Privacy Policy

Effective Date: 30 August 2025
BidWise Consulting SA ("we", "us", "our") respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you engage with our services, visit our website, or communicate with us.

1. Introduction

BidWise Consulting SA, a division of Voodoo Media LLC, is committed to safeguarding your personal information in compliance with the Protection of Personal Information Act (POPIA) in South Africa, the General Data Protection Regulation (GDPR) in the European Union/EEA, and applicable U.S. privacy laws.

2. Information We Collect

We may collect the following types of personal information:

• Name, email address, phone number

• Company name, registration number, and tax information (including VAT numbers provided during payment via our Stripe Payment Links or Checkout process)

• Tender documents or supporting materials you provide

• Any correspondence with us via email, phone, or our website
  

3. How We Use Your Information

We use the information to:

• Deliver and manage consulting services

• Communicate with you about your projects or enquiries

• Comply with regulatory obligations, including South African Revenue Service (SARS) and U.S. Internal Revenue Service (IRS) requirements for VAT exemption and tax reporting

• Improve our services and maintain records

• Log financial transactions (e.g., invoices, payments, VAT data) for compliance and dispute resolution
  

4. Sharing of Information

We do not sell or rent your information. We may share data with:

• Associates or consultants (e.g., independent contractors assisting in service delivery)

• Legal or regulatory authorities, if required by law

• Service providers who help us operate (e.g., cloud storage, email, and Stripe, Inc. for payment processing)

Data shared with independent contractors or service providers is governed by confidentiality agreements and used only for the purposes outlined.

5. Data Storage and Security

Your data is stored securely using password-protected systems and cloud storage. We take reasonable steps to protect personal information from misuse, loss, or unauthorized access. In the event of a data breach, we will notify affected individuals and relevant authorities as required by POPIA, GDPR, or U.S. laws within a reasonable timeframe.

6. Your Rights (POPIA, GDPR & Applicable U.S. Privacy Laws)

Depending on your location and applicable data laws, you may have the following rights:

Under POPIA (South Africa):

• To access, correct, or delete your personal information

• To object to the processing of your data

• To lodge a complaint with the Information Regulator

Under GDPR (European Union/EEA):

• To access and obtain a copy of your personal data

• To rectify inaccurate or incomplete data

• To request erasure of your data ("right to be forgotten")

• To restrict or object to processing

• To data portability (receive your data in a usable format)

• To withdraw consent at any time, where processing is based on consent

• To lodge a complaint with your local Data Protection Authority

Under U.S. Privacy Laws (Wyoming and other states):

• While Wyoming does not currently enforce comprehensive consumer data privacy laws, we follow industry best practices to protect personal information. If we engage with residents of states with specific privacy laws (e.g., California), we will respond to relevant rights requests as required by those jurisdictions.
  

We do not sell personal data, and we apply reasonable safeguards consistent with U.S. data privacy expectations.

7. International Transfers

As we operate under a U.S.-based LLC, your data may be processed or stored outside South Africa, including in the United States. We ensure appropriate safeguards are in place for international transfers, such as standard contractual clauses, to comply with POPIA and GDPR.

8. Data Retention

We retain your personal information, including VAT numbers and transaction data, for a minimum of 5 years to comply with SARS and IRS audit requirements, unless a shorter period is requested and agreed upon, or as required by law. After this period, data will be securely deleted or anonymized.

9. Contact Us

If you have any questions about this policy or want to exercise your rights, contact:

• Client Support

• Email: Click

• BidWise Consulting SA (a division of Voodoo Media LLC)