Legal
Privacy notice
Who we are
glenshade.co.za. The responsible party for personal-information processing is the Glenshade Holdings executive team, contactable at info@glenshade.co.za.Information we collect
- From the contact form on this website: your name, company, email, phone (if supplied), and the message you write.
- From the client portal:when an executive issues a single-use PIN to you, we record your company name, recipient name, email, and (optionally) phone number, and we log every PIN attempt and download with the timestamp, your IP address, your browser's user-agent string, and the byte count of any downloaded file.
- From standard web traffic: server logs may retain anonymised request data (timestamp, page requested, referrer, country) for short periods.
How we use it
- Contact-form submissions are received only by the Glenshade team and are used to respond to your enquiry.
- Portal records are retained as the audit trail of which documents were released to which client representative and when. This audit trail is the legitimate-interest basis for processing under POPIA.
- We do not use any of this information for advertising or share it with marketing third parties.
How long we keep it
- Contact-form messages: kept for as long as is necessary to conclude the conversation, typically less than 12 months.
- Portal audit-log records: 24 months from the date of the recorded event, then deleted automatically.
- Document download events linked to expired or invalidated PINs are also retained for the 24-month audit-log window.
Your rights under POPIA
You may request a copy of any personal information we hold about you, ask us to correct it, or ask us to delete it (subject to any legal retention obligation we have to keep an audit trail). To do so, email info@glenshade.co.za with the subject line POPIA data-subject request. We respond within 30 calendar days.
Where it's hosted
The website and portal are hosted on Vercel's global edge network. The portal's database and file storage are hosted in the European Union region (under POPIA's cross-border transfer rules, this is permissible because the EU offers an equivalent level of data protection). Specific hosting details are available on request.
Cookies
This website does not set any tracking or advertising cookies. The portal uses a single session cookie when an executive logs in to the admin area; that cookie is required for the portal to function and is removed on logout.
Changes to this notice
We may update this notice as the portal evolves. Material changes will be flagged at the top of the page for at least 30 days. The version below indicates when this notice was last changed.
Version 1.0 · last updated 2026-05-06
