Privacy Policy

Last updated: 16 October 2026

Niche Advisory (“Niche Advisory”, “we”, “us” or “our”) respects your privacy and is committed to handling personal information responsibly. This Privacy Policy explains how we may collect, use, store, disclose and protect personal information when you visit our website, contact us, enquire about our services, or work with us.

This policy is intended to be read in accordance with applicable South African law, including the Protection of Personal Information Act 4 of 2013 (“POPIA”) and, where applicable, the Promotion of Access to Information Act 2 of 2000 (“PAIA”). It describes our general practices; the information we process will depend on how you interact with us and the services involved.

Responsible party: Niche Advisory

Location: Waterfall Estate, Gauteng, South Africa

Privacy enquiries: info@nicheadvisory.co.za

For privacy requests or questions about this policy, please email us at the address above and describe your request. Please do not send sensitive personal information unless it is necessary for your enquiry and we have agreed on a suitable method.

Depending on your relationship with us, we may collect and process the following categories of information:

• Identity and contact details: name, business name, job title, email address, telephone number, business address and other contact details you provide.
• Professional and business information: company details, role, business requirements, correspondence, meeting notes and information needed to assess or provide advisory services.
• Transaction, financial and tax information: where relevant to an agreed engagement, documents and information you or an authorized client representative provide for due diligence, valuations, transaction support, tax structuring or related advisory work.
• Website and technical information: information that may be collected when you visit the website, such as IP address, browser and device details, pages viewed, referral information, approximate location derived from technical data, and date/time of access.
• Communication and preference information: enquiries, feedback, consent choices, marketing preferences and records of communications with us.
• Other information: information you voluntarily provide or that is lawfully obtained from a client, professional adviser, public source or other authorized party in connection with a legitimate business purpose.

Please only provide personal information that you are authorized to share. If you provide information about another person, you should ensure that you have a lawful basis to do so and that the person has been informed where required.

We may collect information directly from you when you complete a contact form, email or telephone us, request a proposal, attend a meeting, enter into an engagement or send documents to us. We may also receive information from your employer or organization, a client or its authorized representatives, professional advisers, counterparties, service providers, publicly available sources or systems used to support an engagement, where lawful and appropriate.

Some technical information may be collected automatically by the website or its hosting and security systems. Cookie-related collection is described in our separate Cookie Policy.

We may process personal information for purposes that are reasonable, specific and lawful, including to:

• respond to enquiries and communicate with you;
• prepare proposals, establish and manage client relationships, and perform contractual or pre-contractual steps;
• provide financial, tax, transaction, due diligence, valuation or other advisory services that have been requested or agreed;
• review information, prepare analyses and reports, and communicate findings to the relevant client or authorized recipients;
• administer our business, maintain records, manage billing and payments, and meet professional or contractual obligations;
• maintain website functionality, protect our website and systems, prevent fraud or misuse, and troubleshoot technical issues;
• meet applicable legal, regulatory, tax, accounting or record-retention requirements, and establish, exercise or defend legal rights;
• send business updates or marketing communications where permitted by law and, where required, with your consent; and
• fulfil another purpose disclosed to you at the time information is collected or otherwise permitted by law.

We process personal information only where a lawful basis applies. Depending on the circumstances, this may include your consent; steps taken at your request before entering into a contract; performance of a contract; compliance with a legal obligation; protection of a legitimate interest that is not overridden by your rights; or another basis permitted by applicable law. Where we rely on consent, you may withdraw it, subject to legal or contractual limitations and the consequences explained to you.

We do not intend to sell personal information. We may disclose relevant information, on a need-to-know basis and subject to appropriate safeguards, to:

• our personnel and authorized collaborators who need it to perform their responsibilities;
• clients and persons they authorize to receive deliverables or information relating to an engagement;
• professional advisers, auditors, insurers, legal representatives or other advisers where reasonably necessary;
• service providers supporting our website, hosting, email, communications, document management, security, data storage or business operations;
• banks, regulators, courts, law-enforcement bodies or other parties where disclosure is required or permitted by law; and
• a successor or transaction participant if our business or relevant assets are reorganized or transferred, subject to appropriate confidentiality and legal requirements.

Where a service provider processes personal information on our behalf, we will take reasonable steps to require appropriate confidentiality, security and lawful handling. We remain mindful that the particular recipients will depend on the services and systems actually used.

Some website, email, cloud or other service providers may store or process information in countries outside South Africa. Where personal information is transferred across borders, we will take steps required by POPIA, including ensuring that an applicable legal condition for the transfer is met and that appropriate protection is in place. You may contact us for further information about a relevant transfer, subject to security and confidentiality considerations.

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected, including to provide services, maintain business and engagement records, resolve disputes, enforce agreements and meet legal, regulatory, tax or professional obligations. Retention periods vary according to the type of information and the circumstances. When information is no longer required, we will take reasonable steps to securely delete, destroy or de-identify it, unless retention is required or permitted by law.

We take reasonable technical and organizational steps designed to protect personal information against loss, unauthorized access, disclosure, alteration or destruction. No method of transmission or electronic storage is completely secure, however, and we cannot guarantee absolute security. Please use appropriate care when sending confidential information and contact us promptly if you believe information sent to us has been exposed or misdirected.

Subject to applicable law and any relevant exceptions, you may have the right to:

• ask whether we hold personal information about you and request access to it;
• request correction or deletion of information that is inaccurate, irrelevant, excessive, out of date, incomplete, misleading or unlawfully obtained;
• object to certain processing or withdraw consent where consent is the basis for processing;
• object to direct marketing and ask us to stop sending marketing communications;
• request that we delete or destroy information where the law provides for this; and
• lodge a complaint with the Information Regulator of South Africa.

To make a request, email info@nicheadvisory.co.za with the subject “Privacy Request”. We may need to verify your identity and clarify the information or request involved. We will respond within the period required by law. Certain records may need to be retained, and some requests may be limited by legal duties, the rights of others, confidentiality or applicable exemptions.

Information Regulator (South Africa): inforegulator.org.za. The regulator’s contact details and complaint procedures may change; please consult its official website for current information.

We may send relevant business communications where permitted by law. We will obtain consent where required and will provide a practical way to opt out of marketing messages. You can also request that we stop marketing to you by emailing info@nicheadvisory.co.za. An opt-out from marketing will not prevent service-related, transactional or legally required communications.

Our services and website are intended primarily for businesses and professional contacts, not children. We do not knowingly seek to collect children’s personal information through the website. If you believe a child has provided personal information to us inappropriately, please contact us so that we can assess the matter and take appropriate action.

Our website may contain links to third-party websites or services. Those parties operate under their own privacy policies and practices. We are not responsible for their content, security or handling of personal information. Please review their policies before providing information directly to them.

We may update this Privacy Policy from time to time to reflect changes in our practices, services, technology or legal requirements. The latest version will be published on this page with the updated date shown at the top. We encourage you to review it periodically.

For questions, concerns or requests relating to personal information, please contact:

Niche Advisory
Waterfall Estate, Gauteng, South Africa
Email: info@nicheadvisory.co.za

This policy is a general website privacy notice and should be reviewed against Niche Advisory’s actual data practices, service-provider arrangements and legal obligations before being relied on as a final compliance document.