Privacy policy

Last updated 18 October 2026

This policy explains how Xisana Consulting (Pty) Ltd, “we”, handles personal information through this website and when you contact us. We process personal information in line with the Protection of Personal Information Act, 4 of 2013 (POPIA).

Who is responsible

Xisana Consulting (Pty) Ltd is the responsible party. Our Information Officer is Nsovo Ngobeni, reachable at nsovo@xisanait.co.za or +27 72 417 9969, and at our office in Centurion, 0157.

What we collect

This website has no forms, accounts, analytics or advertising trackers, and it sets no cookies of its own. We collect personal information only when you choose to contact us:

Like any website, the server that hosts it may record standard technical information about visits, such as IP address, browser type and the pages requested, in its access logs. These are used only to keep the site secure and working.

Why we use it

We do not sell personal information, and we do not use it for marketing you have not asked for.

Who we share it with

We share personal information only where needed for the purposes above: with service providers who host our email and systems, with professional advisers, or where the law requires it. Anyone who processes information for us is bound to keep it confidential and secure.

This site loads its typefaces from Google Fonts, so your browser connects to Google's servers when you open a page. Google's handling of that request is covered by Google's privacy policy.

Our products and apps

We build and operate the KhulaWorx platform and its mobile app for business customers. Personal information processed inside KhulaWorx is handled under the agreement with the business that uses it and the KhulaWorx privacy terms, with production data hosted and processed in South Africa. Questions about that processing can be sent to the Information Officer above.

How long we keep it

We keep enquiry correspondence for as long as it is useful for the relationship, and records connected to contracts and invoices for as long as South African law requires. After that it is deleted or de-identified.

How we protect it

We apply reasonable technical and organisational measures to protect personal information against loss, misuse and unauthorised access, including access controls, encryption where appropriate, and confidentiality obligations on our people.

Your rights

Under POPIA you may ask us to:

Send requests to the Information Officer. If you are not satisfied with our response, you may complain to the Information Regulator (South Africa) at inforegulator.org.za.

Changes to this policy

We will update this page when our practices change, and the date at the top will show when it last changed.