Privacy Policy

1. Introduction

We are Brightstar Advisory (Pty) Ltd, a fractional CFO practice based in Midrand, Gauteng (registration number 2023/236587/07). This policy explains what personal information we collect, why we collect it, and what we do with it.

It applies to everyone who contacts us or uses our website at https://brightstaradvisory.com.

We take your privacy seriously, and we handle your information in line with the Protection of Personal Information Act (“POPIA”), South Africa's data protection law.

Our Information Officer, Jean-Pierre Theron, is responsible for how we look after personal information. You can reach the Information Officer at admin@brightstaradvisory.com.

2. Personal information we collect

We only collect the information you choose to give us. In most cases that means:

• your name
• your company name
• your email address
• your phone number
• a description of your enquiry or the help you are looking for

You give us this information when you complete the contact form on our website, send us an email, or call us.

Providing this information is voluntary. If you choose not to share it, we may not be able to respond to your enquiry or work out whether we can help.

We do not collect personal information about you automatically, apart from the website analytics described in section 4. We do not buy personal information from anyone else.

3. How we use your information

We use your information to:

• respond to your enquiry
• understand your situation and assess whether our services are a good fit
• communicate with you while we are working together

We do not send marketing messages without your separate consent. If you agree to receive updates from us, you can withdraw that consent at any time (see section 7).

4. Google Analytics 4

Our website uses Google Analytics 4 (“GA4”), a service provided by Google, to understand how visitors use our site. GA4 collects anonymised information such as the pages you visit, roughly where in the world you are, and the type of device you use. We use this to improve the website.

GA4 relies on cookies to do this. We have set it to anonymise your data, and we do not use it to identify you personally. Google processes this information on our behalf. You can read how Google handles data in the Google Privacy Policy at https://policies.google.com/privacy.

5. Who we share your information with

We do not sell your personal information, and we do not share it with anyone for their own marketing.

We do use a small number of trusted service providers to run our business, and your information may pass through their systems. For example, we use Google for website analytics and email.

These providers process your information only on our instructions and only to deliver their service to us. Some of them, including Google, store and process information outside South Africa. Where that happens, we take reasonable steps to make sure your information is protected to a standard comparable to POPIA, as required by section 72 of the Act.

We keep your information secure using appropriate technical and organisational measures, and we expect the same of our service providers.

6. How long we keep your information

We do not keep your information for longer than we need to.

• Enquiry information: if you contact us but we do not go on to work together, we keep your information for up to 12 months, then delete it.
• Client information: if you become a client, we keep your information for as long as our engagement requires, and afterwards for the period set by our contract with you and by South African law (including tax and company law).

7. Your rights

POPIA gives you rights over your personal information. You can:

• ask us what information we hold about you (the right to access)
• ask us to correct information that is wrong or out of date
• ask us to delete your information, where we are not required to keep it
• withdraw your consent at any time, where we relied on your consent

To exercise any of these rights, email us at admin@brightstaradvisory.com. We will respond as quickly as we can.

If you are unhappy with how we have handled your information, you have the right to complain to the Information Regulator, which oversees POPIA in South Africa:

We would always prefer the chance to put things right first, so please contact us before you take that step.

8. Cookies

A cookie is a small text file that a website stores on your device. The only cookies we currently use are those set by Google Analytics 4, described in section 4. We do not use any other tracking or advertising cookies.

Most browsers let you block or delete cookies through their settings. If you block analytics cookies, our website will still work normally.

9. Contact us

If you have any questions about this policy, or about how we handle your information, please get in touch:

10. Changes to this policy

We may update this policy from time to time, for example if we change the tools we use or if the law changes. When we do, we will update the date below and post the new version on our website.

Last updated: June 2026