Contents
01Overview 02Responsible Party 03What We Collect 04How We Use Your Data 05Legal Basis for Processing 06Where Your Data Is Kept 07Cookies & Tracking 08Data Sharing 09Data Retention 10Your Rights Under POPIA 11Security 12International Transfers 13Changes to This Policy 14Contact UsOverview
B2B Success ("we", "us", "our") is committed to protecting your personal information and respecting your privacy in accordance with the Protection of Personal Information Act (POPIA) of South Africa and applicable international data protection standards.
This policy explains what personal information we collect when you visit our website or engage with our services, how we use it, who we share it with, and what rights you have.
Responsible Party
The responsible party for the processing of your personal information is:
B2B Success
Operated by Craig Leppan
Johannesburg, South Africa
Website: www.b2bs.co.za
What We Collect
We collect personal information that you voluntarily provide to us when you fill out a form on our website, request a consultation, or communicate with us. This typically includes:
- First and last name
- Business email address
- Company name
- Job title
- Message content describing your business challenge or enquiry
We may also automatically collect certain technical data when you visit our website, including your IP address, browser type, device information, pages visited, and referral source. This data is collected through cookies and analytics tools.
How We Use Your Data
We use your personal information solely for the following purposes:
- To respond to your enquiry and schedule consultations
- To provide the advisory services you have engaged us for
- To send follow-up communications related to your enquiry
- To improve our website and understand how visitors interact with it
- To comply with legal obligations
We do not use your personal information for unsolicited marketing, and we will never sell your data to third parties.
Legal Basis for Processing
Under POPIA, we process your personal information on the following lawful bases:
- Consent — when you voluntarily submit a form on our website, you consent to us processing the information you provide for the stated purpose
- Legitimate interest — to respond to your enquiry, deliver our services, and improve our website experience
- Contractual obligation — when processing is necessary to perform a consulting engagement you have entered into with us
- Legal compliance — when we are required to retain or disclose information by law
Where Your Data Is Kept
Form submissions on this website go to my own CRM, which runs on Cloudflare and stores your details in a database in Google Cloud’s Johannesburg region (South Africa). Only I have access to it. If you tick the news option, your name and email are also added to my mailing list, which you can leave at any time.
Enquiry notifications are emailed to me through Resend, an email delivery service.
We may also use the following third-party services in connection with our website:
- Surge.sh — website hosting
- Cloudflare — security and form handling (including spam protection)
- Google Fonts — typography delivery (no personal data collected)
We do not use Google Analytics or any advertising tracking services on this website.
Cookies & Tracking
Our website uses a minimal set of cookies:
- Essential cookies — required for basic website functionality
We do not use advertising cookies, retargeting pixels, or social media tracking scripts. You can disable cookies at any time through your browser settings. Disabling cookies will not affect your ability to browse the website, and does not affect the enquiry form.
Data Sharing
We do not sell, rent, trade, or otherwise share your personal information with third parties for their marketing purposes. Your data is only shared with:
- Service providers — the hosting and email services described above, only as needed to run this website
- Professional advisors — such as accountants or legal counsel, where required
- Law enforcement or regulators — only when legally compelled to do so
Data Retention
We retain your personal information only for as long as necessary to fulfil the purpose for which it was collected, or as required by law. Specifically:
- Enquiry data — retained for up to 24 months after your last interaction with us, then deleted or anonymised
- Client engagement data — retained for the duration of our working relationship plus a reasonable period for follow-up and legal compliance
- Website analytics data — aggregated and anonymised, retained for up to 12 months
If you request deletion of your data, we will process your request within 30 days.
Your Rights Under POPIA
Under the Protection of Personal Information Act, you have the following rights:
- Right to access — request a copy of the personal information we hold about you
- Right to correction — request that we correct or update inaccurate information
- Right to deletion — request that we delete your personal information, subject to legal retention requirements
- Right to object — object to the processing of your personal information for specific purposes
- Right to withdraw consent — withdraw your consent at any time where processing is based on consent
- Right to lodge a complaint — file a complaint with the Information Regulator of South Africa
To exercise any of these rights, please contact us using the details below.
Security
We take reasonable technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. This includes the use of encrypted connections (HTTPS), access controls, and secure third-party platforms.
However, no method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security.
International Transfers
Your details are stored in South Africa. Cloudflare and Resend may process them briefly outside South Africa while delivering the form or a notification email. We ensure that any such transfers comply with POPIA's requirements for cross-border transfers and that appropriate safeguards are in place.
Changes to This Policy
We may update this privacy policy from time to time to reflect changes in our practices, technology, or legal requirements. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.
Contact Us
If you have any questions about this privacy policy, wish to exercise your rights, or have a concern about how we handle your personal information, please reach out through our contact form.
You also have the right to lodge a complaint with the Information Regulator of South Africa:
Information Regulator (South Africa)
Website: inforegulator.org.za