Privacy and data protection.

Blumont Analytics is a VAT recovery firm with an office at 2nd Floor, Fairweather House, 176 Sir Lowry Road, Woodstock, Cape Town, and a partner in Ireland serving Ireland and the United Kingdom. Blumont is the responsible party under POPIA and the controller under the GDPR for the personal information described here.

Our Information Officer is Nick Griesel, head of Blumont. You can reach us about privacy at carl@blumontanalytics.com.

• When you enquire: your name, company, role, email address and anything you choose to tell us.
• When we carry out a review: the ledger and VAT return data your company provides, which may include names and contact details of your staff, customers and suppliers.
• When you visit this website: anonymous visit statistics. If you accept the cookie notice, we also use Google Analytics and Microsoft Clarity to understand how visitors use the site. We never use advertising cookies, and you can change your choice at any time with Cookie settings at the foot of every page.

We use enquiry details to reply to you and, if you go ahead, to arrange a review. We use client data only to carry out the review we were engaged for, under your non-disclosure agreement and your own data protection policies. We never sell personal information or use it for marketing without your consent.

Under the GDPR, we rely on taking steps towards or performing a contract with you, and on our legitimate interest in responding to business enquiries. Under POPIA, we process information lawfully, for a specific purpose, and only to the extent necessary.

Client documents are handled under controlled conditions, and one named analyst works with your data for the life of the review. Access is limited to the people who need it. We keep personal information only for as long as the review and our legal obligations require, and then delete or return it.

Only the service providers we need to run the business, under contract and with appropriate safeguards. This website is hosted on Cloudflare, which also provides our cookie-free visitor statistics. If you accept analytics cookies, Google and Microsoft process anonymised information about your visit on our behalf. Enquiries sent through the website form are delivered to our inbox by Web3Forms. Where information moves between South Africa, Ireland and the United Kingdom, we transfer it only with the protections POPIA and the GDPR require.

You can ask us what personal information we hold about you, and ask us to correct it, delete it, or stop using it. Under the GDPR you can also ask us to restrict how we use it or to give you a copy in a portable format.

If you are unhappy with how we have handled your information, please tell us first. You can also complain to the Information Regulator in South Africa, the Data Protection Commission in Ireland, or the Information Commissioner's Office in the United Kingdom.