Privacy Policy

1. Introduction

Scales of Strategy Labour Consulting (Pty) Ltd ("Scales of Strategy", "we", "us", "our") respects your privacy and is committed to handling your personal information responsibly and in accordance with the Protection of Personal Information Act 4 of 2013 ("POPIA") and other applicable South African privacy laws.

This Privacy Policy explains what personal information we collect about you, how we use it, who we share it with, how long we keep it, and the rights you have in relation to your information. It applies to visitors to our website, prospective clients who contact us, active clients, and anyone else whose personal information we process in the course of our business.

For a more detailed statement of our POPIA compliance, including information about our Information Officer and the specific conditions of lawful processing we apply, please see our POPIA Notice.

2. Who we are

Responsible Party: Scales of Strategy Labour Consulting (Pty) Ltd, a private company incorporated under the laws of the Republic of South Africa.

Registration Number: [Company Reg. No. pending]

Principal place of business: Gauteng, South Africa (operating nationally).

Information Officer: Stacey Kruger, Founder

Contact: stacey@scalesofstrategy.co.za · 071 582 1325

3. Information we collect

We collect personal information in the following categories, depending on how you interact with us:

3.1 Information you provide to us directly

• Contact and enquiry information: name, company name, email address, phone number, and the contents of any message you send us through our website contact form, email, WhatsApp, or telephone.
• Client engagement information: if you become a client, we collect additional information necessary to advise you, which may include employee records, employment contracts, disciplinary records, correspondence, payroll information, and other workplace-related documentation.
• Correspondence: records of our communications with you, including emails, WhatsApp messages, call notes, and meeting records.

3.2 Information we collect automatically

• Website analytics: when you visit our website, certain technical information may be collected automatically through Google Analytics and Microsoft Clarity (where enabled), including your approximate location (derived from IP address), device and browser type, the pages you view, and how you navigate the site. Where required, this is anonymised or aggregated.
• Cookies: see section 9 below.

3.3 Information we collect from third parties

In the course of providing labour advisory services, we may receive personal information about third parties (such as your employees) from you or from other sources. Where this happens, we process that information on your behalf as an operator under POPIA, in accordance with our engagement terms.

4. How we use your information

We use personal information for the following purposes:

• To respond to enquiries received through our website, email, phone, or WhatsApp.
• To provide the labour consulting and HR advisory services you have engaged us to perform.
• To prepare for and represent you at the CCMA, Bargaining Councils, or other dispute resolution forums.
• To draft workplace policies, employment contracts, and related documentation on your behalf.
• To send you communications relating to an active matter or engagement.
• To comply with our legal, regulatory, and professional obligations.
• To maintain records required for the operation of our business, including for billing, accounting, and quality assurance.
• To understand how our website is used and to improve it.

5. Legal basis for processing

Under POPIA, we only process your personal information where there is a lawful basis to do so. The bases we rely on include:

• Consent: where you have agreed to us processing your information (for example, when you submit our contact form and tick the consent checkbox).
• Necessity for the performance of a contract: where we need to process information to provide you with the services you have engaged us for.
• Compliance with a legal obligation: where we are required by law to retain or process information (for example, tax and accounting records).
• Legitimate interests: where processing is necessary for our or a third party's legitimate interests and those interests are not overridden by your rights.

6. Who we share information with

We do not sell your personal information. We share it only where necessary, and only with the following categories of recipients:

Recipient	Purpose
Google (Google Workspace, Gmail, Google Drive, Google Analytics)	Email, document storage, and website analytics. Google operates under its own privacy and security terms.
Microsoft (OneDrive)	Document storage and file sharing for client work.
Dropbox	File sharing and storage where required for client engagements.
Web3Forms	Processing submissions from our website contact and guide-request forms and forwarding them to our email. Web3Forms may retain submission data for up to three years under its own privacy policy, unless deleted earlier.
Microsoft Clarity	Where enabled, anonymised website usage analytics (such as clicks and scrolling) to help us improve the site. Clarity masks text that visitors type into forms.
WhatsApp (Meta Platforms)	Communications via WhatsApp Business, subject to Meta's privacy terms.
Professional advisers	Attorneys, accountants, or other specialists where necessary for a specific matter, and only with your knowledge.
Dispute resolution bodies	The CCMA, Bargaining Councils, and the Labour Court, where we represent you in proceedings.
Regulatory and law enforcement authorities	Where we are legally required to disclose information.

Some of these providers (including Google, Microsoft, Dropbox, and Meta) may process information outside South Africa. Where this occurs, we rely on the provider's own privacy framework, which is required to offer a level of protection broadly equivalent to POPIA.

7. How long we keep your information

We retain personal information only for as long as is necessary for the purpose for which it was collected, or as required by law.

• General website enquiries that do not lead to engagement: retained for up to 24 months from last contact, then deleted.
• Active client matters: retained for the duration of the engagement.
• Closed client matter files: retained for 5 to 7 years after the matter is closed, in line with the Prescription Act and ordinary dispute-limitation considerations.
• Financial and tax records: retained for the periods required by the Companies Act, the Income Tax Act, and related legislation (typically 5 years from the end of the tax year).

After the applicable retention period, we securely delete or anonymise the information.

8. Your rights

Under POPIA, you have the following rights in respect of your personal information:

• The right to be informed about the processing of your information.
• The right to request access to the personal information we hold about you.
• The right to request correction of inaccurate or outdated information.
• The right to request deletion of your information where it is no longer needed or was unlawfully obtained.
• The right to object to processing on legitimate-interest grounds.
• The right to withdraw consent, where consent is the basis we rely on.
• The right to complain to the Information Regulator.

For detailed instructions on how to exercise these rights, please refer to our POPIA Notice, or contact our Information Officer using the details in section 12.

9. Cookies and website tracking

Our website uses a small number of cookies and similar technologies, primarily through Google Analytics, to understand how visitors use the site. These cookies do not identify you personally on our side; they provide us with aggregated information about traffic, popular pages, and visitor behaviour.

You can disable cookies through your browser settings. Doing so will not prevent you from using the website, though it may limit some functionality.

10. Security

We take reasonable technical and organisational measures to protect personal information against loss, unauthorised access, disclosure, alteration, and destruction. These measures include access controls, encryption of data in transit, secure cloud storage, and the use of reputable service providers. No system is entirely secure, and we cannot guarantee absolute security of information transmitted over the internet.

11. Changes to this policy

We may update this Privacy Policy from time to time. The date of the most recent update is shown at the top of this page. Significant changes will be brought to your attention where reasonably practicable. Continued use of our website or services after changes are published constitutes acceptance of the updated policy.

12. Contact

If you have any questions about this Privacy Policy, about how we handle your personal information, or if you would like to exercise any of your rights, please contact our Information Officer:

If you are not satisfied with our response, you have the right to lodge a complaint with the Information Regulator of South Africa: