Privacy Policy

How Vorenta looks after the personal information you share with us.

Contents

• 1. What personal information we collect
• 2. The contact form
• 3. The email subscription
• 4. Why we are allowed to process this information
• 5. Hosting and third parties
• 6. Cookies
• 7. How long we keep information
• 8. Security measures
• 9. Your rights under POPIA
• 10. Lodging a complaint
• 11. Changes to this policy
• 12. Contacting us

1. What personal information we collect

We only collect what is needed to answer your enquiry or send you our updates.

Vorenta Financial Consulting (Pty) Ltd, trading as Vorenta ("we", "us", "our"), a financial consulting practice, collects personal information through two channels on kordalis.site: the contact form on our enquiries page, and the email subscription form used to sign up for our newsletter and market commentary. We do not run e-commerce or client onboarding through this website, and we do not collect banking, identity, or account information through the site itself. Any such information exchanged in the course of an actual client mandate is governed by the engagement letter for that mandate, not by this policy.

2. The contact form

When you write to us, we process your name, email address, phone number (if given) and message.

When you submit the contact form, we collect your full name, email address, telephone number where you choose to supply one, and the content of your message. This information is used solely to respond to your enquiry, to assess whether we can assist you, and, where relevant, to open a dialogue about a possible engagement. We do not add contact-form submissions to our marketing list unless you separately tick the subscription option or otherwise request it.

3. The email subscription

Subscribing means giving us your email address so we can send you newsletters and commentary.

If you subscribe to our mailing list, we collect and store your email address, the date you subscribed, and a record of your consent. We use this information to send periodic newsletters, market updates, and information about our consulting services. Every email we send contains a functional unsubscribe link. Where our email service provider is located outside South Africa, we rely on contractual safeguards with that provider to ensure your information continues to receive an adequate level of protection, as required by POPIA where personal information is transferred across borders.

4. Why we are allowed to process this information

We process your information on the basis of your consent, our legitimate business interests, or a contract between us.

In terms of section 11 of POPIA, we process personal information collected via the contact form on the basis of our legitimate interest in responding to enquiries and pursuing potential business relationships, and, where a mandate results, in the performance of a contract with you. We process subscription data on the basis of your consent, given when you submit the subscription form. You may withdraw that consent at any time, as described in section 9 below, without affecting the lawfulness of processing carried out before withdrawal.

5. Hosting and third parties

The site is hosted by a service provider who processes data on our instructions, and we use limited third-party tools for analytics and email delivery.

kordalis.site is hosted by a third-party hosting provider that stores server logs and website data on our behalf as an operator in terms of POPIA. We may also use a mailing-list platform to manage subscriptions and deliver newsletters, and an analytics tool as described in our Cookie Policy. Each such provider is contractually bound to process personal information only on our instructions, to keep it confidential, and to apply appropriate security safeguards. We do not sell, rent, or trade personal information to any third party for their own marketing purposes.

6. Cookies

The site uses necessary, analytics, and marketing cookies, explained fully in our separate Cookie Policy.

Our website uses cookies and similar technologies to operate correctly, to understand how visitors use the site, and, where you consent, to support marketing activity. Full details of each category, its purpose, and how to manage your preferences are set out in our Cookie Policy, available at kordalis.site/cookies.html.

7. How long we keep information

We keep contact-form enquiries and subscriber records only for as long as there is a reason to.

Contact-form submissions that do not result in a client engagement are retained for a period of twenty-four months, to allow us to follow up on enquiries and maintain a reasonable business record, after which they are securely deleted. Subscriber email addresses are retained for as long as you remain subscribed, and are deleted within thirty days of you unsubscribing or withdrawing consent. Where information forms part of a client file, it is retained in accordance with our professional and statutory record-keeping obligations as a financial consulting practice.

8. Security measures

We apply reasonable technical and organisational measures to keep your information safe, as POPIA requires.

In accordance with section 19 of POPIA, we have implemented appropriate technical and organisational measures to secure the integrity and confidentiality of personal information in our possession, including access controls, encrypted transmission of form submissions, and restriction of access to personal information to staff who require it for the purposes described in this policy. Should a security compromise occur that gives reasonable grounds to believe personal information has been accessed or acquired by an unauthorised person, we will notify the Information Regulator and affected data subjects as required by section 22 of POPIA.

9. Your rights under POPIA

You may ask us what we hold about you, correct it, object to its use, or ask us to delete it.

As a data subject under POPIA, you have the right to: be notified that personal information about you is being collected; establish whether we hold personal information about you and to request access to it; request correction, destruction, or deletion of personal information that is inaccurate, irrelevant, excessive, out of date, incomplete, misleading, or obtained unlawfully; object, on reasonable grounds, to the processing of your personal information; withdraw consent at any time where processing is based on consent, including unsubscribing from our mailing list; and object to the processing of your personal information for purposes of direct marketing. To exercise any of these rights, please contact us using the details in section 12 below. We will respond within a reasonable time and, in any event, within the timeframes required by POPIA.

10. Lodging a complaint

If you are unhappy with how we handle your information, you may complain to us or to the Information Regulator.

We would welcome the opportunity to resolve any concern directly; please contact us in the first instance. You are, however, also entitled to lodge a complaint with the Information Regulator of South Africa, whose contact details are published at www.justice.gov.za/inforeg, regarding the manner in which we have processed your personal information.

11. Changes to this policy

We may update this policy from time to time; the current version always applies.

We may revise this Privacy Policy periodically to reflect changes in our practices or in applicable law. The version published at kordalis.site/privacy.html at any given time is the version that applies. We encourage you to review it from time to time.

12. Contacting us

Questions about this policy, or requests concerning your personal information, can be sent to us directly.

This Privacy Policy was last updated in 2026.