Who we are: StatForge ("we", "us", "our") provides statistical consulting for academic and research projects in South Africa. This policy explains how we handle personal information under South Africa's POPIA (and, where applicable, similar laws like the GDPR/UK GDPR).

What we collect

Contact details: name, email, phone/WhatsApp, university.
Project info: topic, methodology, deadlines, requirements.
Files & data: datasets, codebooks, instruments, analysis outputs.
Usage & technical data: basic logs from our website and booking tools (e.g., page views, IP, device).
Communications: messages via WhatsApp, email, web forms, and booking notes.

How we use it

To respond to enquiries, qualify leads, provide quotes, deliver services, and support.
To schedule calls/meetings and manage accounts.
To improve our services and prevent misuse or fraud.
To meet legal/contractual obligations and keep appropriate records.

Legal bases (POPIA/GDPR-style): consent, performance of a contract (or steps to enter one), and our legitimate interests in running a professional consulting service.

Sensitive & third-party data

If you share participant/subject data, you confirm you have a lawful basis to do so and (where possible) have anonymised or de-identified it. We can advise on anonymisation but you are the party responsible for obtaining any required permissions/consent.

How we share information

We use reputable service providers as processors, for example:

WhatsApp Cloud API (Meta) for messaging,
Calendly for bookings,
Email/hosting & storage providers,
Analytics (basic website telemetry).

We do not sell personal information. We don't store card details; if payments are used, they're processed by third-party providers.

International transfers

Your information may be processed outside South Africa (e.g., EU/US) by our service providers. We rely on contractual safeguards (e.g., standard contractual clauses) and require appropriate security from providers.

Security & retention

We use reasonable technical and organisational measures (access controls, encryption in transit, least-privilege). We keep data only as long as necessary for the purposes above, to comply with law, resolve disputes, or enforce agreements—then delete or de-identify it. You can ask us to delete earlier where legally possible.

Your rights

Under POPIA you may:

Access your personal information,
Correct or delete it,
Object to or limit processing,
Withdraw consent (where processing relies on consent).

To exercise rights, contact us (details below). You may also lodge a complaint with the Information Regulator (South Africa).

Children

Our services are not directed to children under 18. We do not knowingly process children's data.

Academic integrity

We provide statistical consulting and analysis support. We do not write dissertations or engage in academic misconduct. Clients remain responsible for complying with their institution's policies.

Contact

Questions or requests: privacy@statforge.co.za (or michael@statforge.co.za).

StatForge, South Africa. Website: statforge.co.za

Changes

We may update this policy from time to time. We'll post the latest version with a new "Last updated" date.

Privacy Policy