Privacy & Compliance

Last updated: 1 July 2026

This notice explains how the SATalent1st group collects, uses, protects and shares your personal information, and the rights you have. We are committed to processing personal information lawfully under South Africa’s Protection of Personal Information Act (POPIA) and, where it applies, the EU General Data Protection Regulation (GDPR).

Who we are

The responsible party (data controller) is SATalent1st (Pty) Ltd, registration number 2025/936338/07, of 11 Kanonberg Street, De Bron, 7530, Cape Town, South Africa. SATalent1st is the group behind Haus of Yachting, DrawPoint, TransformationWorks and the talent platform; this notice covers the group and its divisions.

Our Information Officer can be reached at Compliance@SATalent1st.com, or in writing to: The Information Officer, SATalent1st (Pty) Ltd, 11 Kanonberg Street, De Bron, 7530, Cape Town.

What we collect, and why

When you use the enquiry form on this website we collect only the details you give us — your name, email address, phone number (if provided) and your message. We use them for one purpose: to respond to your enquiry and route it to the relevant division. We do not use your information for analytics, advertising or marketing, and we do not profile you.

Our lawful basis is your consent, given when you submit the form. Providing the information is voluntary, but we cannot respond to an enquiry without it.

How we protect it

Personal information is handled on ISO 27001-accredited infrastructure, with encryption in transit and at rest, multi-factor authentication, and role-based access controls. Access is limited to the people who need it to reply to you, and everyone who handles it is bound to confidentiality.

Some divisions make additional, sector-specific commitments on top of this group-wide floor: Haus of Yachting operates to the Maritime Labour Convention (MLC) standards common in the yachting industry, and TransformationWorks’ private-AI deployments include dedicated data-residency and data-sovereignty controls to support regulated clients’ own obligations. Those are additions to this notice, not exceptions from it.

Who we share it with

We never sell or rent your personal information. We share it only with the service providers (operators) who help us receive and respond to your enquiry — principally our website form host. That host, Netlify, processes the submission on infrastructure located in the United States, which means your information may be transferred outside South Africa. Where we transfer personal information across borders we rely on providers who afford a level of protection consistent with POPIA and GDPR, and we limit the transfer to what is necessary to reply to you.

Cookies & tracking

This website sets no cookies and runs no analytics or third-party tracking. Fonts and other assets are served from our own domain. Because nothing tracks you here, there is no cookie banner to accept.

How long we keep it

We keep enquiry details only for as long as needed to deal with your enquiry and any follow-up — typically no more than 24 months from your last contact with us — and to meet our legal and record-keeping obligations, after which they are deleted or anonymised.

Your rights

Under POPIA (and GDPR where it applies) you have the right to:

• access the personal information we hold about you;
• ask us to correct information that is inaccurate or out of date;
• object to our processing of your information;
• ask us to delete your information;
• withdraw your consent at any time; and
• where GDPR applies, request a portable copy of your information.

To exercise any of these, email Compliance@SATalent1st.com. We will respond within a reasonable period and free of charge in most cases.

Complaints

If you believe we have mishandled your personal information, please tell us first: email Compliance@SATalent1st.com with “COMPLAINT” in the subject line and a description of the issue. We will acknowledge it within 5 business days and aim to investigate within 20 business days.

If you are not satisfied, you may escalate to the Information Regulator of South Africa (inforegulator.org.za), or — if you are in the EU/UK — to your local data-protection authority.

Access to information (PAIA)

Our manual under the Promotion of Access to Information Act (PAIA) is available on request from Compliance@SATalent1st.com.

Changes to this notice

We may update this notice from time to time; the “last updated” date above shows the current version. Material changes will be reflected here.