Privacy notice

Effective 15 August 2026

Responsible party

Buildpilotgrid is the responsible party for personal information handled through this website and our review engagements. Contact info@buildpilotgrid.digital or write to Level 9, 48 Oxford Road, Rosebank, Johannesburg 2196 with a privacy request.

Information we collect

An enquiry may include your name, contact details, selected review, application stage and message. If you become a client, we may process engagement records and financial information relevant to the agreed review, such as sources of funds, assets, liabilities, cost schedules and finance correspondence. We ask clients not to provide unnecessary identity numbers, unrelated transactions or special personal information.

Technical records may include IP address, browser type, requested pages and security logs. Cookie choices are described in our cookie notice.

Purposes and lawful grounds

We use information to answer enquiries, assess suitability, deliver an agreed review, issue invoices, protect confidential files, meet tax and legal duties, handle complaints and improve the clarity of our service. Processing is based on consent where appropriate, steps requested before contract, performance of a contract, legal obligations and legitimate interests that do not unjustifiably override your rights.

We do not sell personal information or use financial review documents for advertising.

Information may be handled by contracted providers supporting secure file transfer, email, hosting, accounting and professional advice. Providers receive only what is needed and must protect it. Some infrastructure may process data outside South Africa. Where an international transfer occurs, we use contractual and organisational safeguards intended to provide an adequate level of protection under the Protection of Personal Information Act.

We may disclose information where law requires it, to establish or defend legal rights, or with your instruction.

Retention and security

Unsuccessful general enquiries are normally deleted after 12 months. Client engagement files are generally retained for five years after completion, unless law, a dispute or the engagement terms justify another period. Backup copies expire on controlled cycles.

We use access restrictions, secure transfer channels, multi-factor authentication where available and documented deletion practices. No internet transmission is risk-free; contact us before sending sensitive records so that we can provide the appropriate channel.

Your rights

Subject to applicable law, you may ask whether we hold your information, request access or correction, object to certain processing, withdraw consent, request deletion where retention is not required, or complain about our handling. We may need to verify identity without collecting more information than reasonably necessary.

You may also lodge a complaint with the Information Regulator of South Africa. We aim to acknowledge a privacy request within three business days and respond within a reasonable statutory period.

Changes