Privacy Policy

1. Who we are

This website and our team-building services are operated by the business described below. This business is the responsible party for the personal information described in this policy.

2. What personal information we collect

Information you give us

• Enquiry, quotation and booking details: organisation or school name, contact person, telephone or WhatsApp number, email address, preferred dates, venue or town, group size, age group, programme duration and the objectives you describe.
• Participant information: where it is needed to deliver a programme safely — for example participant numbers, age groups, and any accessibility, medical or dietary requirements you choose to share with us. Please share only what is necessary, and make sure you are permitted to share it.
• Payment and transaction information: invoicing details, proof of payment or EFT reference, and the amounts and dates of payments. We do not process card payments on this website and we do not store card numbers.
• Correspondence: messages you send us by WhatsApp, email, telephone or through our forms.

Information collected automatically

• Basic technical information needed to serve the website securely, such as your IP address, browser type and the pages requested. This is handled by our hosting provider as part of normal server logging.
• Cookies and similar technologies. At present this website uses only cookies and local storage that are strictly necessary for the site to work, plus a record of your own cookie choice. See our Cookie Policy.

We do not currently run advertising or third-party marketing trackers on this website. If we add analytics or marketing tools in future, we will update this policy and the Cookie Policy, and ask for your consent where consent is required.

3. Why we collect information and how we use it

• To respond to your enquiry and prepare an accurate quotation.
• To plan, staff and safely deliver your team-building or leadership programme.
• To confirm bookings, issue invoices and tax documents, and record payments.
• To communicate with you about your event, including reminders and logistics.
• To keep records required by South African tax, company and accounting law.
• To improve our programmes, for example by reviewing feedback collected after an event.
• To send you occasional information about our services, only where you have asked us to or where the law allows it. You can opt out at any time.

We rely on your consent, on the performance of our agreement with you, on our legitimate business interests, and on legal obligations, depending on the purpose.

4. Direct marketing and communication preferences

We do not add you to a marketing list simply because you requested a quotation. Marketing consent is always a separate, optional choice on our forms. Every marketing message includes a way to opt out, and you can also opt out at any time by replying to any message or emailing us.

5. How we store and protect information

Enquiry, quotation, booking and payment records are stored in our secure managed database. Access is restricted by role: only authorised MGA-Teambuild staff can view operational records, and financial records are restricted further. Access is controlled by individual accounts, protected in transit by encryption, and changes to bookings and payments are recorded in an audit trail.

No system is completely secure. If a security compromise affects your personal information, we will notify you and the Information Regulator as POPIA requires.

6. When we share information

• Facilitators and operational staff: only the information they need to deliver your event safely.
• Venues and third-party suppliers (for example a resort, caterer or transport provider) where your programme requires it, and only the details needed for that arrangement.
• Service providers who host our website and database, send our email, or support our accounting, under confidentiality obligations.
• Our accountants, auditors or SARS where required for tax and statutory reporting.
• Where the law requires it, or to establish or defend a legal claim.

We do not sell or rent your personal information. Some of our service providers may process data outside South Africa. Where that happens, we take reasonable steps to ensure comparable protection as required by section 72 of POPIA.

7. How long we keep information

• Enquiries that do not become bookings: kept for up to 24 months, then deleted or anonymised.
• Quotations, bookings, invoices and payment records: kept for at least five years as required by South African tax and company legislation.
• Participant safety and medical information: kept only for as long as needed for the event and any related incident record, and then deleted.
• Feedback: kept in summarised form; identifying details are removed where they are not needed.

8. Your rights under POPIA

• Ask what personal information we hold about you, and request a copy.
• Ask us to correct or update information that is wrong or incomplete.
• Ask us to delete information we no longer have a lawful reason to keep.
• Object to processing based on legitimate interests, and to direct marketing at any time.
• Withdraw consent you previously gave, without affecting processing already carried out.
• Complain to the Information Regulator (South Africa) if you believe we have not handled your information lawfully.

To exercise any of these rights, contact us using the details below. We may ask you to verify your identity before we act on a request, and we will respond within a reasonable time.

9. Children and learners

Where a programme involves learners under 18, we deal with the school, organisation or parent or guardian responsible for them. We ask that consent for participation, and for any photography, is obtained by the school or organisation before the event. We collect information about minors only where it is necessary for their safe participation.

10. Third-party services and external links

Our website links to WhatsApp, Facebook and email. When you use those channels, the relevant provider's own privacy terms apply to the message you send. We are not responsible for the content or privacy practices of external websites.

11. Changes to this policy

We may update this policy from time to time. The "Last updated" date at the top of this page shows when it last changed.

12. Contact us about privacy

For any privacy question, access request or complaint, contact MGA-Teambuild on 081 717 3683 or info@mgateambuild.co.za, or write to 63 Queen Street, Adelaide, Eastern Cape, 5760.

[Administrator to complete: the appointed Information Officer's name, direct email address and Information Regulator registration reference, if registered.]