Legal
Privacy Notice
1. Who we are
This notice is issued by VidaLufuno (Pty) Ltd, a private company registered in the Republic of South Africa under registration number 2023/682387/07, trading as Ventura Investment & Development Associates ("Ventura", "we", "us", "our").
We are the responsible party (under the Protection of Personal Information Act, 2013, "POPIA") and, where the EU or UK General Data Protection Regulation applies, the controller of the personal information described in this notice.
Our details
- Registered name
- VidaLufuno (Pty) Ltd
- Registration number
- 2023/682387/07
- Trading as
- Ventura Investment & Development Associates
- Postal address
- Postnet Suite 019, Private Bag X16, Craighall, Johannesburg, 2024, South Africa
- Ventura@Vidalufuno.com
- Telephone
- +44 7723 004987
- Information Officer
- Junior Lufuno Raophala
Registered with the Information Regulator on 11 July 2026 · Registration No. 2026-061834
2. What personal information we collect
We collect only what you give us directly. We do not buy data, and we do not collect information about you from third parties.
Through our enquiry form
- Your name (required)
- Your email address (required)
- Your organisation (optional)
- Your area of interest (a selection you make)
- The message you write us (optional)
- Documents you choose to upload, for example a company profile, business plan or pitch deck
Automatically
Our website does not use cookies, analytics, advertising trackers, embedded fonts from third parties, or any similar technology. Nothing is stored on your device by us.
Our hosting provider records standard server logs (including IP addresses) for security and to deliver the site. This is a normal and necessary function of serving a website.
3. Why we collect it, and our lawful basis
| What we do | Why | Lawful basis |
|---|---|---|
| Read and assess your enquiry | To understand what you are proposing | Your consent (POPIA s11(1)(a)); and steps taken at your request prior to entering a contract (GDPR Art. 6(1)(b)) |
| Contact you to respond or arrange a meeting | Because that is what you asked us to do | Your consent; performance of pre-contractual steps |
| Keep a record of the enquiry | To manage our business and meet legal obligations | Our legitimate interests (POPIA s11(1)(f); GDPR Art. 6(1)(f)) |
We do not use your information for direct marketing, we do not sell it, and we do not use it for automated decision-making or profiling.
Providing your name and email is necessary for us to reply. Everything else is optional. If you do not wish to use the form, you may simply email us instead.
5. Transfers outside South Africa
Our website is hosted on servers, and our email is delivered through infrastructure, that may be located outside the Republic of South Africa. This means your personal information may be transferred across borders.
Under POPIA section 72, we may do this because:
- you consent to the transfer when you submit the form; and
- the transfer is necessary to perform the steps you asked us to take (responding to your enquiry); and
- the recipients are bound by contractual terms that uphold principles substantially similar to POPIA's conditions for lawful processing.
Where information is transferred out of the EU or UK, our providers rely on the European Commission's Standard Contractual Clauses or an equivalent safeguard. Netlify's transfers are covered by its Data Processing Addendum, which incorporates the SCCs.
6. How long we keep it
| Information | Retention |
|---|---|
| Enquiries that do not lead to a relationship | 12 months from your last contact with us, then deleted |
| Uploaded documents (profiles, plans, decks) | 12 months, then deleted, unless you ask us to delete them sooner |
| Enquiries that lead to a business relationship | For the duration of the relationship, and for 5 years thereafter (as generally required by South African company and tax law), unless a longer period is required by specific legislation. |
You can ask us to delete your information at any time (see section 8).
7. How we protect it
We take reasonable technical and organisational measures to safeguard your information, including:
- serving this website only over an encrypted HTTPS connection;
- transmitting form submissions and uploads over encrypted channels;
- limiting access to enquiry data to the people who need it to respond to you;
- using reputable service providers who maintain recognised security standards.
No method of transmission over the internet is completely secure. If we become aware of a compromise of your personal information, we will notify you and the Information Regulator as required by POPIA section 22.
8. Your rights
Subject to the conditions in the applicable law, you have the right to:
- Be told whether we hold personal information about you, and to access it;
- Correct information that is inaccurate, irrelevant, excessive, out of date, incomplete, misleading or unlawfully obtained;
- Delete or destroy your information;
- Object to our processing on reasonable grounds;
- Withdraw your consent at any time (this does not affect processing carried out before you withdrew it);
- Restrict processing, and to data portability, where the GDPR applies;
- Complain to a supervisory authority (see section 10).
To exercise any of these rights, email Ventura@Vidalufuno.com. We will respond within a reasonable period, and in any event within the time limits set by the applicable law. We may ask you to verify your identity first. Exercising your rights is free of charge, unless a request is manifestly unfounded or excessive.
You may also make a formal request for access to records under the Promotion of Access to Information Act, 2000 (see our PAIA Manual).
10. How to complain
If you are unhappy with how we have handled your personal information, please contact us first at Ventura@Vidalufuno.com so we can try to put it right.
You also have the right to complain directly to a regulator.
Information Regulator (South Africa)
- Address
- JD House, 27 Stiemens Street, Braamfontein, Johannesburg, 2001
- Complaints
- complaints.IR@inforegulator.org.za
- Website
- inforegulator.org.za
If you are in the EU or the UK, you may instead complain to your local data protection authority, or to the UK Information Commissioner's Office (ico.org.uk).
11. Changes to this notice
We review this notice at least once a year, and whenever our data practices change. The version number and date at the top of this page tell you when it was last updated. Material changes will be brought to your attention.