CST Governance (Pty) Ltd (“CST Governance”, “we”, “us” or “our”) respects your privacy and is committed to processing personal information lawfully, reasonably and transparently. This policy explains how we handle personal information when you visit this website, contact us or enquire about our services.
Last updated: 20 August 2026
1. Responsible party
CST Governance is the responsible party for personal information processed through this website. Privacy enquiries and requests may be sent to info@cstgovernance.com, or by post to P O Box 268, Florida Hills, 1716. Our office is at Zeelie Office Park, 381 Ontdekkers Road, Florida Park, 1709.
2. Personal information we collect
We may collect information you provide directly, including your name, organisation, email address, telephone number, service requirements and the contents of messages or documents you send us. We may also receive limited technical information such as your IP address, browser type, device information, referring page and website usage data through essential server logs or approved analytics tools.
3. Why we process information
We process personal information to respond to enquiries; assess and provide requested services; communicate with clients and prospective clients; administer our website; maintain security and prevent misuse; comply with legal and regulatory duties; keep appropriate business records; and establish, exercise or defend legal rights. Where required, we will obtain consent. In other circumstances processing may be necessary to take steps at your request, perform an agreement, comply with law or pursue a legitimate business interest permitted by applicable law.
4. Sharing and operators
We may share information with authorised CST personnel and carefully selected service providers that support hosting, email, information technology, professional advice, records management or business administration. These providers should process information only for authorised purposes and subject to appropriate confidentiality and security obligations. We may also disclose information where law requires it, to protect legal rights, or in connection with a lawful business reorganisation.
5. Cross-border processing
Some technology or hosting providers may process information outside South Africa. Where this occurs, we will take reasonable steps to ensure that the transfer is permitted under the Protection of Personal Information Act 4 of 2013 (“POPIA”) and that appropriate safeguards apply.
6. Retention and security
We retain personal information only for as long as reasonably necessary for the purpose for which it was collected, our professional and contractual obligations, legitimate recordkeeping needs, or a period required by law. We use reasonable technical and organisational safeguards designed to protect information against loss, unlawful access, interference, alteration, destruction or disclosure. No internet transmission or storage system can be guaranteed to be completely secure.
7. Your rights
Subject to POPIA and other applicable law, you may ask whether we hold personal information about you; request access to it; request correction or deletion of inaccurate, irrelevant, excessive, outdated, incomplete or unlawfully obtained information; object to certain processing; or withdraw consent where processing relies on consent. We may need to verify your identity and may retain information where law permits or requires us to do so.
8. Cookies and website data
This website may use essential cookies required for security and functionality. If optional analytics or marketing cookies are introduced, CST should implement an appropriate consent mechanism and update this policy with the providers, purposes and retention periods involved.
9. Enquiries, complaints and updates
Send privacy enquiries to info@cstgovernance.com. You may also have the right to lodge a complaint with the Information Regulator (South Africa). We may update this policy when our practices, services or legal obligations change. The latest version will appear on this page.