HomeAboutServices Book a Call
Legal

Privacy Policy

Last updated: 25 February 2026  |  Effective date: 25 February 2026

Contents

  1. Responsible Party
  2. Scope and Application
  3. Information We Collect
  4. Purpose of Processing
  5. Lawful Basis for Processing
  6. Sharing of Personal Information
  7. Retention of Information
  8. Security
  9. Your Rights Under POPIA
  10. Cookies
  11. Third-Party Services
  12. Changes to This Policy
  13. Contact Us

1. Responsible Party

The AI Crucible is operated as a sole proprietorship by Arno van Zyl, based in Cape Town, South Africa. For the purposes of the Protection of Personal Information Act 4 of 2013 (POPIA), Arno van Zyl trading as The AI Crucible is the Responsible Party in respect of all personal information collected through this website and in the course of providing services.

Contact details of the Responsible Party and Information Officer:

2. Scope and Application

This Privacy Policy applies to all personal information collected, processed, stored, or used by The AI Crucible in connection with this website (theaicrucible.com) and the services we offer. It applies to all visitors, enquirers, clients, and any other person whose personal information we process.

This policy is intended to comply with the requirements of POPIA and the broader framework of South African data protection law. Where we engage with data subjects located in other jurisdictions, we will take reasonable steps to comply with applicable local requirements as well.

3. Information We Collect

Information you provide directly

When you complete the contact or enquiry form on this website, we collect the following personal information:

  • First name and last name
  • Email address
  • Company or organisation name (where provided)
  • The nature of your enquiry and any information you include in your message
  • Your selected area of interest from the service dropdown

Information collected automatically

When you visit this website, certain technical information may be collected automatically by the hosting environment or third-party services, including IP address, browser type, device type, pages visited, and time of visit. We do not actively collect or store this information ourselves, but it may be processed by our hosting provider (Namecheap) and any analytics services in use.

Information provided during service engagements

If you engage our services, we may collect additional business and personal information necessary to deliver those services, including information about your organisation, team, operational processes, and business challenges. This will be governed by a separate engagement agreement where applicable.

4. Purpose of Processing

We process your personal information only for the purposes for which it was collected. These purposes include:

  • Responding to your enquiry or request for information
  • Scheduling and conducting consultation calls or service engagements
  • Providing the services you have requested or contracted for
  • Communicating with you about your engagement, including follow-up and updates
  • Maintaining records of our client and enquirer relationships as required for business and legal purposes
  • Complying with applicable legal obligations

We do not use your personal information for unsolicited marketing without your explicit consent. We do not build profiles of individuals for advertising purposes and we do not sell personal information under any circumstances.

5. Lawful Basis for Processing

Under POPIA, we process personal information on one or more of the following grounds:

  • Your consent, where you have voluntarily submitted information through our contact form or otherwise agreed to our processing
  • The conclusion or performance of a contract with you, where processing is necessary to deliver services you have requested
  • Our legitimate business interests, to the extent that those interests do not override your rights and interests as a data subject
  • Compliance with a legal obligation to which we are subject

Where we rely on your consent as the lawful basis for processing, you have the right to withdraw that consent at any time by contacting us at arno@theaicrucible.com. Withdrawal of consent will not affect the lawfulness of processing carried out before the withdrawal.

6. Sharing of Personal Information

We do not sell, rent, or trade your personal information to third parties. We may share personal information in the following limited circumstances:

  • With third-party service providers who assist us in operating this website and delivering our services, including our hosting provider (Namecheap), form processing service (Formspree), and scheduling service (Calendly). These providers are required to handle your information securely and only for the purposes we have specified.
  • Where you have been referred to or introduced to a specialist within The TAFEL Collective or another trusted partner for a specific technical requirement, and only with your knowledge and agreement.
  • Where we are required to do so by law, court order, or regulatory authority.
  • In connection with a business transfer or restructuring, in which case we will notify affected data subjects as required by law.

Where personal information is processed by third-party operators on our behalf, we take reasonable steps to ensure those operators maintain appropriate security and data protection standards consistent with POPIA.

7. Retention of Information

We retain personal information for as long as is necessary to fulfil the purpose for which it was collected, or as required by law. In general terms:

  • Enquiry information from individuals who do not become clients is retained for a reasonable period to allow for follow-up and is then securely deleted or anonymised.
  • Client information is retained for a minimum of five years after the end of an engagement, consistent with general South African commercial and tax record-keeping requirements.
  • Information we are required to retain by law is held for the period required by the applicable legislation.

When personal information is no longer required, it is securely deleted or rendered permanently anonymous.

8. Security

We take reasonable and appropriate technical and organisational measures to protect personal information against unauthorised access, disclosure, alteration, or destruction. These measures include secure HTTPS transmission of data, access controls, and use of reputable third-party service providers with their own security frameworks.

While we take data security seriously, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security but we commit to notifying affected data subjects and the Information Regulator as required by POPIA in the event of a data breach that poses a risk to your rights and interests.

9. Your Rights Under POPIA

As a data subject under POPIA, you have the following rights in respect of your personal information:

  • The right to be notified that your personal information is being collected and the purpose for which it is being collected
  • The right to access the personal information we hold about you
  • The right to request correction or deletion of inaccurate, irrelevant, excessive, out of date, or misleading personal information
  • The right to object to the processing of your personal information in certain circumstances
  • The right to withdraw consent where processing is based on consent
  • The right to lodge a complaint with the Information Regulator of South Africa

To exercise any of these rights, contact us at arno@theaicrucible.com. We will respond to requests within a reasonable time and in accordance with POPIA's requirements.

The Information Regulator of South Africa can be contacted at inforegulator.org.za or by email at inforeg@justice.gov.za.

10. Cookies

This website is a static HTML site and does not itself set or use cookies. However, third-party services embedded in or linked from this website, including Formspree and Calendly, may use cookies or similar tracking technologies in accordance with their own privacy policies. We recommend reviewing the privacy policies of those services if you have concerns about cookie usage.

11. Third-Party Services

This website makes use of the following third-party services, each of which operates under its own terms and privacy policy:

  • Namecheap - website hosting provider. See namecheap.com/legal/privacy for their privacy policy.
  • Formspree - contact form processing. See formspree.io/legal/privacy-policy for their privacy policy.
  • Calendly - appointment scheduling. See calendly.com/privacy for their privacy policy.
  • Google Fonts - web typography. Font files are loaded from Google's servers. See policies.google.com/privacy for Google's privacy policy.

We are not responsible for the privacy practices of these third-party services and we encourage you to review their policies independently.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or the services we offer. When we do, we will update the effective date at the top of this page. We encourage you to review this policy periodically. Continued use of this website after changes have been made constitutes acceptance of the updated policy.

13. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way we handle your personal information, please contact us:

We take privacy matters seriously and will respond promptly to all legitimate enquiries.