Privacy Policy

1. Who we are

Rivermark Advisory (Pty) Ltd ("Rivermark Advisory", "we", "us", "our") is the responsible party for the processing of personal information described in this policy, as defined under POPIA. Our registered office and contact details are set out below.

Legal entity	Rivermark Advisory (Pty) Ltd
Company type	(Pty) Ltd
Registration number	2016/348217/07
VAT ID	4720184639
Register court	CIPC Cape Town
Registered address	18 Kloof Street, Gardens, Cape Town, 8001, South Africa
Phone	+27 21 418 2937
Email	info@ostavio.pro

We have designated an Information Officer, reachable at info@ostavio.pro, who is responsible for ensuring compliance with POPIA and for handling requests relating to personal information.

2. Scope of this policy

This policy applies to personal information we collect through our website at ostavio.pro, through our contact and enquiry forms, by email, telephone, or in the course of providing tax strategy, retirement and trust, and wealth planning advisory services.

3. Personal information we collect

We collect only the personal information reasonably necessary for the purposes described in this policy, including:

• Identifying details you provide, such as name, company name and role;
• Contact details, including email address, telephone number and postal address;
• Information you submit through our contact and enquiry forms, including the content of your message;
• Financial and advisory information you voluntarily disclose to us in the course of engaging our services;
• Technical information collected automatically, such as IP address, browser type, device information and pages visited, gathered via cookies and similar technologies (see our Cookie Policy);
• Communication records, including correspondence and call notes, kept for service and compliance purposes.

4. How we use personal information

We process personal information for the following lawful purposes:

• To respond to enquiries submitted via our contact form or by email/telephone;
• To provide, administer and improve our tax strategy, retirement and trusts, and wealth planning advisory services;
• To comply with legal, regulatory, tax and CIPC obligations applicable to our business;
• To maintain the security, integrity and proper functioning of our website;
• To analyse website usage in aggregate, where analytics cookies have been consented to, in order to improve our content and services;
• To send service-related communications and, where consented to, occasional updates about our advisory services.

5. Legal basis for processing

We process personal information where it is necessary to conclude or perform a contract with you, where you have given consent (for example, to marketing cookies), where processing is necessary to comply with a legal obligation, or where processing is necessary for our legitimate business interests and does not unjustifiably infringe your privacy rights.

6. Contact form and enquiry data

When you submit our contact form, we collect the details you provide (name, email, phone, message content) solely to respond to your enquiry and, where applicable, to open a client engagement. This data is retained only for as long as necessary to fulfil that purpose and any applicable legal or regulatory retention requirement, after which it is securely deleted or anonymised.

7. Cookies and tracking

Our website uses essential, analytics and marketing cookies as described in detail in our Cookie Policy. You can manage your preferences at any time through the cookie consent tool presented on the site.

8. Hosting and data storage

Website data and form submissions are stored on infrastructure operated by reputable hosting providers, which may process data on our behalf as operators under POPIA. We take reasonable technical and organisational measures to ensure that any such operators provide an adequate level of protection consistent with POPIA requirements, including contractual safeguards where personal information is processed outside South Africa.

9. Disclosure of personal information

We do not sell personal information. We may share personal information with:

• Service providers who support our website, email and client administration systems, acting under contractual confidentiality obligations;
• Professional advisers (such as auditors or legal counsel) where necessary to deliver our services or comply with the law;
• Regulatory or governmental authorities, where required by law or a valid legal process.

10. Data retention

We retain personal information only for as long as necessary to fulfil the purposes described in this policy, including any legal, accounting, tax or regulatory retention requirements applicable to advisory service providers registered in South Africa. Where retention is no longer necessary, information is securely deleted or anonymised.

11. Security measures

We implement appropriate technical and organisational measures — including access controls, encryption in transit, and secure hosting environments — to protect personal information against loss, unauthorised access, alteration or disclosure, in line with our obligations under POPIA.

12. Your rights under POPIA

As a data subject, you have the right to:

• Be notified that personal information about you is being collected;
• Access the personal information we hold about you;
• Request correction, updating or deletion of inaccurate, irrelevant, excessive or unlawfully obtained personal information;
• Object to the processing of your personal information, including for direct marketing purposes;
• Withdraw consent, where processing is based on consent, at any time;
• Lodge a complaint with the Information Regulator of South Africa if you believe your rights under POPIA have been infringed.

To exercise any of these rights, please contact our Information Officer at info@ostavio.pro or +27 21 418 2937.

13. Information Regulator contact

Should you wish to lodge a complaint regarding our processing of personal information, you may contact the Information Regulator of South Africa, the statutory body responsible for enforcing POPIA compliance nationally.

14. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices, services or legal obligations. The updated version will be published on this page with a revised effective date.

15. Contact us

For any questions regarding this Privacy Policy or our data protection practices, please contact Rivermark Advisory (Pty) Ltd at 18 Kloof Street, Gardens, Cape Town, 8001, South Africa, by phone at +27 21 418 2937, or by email at info@ostavio.pro.