WHO IS RESPONSIBLE FOR THIS WEBSITE

For purposes of this website, Exposé, operated by Jan Venter, is the responsible party for personal information processed through expose.org.za, except where a third-party service provider acts as an independent responsible party under its own privacy terms.

Privacy, POPIA and personal-information requests may be sent to information@expose.org.za.

PERSONAL INFORMATION WE MAY COLLECT

WHY WE PROCESS PERSONAL INFORMATION

LAWFUL BASIS AND PROCESSING PRINCIPLES

Depending on the circumstances, personal information may be processed with consent, because it is necessary to respond to your request or take steps connected with a potential agreement, because a legal obligation applies, or because processing is necessary for a legitimate interest recognised by applicable law and does not unjustifiably prejudice your rights.

Where consent is the basis for processing, you may withdraw that consent, subject to processing that has already lawfully taken place and any lawful reason to retain particular records.

COOKIES, ANALYTICS AND SIMILAR TECHNOLOGIES

The website may use cookies, local storage and similar technologies. Some are necessary for core website functions, security, consent management and account functionality. Others may support analytics, performance measurement, translation or other optional functionality.

• Necessary cookies: used for security, basic WordPress functionality, consent preferences and essential site operation.
• Analytics cookies: may be used to understand aggregate website usage and performance, including through Google analytics-related services where enabled.
• Functional cookies: may support features such as language translation, account functionality or user preferences.

Where consent is required for non-essential cookies, the site’s cookie-consent controls are intended to provide that choice. You may also restrict or delete cookies through your browser, although doing so may affect some site functions. More detail is available in the Cookie Policy.

THIRD-PARTY SERVICES

The website relies on third-party technology and service providers to operate effectively. Depending on the feature being used, these may include website hosting and infrastructure providers, WordPress-related services, security and anti-spam tools, email services, analytics providers, translation tools, social platforms and professional service providers.

Google services may process technical and analytics information where those services are enabled. Links to Facebook or other external websites take you to services controlled by those providers, whose own privacy terms apply.

We do not authorise service providers to use personal information for unrelated purposes merely because they provide a technical service to this website.

DISCLOSURE OF PERSONAL INFORMATION

Personal information may be disclosed only where reasonably necessary, including:

• to service providers that host, secure, maintain, analyse or support the website and communications;
• to professional advisers, publishers, agents, editors, producers or other parties where you have contacted us for a purpose that reasonably requires such engagement;
• where required by law, court order, lawful regulatory process or a competent authority;
• where reasonably necessary to establish, exercise or defend legal rights, protect safety or investigate misuse or security incidents; or
• with your consent or at your direction.

INTERNATIONAL PROCESSING AND TRANSFERS

Some website infrastructure, analytics, email, cloud or professional services may process information outside South Africa. Where personal information is transferred internationally, we aim to do so only where the transfer is lawful and appropriate safeguards or other permitted grounds apply.

RETENTION

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected, for legitimate record-preservation and security purposes, or for a longer period where law, litigation, professional obligations or the protection of legal rights requires it.

Different records may therefore have different retention periods. A professional rights enquiry may need to be retained longer than routine technical logs, particularly where an ongoing publishing, documentary, contractual, editorial or legal relationship exists.

SECURITY

We use reasonable technical and organisational measures intended to protect personal information from loss, misuse, unauthorised access, alteration or disclosure. These measures may include access controls, security software, hosting protections, backups and restrictions on access to sensitive material.

No internet service can guarantee absolute security. Where a security compromise involving personal information triggers a legal notification duty, the matter will be handled in accordance with applicable law.

YOUR PRIVACY RIGHTS

Subject to applicable law and any lawful limitation or exception, you may ask us to:

• confirm whether we hold personal information about you;
• provide access to personal information held about you;
• correct or update information that is inaccurate or incomplete;
• delete or restrict information where the law permits or requires this;
• object to particular processing in circumstances recognised by law;
• withdraw consent where processing depends on consent; and
• stop direct marketing or other communications where you have a right to opt out.

Requests may be sent to information@expose.org.za. We may need to verify your identity before disclosing, correcting or deleting personal information.

DIRECT MARKETING

We do not treat a general enquiry as permission for unrelated unsolicited marketing. Where electronic direct marketing is undertaken, consent or another lawful basis will be used as required, and recipients will be given an appropriate way to opt out.

CHILDREN

This website is not directed at children and we do not knowingly seek personal information from children through the public contact channels. If you believe a child has provided personal information improperly, please contact us so that the matter can be assessed and handled appropriately.

THE BOOKS, ARCHIVE AND PUBLIC-INTEREST MATERIAL

This Privacy Policy principally addresses personal information collected from visitors and people who contact the website. Exposé is also the public and professional platform for three completed nonfiction books by Jan Venter — INSIDER ACCOUNT, SO I WROTE AGAIN and THEY HAD THE FILE — together with a controlled documentary archive and related public-record material.

Historical, documentary, literary, legal and public-record material is not treated as ordinary website-marketing data. Its preservation, review, publication or disclosure is assessed separately with regard to applicable law, confidentiality, privacy, source protection, evidentiary integrity, public-interest considerations and any applicable court orders.

Nothing in this Privacy Policy is intended to waive lawful rights of privacy, freedom of expression, access to information, legal privilege, source protection or any other right or obligation recognised by law.

COMPLAINTS

If you have a privacy concern, we ask that you first contact us at information@expose.org.za so that the issue can be assessed.

You also have the right, where applicable, to lodge a complaint with the Information Regulator (South Africa).

CHANGES TO THIS POLICY

This policy may be updated when website functionality, service providers, legal requirements or processing practices change. The effective date at the top of the page will be updated when a material revision is made.