Kanton-West mark
KANTON-WEST
POPIA and GDPR

Privacy Policy

How SATalent1st (Pty) Ltd, operating the Kanton-West brand, collects, uses, stores, shares and protects personal information.

Version
1.0
Last updated
11 July 2026
Legal entity
SATalent1st (Pty) Ltd
Trading brand
Kanton-West
Registration
2025/936338/07
Information Officer
Fransua van der Westhuizen
IO registration
2026-000484 (Information Regulator of South Africa)
Directors
F van der Westhuizen, M Kuhn, C Tredoux
Framework
POPIA (Act 4 of 2013) and GDPR (EU) 2016/679
Compliance
Compliance@SATalent1st.com

1Introduction

SATalent1st (Pty) Ltd ("SATalent1st", "we", "us", or "our"), operating the Kanton-West brand, respects your right to privacy and is committed to protecting your personal information in accordance with the Protection of Personal Information Act, 2013 ("POPIA") and, where applicable, the General Data Protection Regulation (EU) 2016/679 ("GDPR").

This Privacy Policy explains how we collect, use, store, share and protect personal information in the course of providing CFO advisory, finance hiring and private AI services under the Kanton-West brand.

2Responsible Party

3Definitions

"Personal Information" means information relating to an identifiable, living natural person and, where applicable, an identifiable, existing juristic person, as defined in POPIA.

"Special Personal Information" means personal information concerning a person's health, criminal behaviour, biometric data and similar categories to which POPIA affords additional protection.

"Processing" means any operation performed on personal information, including collection, storage, use, sharing and deletion.

"Responsible Party" (the "Controller" under GDPR) means the party that determines the purpose of and means for processing personal information, being SATalent1st.

"Operator" (the "Processor" under GDPR) means a party that processes personal information on behalf of the Responsible Party.

"Data Subject" means the person to whom the personal information relates.

4Purpose of Processing

We collect and process personal information strictly for the following purposes:

5Information We Collect

We may collect the following categories of personal information:

5.1 Basic Information

5.2 Enquiry Information

5.3 Recruitment Information (finance hiring)

5.4 Special Personal Information (only where necessary)

Special personal information is processed only where required by law or by the nature of a finance placement, for example criminal or credit background clearances for a role involving financial control, and only with your explicit consent.

6Lawful Basis for Processing

We process personal information on one or more of the following lawful bases:

Where processing is based on consent, you may withdraw that consent at any time by contacting Compliance@SATalent1st.com. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

7Sharing of Information

Your personal information may be shared with the following categories of recipients, and only to the extent necessary for the service:

We do not sell, rent or trade personal information. Your information is never used for marketing, analytics or any purpose other than providing our services.

8Website Enquiries and Form Processing

Enquiries submitted through our website are transmitted by a third-party form-delivery service (Web3Forms) for the sole purpose of delivering your message to us. The website itself does not store your enquiry. We use the details you provide only to respond to your enquiry and, if you engage us, to provide the service requested.

9Direct Marketing

We do not send unsolicited electronic direct marketing. Where we communicate with you, it is for the purpose of the service or in response to your enquiry. In accordance with POPIA section 69, any electronic marketing would be sent only with your consent or as otherwise permitted by law, and you may opt out at any time by contacting Compliance@SATalent1st.com.

10Cross-Border Transfers

Where a finance hiring or advisory engagement involves parties outside South Africa, your personal information may be transferred to, and processed in, countries outside South Africa in order to facilitate the service. Where such transfers occur:

Where personal information is transferred to a country that does not provide an adequate level of data protection, we ensure that appropriate contractual or other safeguards are in place to protect your information, in accordance with POPIA section 72.

11Data Security

We implement appropriate technical and organisational measures to protect personal information against unauthorised access, loss, destruction or damage.

Security measures are reviewed regularly and updated as necessary to address emerging threats and vulnerabilities.

12Data Retention

We retain personal information only for as long as is necessary to fulfil the purposes for which it was collected, or as required by law.

You may request deletion of your personal information at any time by contacting Compliance@SATalent1st.com. We will action your request unless we are required by law to retain the information.

13Automated Decision-Making and Profiling

Where we source finance candidates, we may match skills, qualifications and availability to suitable roles. We do not make decisions that produce legal effects concerning you, or similarly significantly affect you, based solely on automated processing. Shortlisting and placement decisions are reviewed personally by a qualified member of our team.

You have the right to request human intervention, to express your point of view, and to contest any such decision, in accordance with POPIA section 71 and, where applicable, GDPR Article 22.

14Your Rights

Under POPIA, and where applicable the GDPR, you have the following rights in relation to your personal information:

To exercise any of these rights, please contact Compliance@SATalent1st.com. We will respond to your request within the timeframes required by applicable law (generally within 30 days under POPIA, or one month under GDPR).

15Children's Data

Our services are directed at businesses and professionals and are not intended for children. We do not knowingly collect or process the personal information of children (persons under 18) without the consent of a competent person, as required by POPIA section 34. If you believe we have inadvertently collected such information, please contact Compliance@SATalent1st.com and we will delete it.

16Data Breaches

In the event of a personal data breach that poses a risk to the rights and freedoms of data subjects, we will:

All suspected or actual data breaches are investigated under our internal Data Breach Protocol and recorded for audit purposes.

17Third-Party Processing: Hired1st Platform

Where finance hiring involves candidate information, SATalent1st utilises the Hired1st recruitment platform (operated by PowerHouse Hub) to securely manage that information.

17.1 Roles and Responsibilities

All personal data processed on the platform remains the property of SATalent1st and/or the relevant data subject. Hired1st does not use personal data for analytics, marketing or any purpose other than providing the recruitment platform service.

17.2 Data Processing Standards

17.3 Security Controls

Access by Hired1st personnel occurs only where necessary (for example, support or troubleshooting) and is subject to strict authorisation and logging controls.

17.4 Candidate Privacy Controls

17.5 Retention and Deletion

Data processed via the Hired1st platform is retained for the duration of the active service relationship unless deletion is requested. Upon termination of the service agreement, data is securely deleted in accordance with Hired1st's data retention and termination policy, unless otherwise instructed by SATalent1st.

18Website and Cookies

Our website does not set cookies for analytics, marketing, advertising or profiling, and uses no third-party tracking technologies. Any cookies used are strictly essential to the operation and security of the site.

19Access to Information (PAIA)

Your right of access to records held by SATalent1st is governed by the Promotion of Access to Information Act, 2000 (PAIA). Our PAIA manual sets out the procedure for requesting access to information and is available on request from Compliance@SATalent1st.com.

20Updates to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology or legal requirements. The most recent version will always be published on our website. We encourage you to review this policy periodically. Where material changes are made that affect how we process your personal information, we will take reasonable steps to notify you.

21Governing Law

This Privacy Policy and any processing of personal information described in it are governed by the laws of the Republic of South Africa, including POPIA and PAIA. Where we process the personal information of data subjects in the European Union, the GDPR applies to that processing.

22Contact and Complaints

For any questions regarding this Privacy Policy, your personal information, or to exercise any of your rights, please contact:

If you are not satisfied with our response, you have the right to lodge a complaint with the Information Regulator of South Africa (inforegulator.org.za) or, for EU data subjects, the supervisory authority in your member state of residence.