Privacy Policy
This policy explains how Arvellos Financial Consulting (Pty) Ltd (Proprietary Limited (Pty Ltd)), trading as Arvellos, processes personal information in connection with the website arvellos.site and its financial consulting services, in accordance with the Protection of Personal Information Act 4 of 2013 (POPIA).
| Category of Personal Information | Source | Purpose of Processing |
|---|---|---|
| Name and surname | Contact form; email subscription | Identifying the data subject and responding to enquiries |
| Email address | Contact form; email subscription | Correspondence; sending consulting newsletters and updates |
| Telephone number (optional) | Contact form | Follow-up communication regarding enquiries |
| Message content | Contact form | Understanding and responding to the enquiry |
| Technical data (IP address, browser type) | Automatically collected via hosting infrastructure | Security, fraud prevention, and website functionality |
| Cookie identifiers | Cookies placed on the user's device | Website functionality, analytics, marketing (see Cookie Policy) |
1. Responsible Party
The party responsible for determining the purpose and means of processing personal information described in this policy is Arvellos Financial Consulting (Pty) Ltd, 58 Lighthouse Avenue, Umhlanga Rocks, 4001 Durban, South Africa. Enquiries relating to this policy or to the processing of personal information may be directed to [email protected] or +27 31 672 5199.
2. Contact Form Data Flow
Where a user submits the contact form on arvellos.site, the fields completed by the user (name, email address, telephone number where provided, and message content) are transmitted to Arvellos for the sole purpose of responding to the enquiry. This data is stored on servers used by Arvellos for the periods set out in the table below.
3. Email Subscription Data Flow
Where a user subscribes to receive updates or newsletters from Arvellos by submitting an email address, that address is stored in a subscription list maintained by Arvellos and used exclusively to send consulting-related updates until the user unsubscribes.
4. Legal Basis for Processing
| Processing Activity | Basis under POPIA |
|---|---|
| Responding to contact form enquiries | Consent given by submission of the form; legitimate interest in responding to enquiries |
| Sending email subscription content | Consent given by voluntary subscription |
| Technical and security logging | Legitimate interest in maintaining a secure and functioning website |
| Cookies for analytics and marketing | Consent obtained via the cookie consent mechanism |
5. Retention Periods
| Data Category | Retention Period |
|---|---|
| Contact form submissions | 24 months from last correspondence, unless a longer period is required to resolve the enquiry or comply with a legal obligation |
| Email subscription addresses | Until the user unsubscribes or requests deletion |
| Technical server logs | 12 months |
| Cookie data | As set out in the Cookie Policy |
6. Recipients and Cross-Border Transfers
Personal information may be disclosed to service providers engaged by Arvellos for hosting, email delivery, and related operational functions, acting as operators under POPIA and bound by written agreements to process data only on Arvellos's instructions. Where such service providers are located outside South Africa, Arvellos ensures that the recipient is subject to a law, binding corporate rules, or a binding agreement that provides an adequate level of protection substantially similar to POPIA before any transfer occurs.
7. Security Measures
Arvellos implements reasonable technical and organisational measures to protect personal information against loss, unauthorised access, interference, and disclosure, including access controls, encrypted transmission of form submissions, and restricted internal access to subscription lists.
8. Rights of Data Subjects
| Right | Description |
|---|---|
| Access | To request confirmation of whether Arvellos holds personal information and to obtain a copy of it |
| Correction | To request correction of inaccurate, outdated, or incomplete personal information |
| Deletion | To request deletion or destruction of personal information no longer authorised to be retained |
| Objection | To object to processing of personal information, including for direct marketing purposes |
| Withdrawal of consent | To withdraw consent previously given, without affecting the lawfulness of prior processing |
| Complaint | To lodge a complaint with the Information Regulator of South Africa |
Requests to exercise any of these rights may be submitted to [email protected] or +27 31 672 5199. Arvellos will respond within the timeframes prescribed by POPIA.
9. Information Regulator
Should a data subject be dissatisfied with Arvellos's handling of a request or complaint, they may lodge a complaint with the Information Regulator of South Africa, whose contact details are published at inforegulator.org.za.
10. Amendments to this Policy
Arvellos may update this policy from time to time to reflect changes in processing activities or legal requirements. The version published at arvellos.site at any given time is the operative version.
This policy was last updated in 2026.