Privacy notice

Who is responsible

Agentic Practices is run by Stephan Swart through SL Familie Trust, which trades as Leadership Nomad. In this notice, "I" and "the business" mean the trust. I am the responsible party under the Protection of Personal Information Act (POPIA), and Stephan Swart is the information officer. Contact details are at the bottom of this page.

What I collect

• When you ask for a conversation or join a waiting list: your name, email address, organisation, role and the message you write.
• When you book a seat: your name, email address, phone number if you give one, company details and billing address, and which option you chose.
• When you pay: Payfast takes your card or bank details on its own page. I never see or store them. I get confirmation that the payment went through, the amount and a reference.
• During the programme: attendance, the recordings of sessions you join, and any work you choose to share with me or the group.
• When you visit the site: your IP address and basic technical details (browser, country, pages viewed) are processed to deliver the pages and to count visits. The site sets no tracking cookies.

Why I use it

• To answer you and to run the sessions you signed up for.
• To invoice you, take payment and keep the accounting and tax records the law requires.
• To contact you about the programme you booked or the waiting list you joined. I only send marketing to people who asked for it, and every message tells you how to stop.
• To keep the site secure and see in aggregate how many people visit.

Who else sees it

I don't sell your information or share it for advertising. I use a small set of services to run the business, and they handle your information on my behalf:

• Cloudflare, for hosting the site, security and cookie-free visit counts.
• Tally, for the booking, waiting-list and survey forms.
• Payfast, for card and bank payments.
• Xero, for invoices and accounting.
• Telegram and an email delivery service, for notifying me of new bookings and sending you confirmations.
• My accountant and tax authorities, where the law requires it.

Some of these providers store data outside South Africa. I only use providers that protect personal information to a standard comparable to POPIA.

How long I keep it

Invoices and payment records are kept for five years, as South African tax law requires. Enquiry and waiting-list details are kept until you ask me to delete them, or until about two years after our last contact. Session recordings are shared only with the people in that cohort and are deleted when no longer needed for the programme.

How I protect it

Access to the tools above is limited to me, protected by strong passwords and two-step sign-in where the provider offers it. The site is served over HTTPS only. If personal information is ever exposed to someone who shouldn't see it, I will tell you and the Information Regulator as POPIA requires.

Cookies

The public pages set no cookies. If you are a participant and sign in to the participants area, one cookie keeps you signed in. It holds no personal information and applies only to that area.

Your rights

You can ask me what personal information I hold about you, ask me to correct it, ask me to delete it, or object to how I use it. Use the contact details below. I will answer within 30 days. If you are not happy with my answer, you can complain to the Information Regulator of South Africa at inforegulator.org.za ([email protected]).

Changes

If I change this notice, the new version goes on this page with a new "Updated" date at the bottom.