Privacy Policy

Product Forge SA (“we”, “us”, “our”) is a South African B2B product management and operations consultancy. Our registered place of business is in South Africa.

For questions about this policy or how we handle your data, contact us at info@productforge.co.za.

We collect information you provide directly to us, including:

• Contact form submissions — your name, work email address, company name, role, team size, and the details of your enquiry.
• Email correspondence — messages you send to us directly.
• Booking and scheduling information — if you schedule a call or meeting with us.

We also collect limited technical information automatically when you visit our website:

• Usage data — pages visited, time spent, referral source, and general interaction patterns (via Google Analytics, subject to your cookie consent).
• Device and browser data — browser type, operating system, and screen resolution.
• IP address — for security and spam prevention purposes.

We use the information we collect to:

• Respond to your enquiries and provide the services you request.
• Schedule and manage consultations or engagements.
• Send you information relevant to your enquiry or our services (we do not send unsolicited marketing).
• Improve our website, content, and service offering.
• Comply with applicable legal obligations.
• Detect and prevent fraud or misuse of our website.

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

We process your personal information on the following lawful bases:

• Legitimate interests — responding to business enquiries and improving our services.
• Consent — for analytics cookies and any optional communications you opt into.
• Contract — where processing is necessary to deliver services you have engaged us for.
• Legal obligation — where we are required by law to retain or process information.

Our website uses cookies to improve your experience and understand how visitors use the site. We use Google Analytics to collect aggregated, anonymised usage data.

When you first visit our site, you will be asked to consent to non-essential cookies. You can withdraw your consent at any time by clearing your browser cookies or using the cookie settings available on the site.

Essential cookies (required for the site to function correctly) are set without consent. These do not collect personal data.

We may share your information with trusted third-party service providers who assist us in operating our website and delivering our services, including:

• Email delivery providers — for sending and receiving email correspondence.
• Google Analytics — for website usage analytics (subject to your cookie consent).
• Scheduling tools — if you use a booking link to arrange a call.

These providers are contractually bound to handle your data securely and only for the purposes we specify. We do not allow them to use your data for their own purposes.

We may also disclose your information if required to do so by law or in response to a valid legal request from a public authority.

We retain your personal information only for as long as necessary to fulfil the purposes outlined in this policy, or as required by law.

• Enquiry and contact data — retained for up to 3 years from the date of last contact, unless an ongoing engagement requires longer retention.
• Client engagement data — retained for the duration of the engagement and up to 5 years thereafter for record-keeping purposes.
• Analytics data — retained in anonymised, aggregated form.

Under the Protection of Personal Information Act (POPIA) and, where applicable, the General Data Protection Regulation (GDPR), you have the following rights:

• Right to access — request a copy of the personal information we hold about you.
• Right to correction — request that inaccurate or incomplete information be corrected.
• Right to deletion — request that we delete your personal information, subject to legal retention requirements.
• Right to object — object to the processing of your information for certain purposes.
• Right to restrict processing — request that we limit how we use your information.
• Right to data portability — request your data in a structured, machine-readable format.
• Right to withdraw consent — where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, email us at info@productforge.co.za. We will respond within 30 days.

We take reasonable technical and organisational measures to protect your personal information from unauthorised access, loss, or misuse. These include encrypted data transmission (HTTPS), access controls, and spam and bot protection on our contact forms.

No method of transmission over the internet is completely secure. While we strive to protect your information, we cannot guarantee absolute security.

Our website may contain links to third-party websites. This privacy policy applies only to our website. We are not responsible for the privacy practices of external sites and encourage you to review their policies before submitting any personal information.

Our services are directed exclusively at businesses and professionals. We do not knowingly collect personal information from anyone under the age of 18. If you believe we have inadvertently collected such information, please contact us and we will delete it promptly.

We may update this Privacy Policy from time to time. When we do, we will revise the “last updated” date at the top of this page. If changes are material, we will take reasonable steps to notify you. Continued use of our website after changes are posted constitutes your acceptance of the updated policy.

If you have any questions, concerns, or complaints about this Privacy Policy or how we handle your personal information, please contact us: