, and how cookies and similar technologies are used, when you visit our website, purchase digital products, book a demonstration, contact us, or engage with our consulting services.

Last updated: 4 September 2026

Responsible Party: Provara Group (Pty) Ltd

Information Officer: Jean van Loggerenberg

Provara Group is committed to processing personal information in accordance with applicable South African privacy law, including the Protection of Personal Information Act 4 of 2013 (POPIA), and to maintaining appropriate safeguards over the information entrusted to us.

This notice applies to personal information processed through our website, Shopify store, digital products, customer support, demo bookings, consulting engagements and related business activities.

1. Who is responsible for your personal information?

Provara Group (Pty) Ltd, registration number 2026/029775/07, is the Responsible Party for personal information processed for its own business purposes.

Our Information Officer is Jean van Loggerenberg. Privacy-related enquiries and requests may be sent to jean@provaragroup.com.

2. Personal information we may collect

Depending on how you interact with Provara Group, we may process:

• identity and contact information, such as your name, surname, business name, job title, email address, telephone number and billing address;
• transaction and order information, including products purchased, order details, payment confirmation and billing records;
• account information where account functionality is used;
• communications you send to us through email, forms, support requests or other channels;
• demo and consulting information, including information you provide when booking a demonstration, requesting a proposal or discussing a consulting engagement;
• website and device information, including IP address, browser information, device information, cookie identifiers and website-usage data;
• marketing preferences, including whether you have subscribed to, opted out of or otherwise expressed preferences regarding communications from us; and
• other information you choose to provide to us in connection with our products or services.

3. How we collect personal information

We may collect personal information:

• directly from you when you contact us, make a purchase, book a demo, complete a form, request support or engage our services;
• automatically when you use our website, through cookies, device information and similar technologies;
• from Shopify and other service providers that support our website, payment, scheduling, communication, hosting or business operations; and
• from third parties where the information is lawfully provided to us for a legitimate business purpose.

4. Why we process personal information

We may process personal information for purposes including:

• operating and administering the Provara Group website and Shopify store;
• processing orders, payments and digital-product delivery;
• providing access to purchased programmes, workspaces, templates and related digital resources;
• responding to enquiries and providing customer support;
• booking and conducting programme demonstrations;
• preparing proposals and delivering consulting services;
• maintaining customer, financial and business records;
• administering contractual relationships;
• detecting fraud, misuse or security incidents;
• improving our website, products, services and customer experience;
• sending direct-marketing communications where permitted by law;
• complying with legal, regulatory, tax, accounting and other obligations; and
• establishing, exercising or defending legal rights.

5. Legal grounds for processing

Provara Group processes personal information only where there is an appropriate lawful basis under POPIA. Depending on the circumstances, this may include:

• your consent;
• processing necessary to carry out actions for the conclusion or performance of a contract to which you are a party;
• processing required to comply with an obligation imposed by law on Provara Group;
• processing necessary to protect a legitimate interest of the data subject;
• processing necessary for the proper performance of a public-law duty by a public body, where applicable; or
• processing necessary for pursuing the legitimate interests of Provara Group or a third party to whom the information is supplied, subject to POPIA.

6. Is providing personal information voluntary or mandatory?

In most cases, providing personal information to Provara Group is voluntary. However, certain information is necessary if you want us to process a purchase, provide a digital product, respond meaningfully to an enquiry, enter into or perform a consulting engagement, provide support, or comply with an applicable legal obligation.

If information identified as necessary is not provided, we may be unable to complete the transaction, provide the requested product or service, respond to the request, or comply with the relevant legal or contractual requirement.

Where a particular law specifically requires or authorises the collection of personal information and it is reasonably practicable to do so, we will identify that requirement at or before the time of collection.

7. Digital purchases and payment processing

Our website and online store are powered by Shopify. When you make a purchase, Shopify and relevant payment providers may process information necessary to administer the transaction, confirm payment, prevent fraud and provide the purchased product or service.

Where payment is handled by Shopify or a relevant payment provider, Provara Group does not need to receive or retain complete payment-card credentials in order to process the online purchase.

8. Shopify and other service providers

Shopify hosts and supports our online store and may process personal information about your access to and use of the store in order to provide its services.

Information submitted through the store may be transmitted to Shopify and other service providers involved in hosting, payment processing, scheduling, analytics, communications, security or other supporting functions.

For information about Shopify's own processing practices, you can review the Shopify Consumer Privacy Policy and, where applicable, Shopify's available privacy-management tools.

Provara Group may also use other service providers or Operators where reasonably necessary to provide our services. We seek to put appropriate contractual, confidentiality and security arrangements in place where required by applicable law.

9. Direct marketing

Provara Group will process personal information for direct marketing in accordance with POPIA.

For unsolicited direct marketing by electronic communication, including email, SMS or similar electronic channels, we will rely on your consent where required. Where you are an existing customer, we may market our own similar products or services using contact details obtained in the context of the sale, provided the requirements of POPIA's existing-customer exception are met.

Where we seek consent from a person who is not an existing customer, we will do so in accordance with the applicable POPIA requirements. An opt-out will not be treated as consent.

Every electronic direct-marketing communication will provide a reasonable opportunity to stop further marketing. You may also opt out by contacting us at info@provaragroup.com.

Opting out of marketing communications will not prevent us from sending non-promotional communications that are necessary to administer an order, contract, support request or other existing business relationship.

10. Cookies and website technologies

Our website uses cookies and similar technologies for website operation, security, preferences, analytics and, where enabled and permitted, marketing.

Cookies are small data files that a website may place on your browser or device when you visit it. Similar technologies, such as pixels, tags, local storage and device identifiers, may perform related functions. In this notice, references to “cookies” include these similar technologies where appropriate.

10.1 Who uses cookies on this website?

Provara Group uses Shopify to operate and support its online store. Shopify may place cookies and use similar technologies when you visit a Shopify-powered merchant storefront.

Other service providers may also place or access cookies where their services are enabled on the website. The specific technologies used may change over time as website functionality, service providers or integrations change.

10.2 Cookie categories used on our website

Our Shopify cookie preference centre groups cookies into the following categories:

Strictly required cookies

These cookies are necessary for core website and store functionality and cannot be switched off through the cookie preference centre.

They may be used for purposes such as:

• maintaining secure website and checkout sessions;
• remembering shopping-cart information;
• processing checkout and transaction-related functions;
• remembering privacy and cookie-consent choices;
• supporting fraud prevention, security and anti-tampering measures;
• localising the store to the appropriate country or currency; and
• checking whether the browser can support cookies.

Examples of Shopify cookies that may fall within this category include _shopify_essential, _shopify_test, _tracking_consent, cart, cart_currency, discount_code and localization.

Functionality cookies

Functionality cookies support optional features, preferences and personalisation. They may remember choices you make or information that improves how the site works for you.

If you do not allow these cookies, some non-essential features or personalised functionality may not operate as intended.

Analytics cookies

Analytics cookies help us understand how visitors use the website. Depending on the services enabled, they may collect information such as pages viewed, referral sources, browsing activity, device or browser information, session information and general website-interaction data.

This information helps us assess website performance, identify popular content or products and improve the user experience.

Analytics cookies are not required for the core operation of the website and can be declined through the cookie preference centre.

Marketing cookies

Marketing cookies may be used, where relevant technologies are enabled, to measure advertising effectiveness, build audiences, understand interactions with marketing campaigns or support more relevant advertising.

Marketing cookies are not required for the core operation of the website and can be declined through the cookie preference centre.

The availability of a marketing-cookie category in the preference centre does not necessarily mean that every possible advertising or social-media technology is active on the website at any particular time.

10.3 How you manage cookie choices

When the Shopify cookie banner is presented, you can choose how optional cookies are used by selecting:

• Accept all — allows the available optional cookie categories;
• Accept required only — allows only cookies necessary for the website and store to operate; or
• Manage preferences — lets you choose which optional categories you want to allow.

Strictly required cookies remain active because they are necessary for essential website, security, cart, checkout or consent-management functions.

Your preferences are recorded through the website's consent-management mechanism. Where a cookie-preference control is made available on the website, you can use it to review or change your choices.

10.4 Shopify cookies and similar technologies

Because our online store is powered by Shopify, Shopify may place cookies that are necessary for the functioning of the storefront and may, depending on the visitor's choices and the services enabled, use analytics or other optional technologies.

Shopify publishes information about the cookies it may use on merchant storefronts, including their purposes and typical durations, in its Cookie Policy.

Shopify also provides information about how it processes personal information when individuals interact with Shopify-powered merchants in its Consumer Privacy Policy.

10.5 Third-party cookies and pixels

Some website functions may depend on third-party services. Where an optional third-party analytics, advertising, social-media or similar integration is enabled, that provider may use cookies, pixels or related technologies in accordance with its own privacy practices.

Provara Group will not intentionally describe a specific advertising or analytics provider as active in this notice unless that technology is actually used on the website. The technologies used may change as integrations are added, removed or reconfigured.

10.6 How long cookies remain on your device

Cookie duration depends on the particular cookie:

• session cookies generally expire when the browser session ends; and
• persistent cookies remain for a defined period or until deleted.

Shopify's published cookie information indicates that merchant-storefront cookies may range from very short durations to longer periods such as one year, depending on their purpose. Some cart-related cookies may remain for approximately two weeks.

The precise duration of a cookie may change when Shopify or another service provider updates its technology.

10.7 Browser controls

Most browsers allow you to view, block or delete cookies through browser settings. You can also configure your browser to restrict certain types of tracking.

Blocking strictly required cookies through browser settings may affect website, cart, checkout, security or other essential functions.

Browser controls operate separately from the Shopify cookie preference centre and may affect other websites as well.

10.8 Personal information collected through cookies

Cookie and similar-technology data may include information such as IP address, browser or device information, cookie identifiers, session information, referral information, pages viewed and interactions with website features.

Where this information constitutes personal information, Provara Group will process it in accordance with POPIA and this Privacy & Cookie Notice.

11. When we share personal information

We may disclose personal information where reasonably necessary:

• to Shopify, payment providers, scheduling providers, hosting providers, IT providers, communication providers and other Operators or service providers;
• to professional advisers where their services are required;
• where you request or authorise the disclosure;
• where required by law, legal process, court order or a competent regulatory or public authority;
• to investigate fraud, misuse, security incidents or unlawful activity;
• to establish, exercise or defend legal rights; or
• in connection with a legitimate business restructuring, sale, merger or similar transaction, subject to applicable legal requirements and safeguards.

Provara Group does not sell personal information as a business model.

12. Cross-border processing

Some of our technology and service providers, including Shopify and related infrastructure providers, may process or store personal information outside South Africa.

Where Provara Group transfers personal information to a recipient in another country, the transfer will be undertaken only where permitted by section 72 of POPIA. Depending on the circumstances, this may include where the recipient is subject to a law, binding corporate rules or binding agreement that provides an adequate level of protection; where the data subject consents to the transfer; or where another transfer ground permitted by section 72 applies.

Because service-provider infrastructure and processing locations may change, the countries involved may vary over time. Where required and reasonably practicable, further information about a relevant transfer and the applicable protection can be provided on request.

13. Security safeguards

Provara Group takes reasonable technical and organisational measures to protect personal information against loss, misuse, unauthorised access, interference, alteration, disclosure or destruction.

No security measure can provide absolute protection. Where we become aware of a security compromise involving personal information, we will assess and respond to the incident in accordance with applicable legal and regulatory requirements.

14. Retention of personal information

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected or subsequently processed, to perform a contract, to comply with legal or regulatory obligations, to resolve disputes, or to establish, exercise or defend legal rights.

Retention periods may differ depending on the nature of the record, the business relationship and applicable legal requirements. Information that is no longer authorised to be retained will be securely deleted or destroyed, or de-identified, as appropriate and in accordance with POPIA.

15. Your rights under POPIA

Subject to applicable legal requirements and limitations, you may have the right to:

• request confirmation of whether we hold personal information about you;
• request access to personal information we hold about you;
• request correction, updating, deletion or destruction of personal information where the applicable requirements are met;
• object to certain processing on reasonable grounds in circumstances recognised by POPIA;
• withdraw consent where processing is based on consent, without affecting processing that was lawful before withdrawal;
• object to direct marketing and stop receiving electronic direct-marketing communications;
• lodge a complaint with the Information Regulator; and
• exercise any other right available to you under applicable privacy law.

We may need to verify your identity before processing a request and may request information reasonably necessary to locate the relevant records.

16. How to exercise your privacy rights

To exercise a privacy right or raise a privacy query, contact our Information Officer:

Information Officer

Jean van Loggerenberg
jean@provaragroup.com
+27 82 294 2473

General enquiries

Provara Group (Pty) Ltd
info@provaragroup.com
16 Roos Bolton Crescent, Knysna Heights, Knysna, Western Cape, 6571, South Africa

17. Complaints

If you have a concern about how Provara Group processes your personal information, you are welcome to contact our Information Officer so that we can investigate and respond. This does not limit your right to lodge a complaint directly with the Information Regulator.

Information Regulator (South Africa)
Woodmead North Office Park
54 Maxwell Drive, Woodmead, Johannesburg, 2191
P.O. Box 31533, Braamfontein, Johannesburg, 2017
Telephone: 010 023 5200
Toll Free: 0800 017 160
General enquiries: enquiries@inforegulator.org.za
POPIA complaints: POPIAComplaints@inforegulator.org.za

You may also access the Information Regulator's current complaint processes and services through its official website.

18. PAIA and access to records

Requests for access to records under the Promotion of Access to Information Act 2 of 2000 (PAIA) are managed in accordance with Provara Group's PAIA Manual.

You may view our PAIA Manual and access the Information Regulator's current prescribed forms and guidance through the Regulator's official PAIA resources.

19. Children's personal information

Our website, digital products and consulting services are intended for business and adult users. We do not knowingly market our services to children or intentionally collect children's personal information through our normal business activities.

If you believe that a child has provided personal information to us without an appropriate lawful basis or authorisation, please contact our Information Officer.

20. Third-party websites

Our website may contain links to external websites or services that are not operated by Provara Group. Those third parties are responsible for their own privacy and security practices, and we recommend reviewing their applicable privacy notices before providing personal information.

21. Changes to this Privacy & Cookie Notice

We may update this Privacy & Cookie Notice from time to time to reflect changes in our business, website, technology, legal requirements or privacy practices.

The latest version will be published on this website and the "Last updated" date will be revised accordingly.

22. Contact details

Provara Group (Pty) Ltd
Registration Number: 2026/029775/07
16 Roos Bolton Crescent, Knysna Heights, Knysna, Western Cape, 6571, South Africa

Information Officer: Jean van Loggerenberg
Email: jean@provaragroup.com
Telephone: +27 82 294 2473

General enquiries:
Email: info@provaragroup.com

This Privacy & Cookie Notice should be read together with Provara Group's Terms of Service, Refund & Cancellation Policy and PAIA Manual where applicable.