Privacy Notice

Privacy & Data Protection

This Privacy Notice explains how Goshen Business and Career Advisory Services (“Goshen”, “we”, “us” or “our”) collects, uses, stores, shares and protects personal information in connection with our website, professional engagements, advisory services, programmes and other legitimate business activities.

Goshen is committed to handling personal information responsibly, lawfully and transparently in accordance with the Protection of Personal Information Act 4 of 2013 (“POPIA”) and other applicable legal requirements.

Depending on the nature of your relationship with Goshen, additional privacy information, consent forms, contractual provisions or programme-specific documentation may apply. Where applicable, those documents should be read together with this Privacy Notice.

Scroll

Last Updated on 5 October 2026

1. Who this Privacy Notice applies to

This Privacy Notice may apply to personal information relating to:

  • website visitors and people who submit enquiries to Goshen;
  • prospective, current and former clients and their representatives;
  • founders, entrepreneurs, professionals and other individuals receiving advisory support;
  • participants in Goshen programmes and capability-development activities;
  • participants in Goshen programmes and capability-development activities, including participants under the age of 18 where applicable, together with their parents or guardians where appropriate;
  • representatives of partner organisations, institutions, enterprises, schools and other stakeholders;
  • suppliers, service providers, professional advisers and other business contacts; and
  • other persons who interact with Goshen in the course of its legitimate activities.

2. What personal information we may collect

The information we collect depends on the nature of our interaction with you. We seek to collect personal information that is relevant and reasonably necessary for the purpose for which it is processed.

  • Identity and contact information, such as your name, email address, telephone number and other contact details.
  • Professional, organisational or business information, such as your employer or organisation, role, professional background, business information or areas of responsibility.
  • Enquiry and communication information, including information you provide through our website, email, telephone, meetings or other correspondence.
  • Engagement and programme information reasonably required to provide advisory services, administer programmes, understand needs or support agreed activities.
  • Administrative and contractual information required for proposals, contracting, invoicing, record-keeping, supplier management and related business administration.
  • Website and technical information that may be generated when you use our website, where applicable, such as device, browser, log or cookie-related information.
  • Special personal information, or personal information relating to a participant under the age of 18, only where it is relevant and lawful to process and appropriate safeguards are applied.

3. How we collect personal information

We may collect personal information:

  • directly from you when you submit an enquiry, communicate with us, complete a form or application, attend a meeting or event, participate in a programme, or enter into an advisory or professional engagement with Goshen;
  • from the organisation, institution, school, enterprise or other entity that you represent or with which you are associated, where appropriate;
  • from a parent or guardian where a programme participant is under the age of 18 and the information is required for the relevant programme;
  • from partners, service providers or other third parties where the collection is lawful and relevant to a legitimate Goshen activity; and
  • from publicly available sources where appropriate and permitted by law.

4. Why and how we use personal information

Goshen processes personal information only for an appropriate purpose and where there is a lawful basis for doing so under POPIA or other applicable law. Depending on the circumstances, processing may be necessary to respond to a request, prepare for or perform an agreement, comply with a legal obligation, pursue a legitimate interest permitted by law, or may be based on consent.

We may use personal information to:

  • receive, assess and respond to enquiries and requests;
  • communicate with prospective and existing clients, programme participants, partners and other stakeholders;
  • prepare for, establish, manage and deliver advisory engagements and other professional services;
  • administer Career Development, Leadership Development, enterprise-development and other Goshen programmes or initiatives;
  • understand institutional, founder, business or participant needs and support appropriate advisory, assessment or capability-development activities;
  • manage meetings, events, applications, correspondence, records and related administration;
  • prepare proposals, agreements, invoices and other business documentation;
  • manage relationships with suppliers, service providers, partners and professional advisers;
  • maintain the security, integrity and effective operation of our website and business systems;
  • meet legal, regulatory, contractual, governance, accounting and record-keeping obligations; and
  • protect the legitimate rights, interests, information and operations of Goshen and the people and organisations with whom we engage.

5. Website enquiries

When you submit an enquiry through the Goshen website, we may collect the information you provide in the enquiry form, including your name, email address, organisation, subject and message. We use this information to receive, consider and respond to your enquiry and, where appropriate, to communicate with you about the matter you have raised.

The website enquiry form may be supported by a third-party technology service provider acting in support of the form functionality. Where a service provider processes personal information for Goshen, we seek to apply appropriate confidentiality, security and data-protection arrangements consistent with applicable requirements.

6. Special personal information

Certain categories of personal information receive additional protection under POPIA. Goshen will process special personal information only where it is relevant to a legitimate activity and where the processing is permitted by law. Where consent or another specific legal basis is required, the appropriate requirement will be applied.

Where information is collected for a particular programme, assessment or other defined purpose, Goshen may provide additional information about the data required, the purpose of collection and how it will be handled.

7. Personal information relating to children

Goshen may from time to time provide programmes, services or activities involving persons under the age of 18. Where personal information relating to a child is collected or processed, Goshen will do so in accordance with POPIA and other applicable legal requirements.

Where required, appropriate consent or authorisation will be obtained from a parent, guardian or other competent person before the personal information is collected or processed. Appropriate safeguards will be applied to protect the privacy and confidentiality of personal information relating to children.

Where photographs, video, audio or other recordings involving children are collected, used or published, the necessary consent or authorisation will be obtained as required.

8. Confidentiality

Goshen recognises that information received in professional engagements and programmes may be confidential. We seek to protect such information and limit access to persons who require it for an authorised purpose.

Where a particular professional service or programme carries additional confidentiality requirements, those requirements may be explained in the relevant engagement, consent or programme documentation. Confidential information may be disclosed where disclosure is authorised, required or permitted by law, or otherwise appropriately agreed.

9. Sharing personal information

Goshen does not sell personal information.

We may share personal information where reasonably necessary for the purpose for which it was collected, to support a legitimate Goshen activity, or where disclosure is required or permitted by law. Recipients may include:

  • technology, hosting, communications and other service providers supporting our website or business operations;
  • professional advisers, accountants or other specialists supporting Goshen where appropriate;
  • partners or collaborating organisations where information sharing is necessary for an agreed activity and is appropriately governed;
  • institutions, schools, enterprises or other organisations involved in an engagement or programme where the sharing is appropriate and lawful; and
  • regulators, courts, law-enforcement authorities or other authorised bodies where disclosure is required or permitted by law.

Where another party processes personal information on Goshen’s behalf, Goshen seeks to establish appropriate confidentiality, security and data-protection arrangements consistent with the nature of the processing.

10. Cross-border processing and transfers

Some technology or service providers used by Goshen may process or store information outside South Africa. Where personal information is transferred outside South Africa, Goshen will seek to ensure that the transfer is handled in accordance with the applicable requirements of POPIA, including appropriate protections where required.

11. Security of personal information

Goshen takes reasonable and appropriate technical and organisational measures to safeguard personal information against accidental or unlawful loss, destruction, damage, unauthorised access, misuse, alteration or disclosure. The safeguards applied are informed by the nature of the information, the way it is processed and the risks associated with the processing.

Access to personal information is limited, as appropriate, to persons who require it for an authorised purpose. Where service providers process information on our behalf, appropriate confidentiality and security expectations apply.

No method of electronic transmission or storage can be guaranteed to be completely secure. Goshen therefore continues to review reasonable safeguards in light of its activities and the information it processes.

12. Retention and disposal

Goshen retains personal information only for as long as reasonably necessary to fulfil the purpose for which it was collected, maintain appropriate professional and business records, meet contractual requirements, comply with legal or regulatory obligations, resolve matters or protect legitimate rights and interests.

When personal information is no longer required and there is no lawful reason to retain it, Goshen will take reasonable steps to delete, destroy or de-identify it in an appropriate manner.

13. Your rights

Subject to POPIA and any applicable limitations or exceptions, you may have the right to:

  • ask whether Goshen holds personal information about you and request access to that information;
  • request the correction or updating of personal information that is inaccurate, incomplete, misleading or out of date;
  • request deletion or destruction of personal information where the legal requirements for doing so are met;
  • object, on reasonable grounds where applicable, to certain processing of your personal information;
  • withdraw consent where processing is based on consent, subject to the consequences and legal requirements that may apply;
  • request information about the identity of third parties, or categories of third parties, that have had access to your personal information where applicable; and
  • raise a concern or lodge a complaint about the processing of your personal information.

Goshen may need to take reasonable steps to verify your identity before acting on a request.

Certain rights may be subject to lawful limitations, including where information must be retained to comply with legal, contractual or professional obligations.

14. Cookies and website technologies

The Goshen website may use cookies or similar technologies that support website functionality, security, performance or analytics. The technologies used may change as the website develops.

Where cookies or similar technologies require notice or consent under applicable law, Goshen will provide appropriate information and choices. If a separate Cookie Notice becomes appropriate, it will be made available and should be read together with this Privacy Notice.

15. Third-party websites and platforms

The Goshen website or communications may contain links to websites, social-media platforms or services operated by third parties. Their privacy practices are governed by their own notices and policies. Goshen does not control the privacy practices of independent third-party websites or platforms.

16. Changes to this Privacy Notice

Goshen may update this Privacy Notice from time to time to reflect changes in our activities, website, service providers, legal requirements or privacy practices. The current version and effective date will be made available on the Goshen website.

17. Contact us about privacy

We welcome questions, requests or concerns about this Privacy Notice or the way Goshen processes personal information.

Goshen Business and Career Advisory Services

East London, Eastern Cape, South Africa

Email: Goshen.bcadvisory@outlook.com

Telephone: +27 79 514 8809

You may also have the right to lodge a complaint with the Information Regulator (South Africa) in accordance with POPIA.

Programme-specific documentation

This is Goshen’s overarching Privacy Notice. Specific programmes, professional engagements or activities may require additional consent, confidentiality, safeguarding or privacy documentation appropriate to the nature of the service and participants involved.