About this policy
Who is responsible for your information?
InnoDynamiX (Pty) Ltd. is the responsible party for personal information processed through this website. In this policy, “InnoDynamiX”, “we”, “us” and “our” refer to InnoDynamiX (Pty) Ltd.
This policy applies to the InnoDynamiX website, its automated Briefing Assistant, executive briefing request forms, employee publishing workspace, connected social accounts and the optional Google Analytics service described below. It is intended to support transparent processing under South Africa’s Protection of Personal Information Act, 2013 (POPIA), and other applicable privacy laws.
Information categories
What information do we collect?
When you request an executive briefing, we collect your full name, work email address, organisation, role, selected briefing focus, the decision and timing context you provide, and your consent to be contacted. The full executive briefing form and Briefing Assistant also require your industry, country or territory, and contact number so the request can be routed and followed up with the right context. Please do not place unnecessary sensitive or confidential personal information in the decision-and-timing field.
The Briefing Assistant answers from a fixed, approved set of InnoDynamiX website information in your browser. Your questions and selections are held in the page's temporary memory for the current visit and are not sent to an external artificial-intelligence provider. If you choose to request a briefing, the Assistant shows you a concise briefing summary before submission. That summary, together with the contact details and consent you provide, becomes part of the briefing request. If you do not submit a request, the Assistant does not add your chat text to our lead records. Please do not enter unnecessary sensitive, confidential or third-party personal information in the Assistant.
We also create operational information needed to manage the request, including a unique lead reference, submission time, lead status, email notification status, provider message identifier and notification time. We may also store the audience pathway, executive application, industry or operating context, source page, action location, submission channel, campaign identifier and content-asset identifier associated with the request. These bounded attribution fields help us route and assess a lead; they do not replace the role and focus you select. Automated spam submissions that complete the hidden honeypot field are accepted without storing the submitted content.
Our hosting and security providers may process ordinary technical request information such as IP address, browser or device information, request time and security signals to deliver the site and prevent misuse. The InnoDynamiX briefing application does not add IP address, browser or device information to the briefing record.
To limit repeated submission attempts and help prevent abuse, the application temporarily keeps a one-way identifier derived from the connection address in protected rate-limit storage. Its active window expires after ten minutes and expired entries are removed during later form activity. It is not added to the briefing record or included in notification emails.
If you enable Google Analytics, we process website-usage information as described in “Analytics and cookies” below.
Employee workspace
Publishing accounts and social connections
The employee publishing workspace uses your name, work email address, password authentication information, invitation and verification records, role and access status to manage your account. Session and security records support sign-in and abuse prevention. We also retain articles, revisions, uploaded media, categories and records of publishing and administration actions. Published articles include the author name saved with that publication.
When you choose to connect LinkedIn or a Facebook Page, we receive the authorised profile or Page identifiers and names, the permissions granted and access credentials. During connection, we use the Pages you can manage to offer eligible publishing destinations. Saved access credentials and temporary Page-selection credentials are encrypted. Authors manage their own LinkedIn connection; administrators manage company Page connections.
When automatic sharing is configured and enabled, the first publication of an article sends its title, excerpt and website link to the connected author LinkedIn profile and company LinkedIn and Facebook Pages. We retain delivery status, timestamps, destination identifiers and any returned post identifier or link to show the publishing result and avoid duplicate posts. Later article edits do not create another social post. LinkedIn and Meta process the information they receive under their own terms and privacy policies.
You can disconnect a social account in the workspace. For what this removes, what remains and how to request further deletion, see our data deletion instructions.
Purpose and authority
How and why do we use personal information?
We use personal information to:
- record, assess and respond to an executive briefing request;
- answer questions about InnoDynamiX and help shape a relevant briefing request;
- contact you about the requested briefing and related next steps;
- route the request to authorised InnoDynamiX team members;
- maintain an operational record of the request and its status;
- manage employee accounts, secure access and account recovery;
- publish employee articles and share them through authorised social connections;
- record publishing history and social delivery results;
- secure the website, rate-limit repeated submissions and prevent automated form abuse;
- measure website use through Google Analytics, but only with consent;
- comply with legal obligations and establish or defend legal rights.
Where applicable law requires a legal basis, we rely on your consent for the briefing response and optional analytics; steps taken at your request and our legitimate interests in responding to genuine business enquiries, operating and securing the website, preventing spam and automated abuse, and keeping appropriate business records; and legal obligations where processing is required by law. You may withdraw consent, but withdrawal does not affect processing that was lawful before withdrawal.
Automated security controls may limit repeated attempts or quietly discard submissions that complete the hidden honeypot field. They are used only to protect the form from abuse, not to make legal or similarly significant decisions, or for marketing, employment, credit, financial-status or insurance decisions. We do not sell or rent personal information for behavioural advertising.
Optional measurement
Google Analytics and cookie choices
With your permission, this website uses Google Analytics 4 with measurement ID G-XW7S4SY5QF to understand visits, viewed pages, session activity, referring sources, approximate location, browser or device characteristics, and controlled Briefing Assistant interaction events such as opening the Assistant, viewing an approved answer topic, viewing or beginning a briefing form, and recording a successful or failed submission. Event properties are limited to page paths and approved non-identifying category selections, such as briefing focus, audience pathway, role, industry and operating context. We do not send question text, decision or timing narratives, chat summaries, names, email addresses, telephone numbers, organisation names, free-text form content or other direct identifiers to Google Analytics.
The Google tag is not added to the page and no analytics information is sent to Google by InnoDynamiX until you opt in. Google advertising signals and advertising personalisation are disabled. Google states that IP addresses are used at collection time and discarded before being logged or stored.
You can reject analytics on the first banner or withdraw consent later using the persistent “Cookie settings” button. Our Cookie Policy lists the cookies, purposes and lifetimes. You can also open Cookie settings now.
Cross-border safeguards
International processing
InnoDynamiX is based in South Africa, while some hosting, email and analytics providers operate infrastructure in multiple countries. Personal information may therefore be processed outside your country. Where required, we use contractual, organisational and legal safeguards intended to provide an appropriate level of protection for cross-border processing.
If you enable Google Analytics, Google may process analytics information internationally under its Privacy Policy. Google Analytics remains optional and is governed by the Analytics disclosures and your cookie choice.
Lifecycle and safeguards
How long do we keep information, and how is it protected?
Briefing records and related email copies are kept only for as long as reasonably necessary to respond, manage the prospective or active business relationship, maintain appropriate records, resolve disputes and meet legal obligations. There is no fixed automated expiry for a briefing record; retention is reviewed according to the request’s status and applicable legal or operational requirements. Information that is no longer required is deleted or anonymised where reasonably practicable.
Employee publishing records, social connection metadata, delivery receipts and audit history do not have a fixed automated deletion period. Disconnecting removes the saved access credential from the active connection record; profile or Page identifiers, names and publishing history remain. Access expiry or disabling employee access does not by itself delete those records. Deletion requests can be made using the instructions linked below.
A social connection request expires after 15 minutes. Successful Page selection clears its temporary credentials; expired requests and any remaining temporary credentials are removed when another connection request begins. This expiry does not promise deletion at exactly 15 minutes.
The cookie preference and consented Google Analytics cookies are limited to 180 days. Google Analytics user-level and event-level data follows the retention controls configured for the Analytics property; aggregate reporting may remain after user-level data expires.
We use reasonable technical and organisational measures intended to protect information against loss, unauthorised access, alteration and disclosure. These include encrypted network transport, access controls, input validation, limited authorised recipients and service-provider safeguards. No internet transmission or storage system is completely secure, so absolute security cannot be guaranteed.
Your control
Your privacy rights
Subject to applicable law and lawful exceptions, you may ask us to confirm whether we hold personal information about you, request access, correct or update inaccurate information, request deletion, object to or restrict certain processing, and withdraw consent. Where applicable, you may also request data portability and lodge a complaint with your local privacy regulator.
We may need to verify your identity and clarify the scope of a request before responding. Some information may need to be retained where the law requires it or where it is necessary to establish, exercise or defend legal rights.
To disconnect an account or request deletion of retained employee or social information, follow the data deletion instructions.
South African individuals may contact the Information Regulator South Africa if a privacy concern is not resolved.
Other considerations
Children and external websites
This is a business-to-business website intended for adult board, executive, audit, risk and governance audiences. It is not directed to children, and we do not knowingly request personal information from anyone under 18 through the briefing form.
The website contains links to social-media and other third-party sites. Those services operate under their own privacy terms after you leave the InnoDynamiX website. Ordinary outbound links do not place those services’ cookies through our pages.
Policy maintenance
Changes to this policy
We may update this policy when our website, business practices, service providers or legal obligations change. The current version will show its effective and updated dates above. Material changes to optional analytics or other consent-based processing will trigger a fresh choice where required.
Questions and requests
Contact InnoDynamiX
To ask a privacy question or exercise a privacy right, contact InnoDynamiX through the briefing form and identify the message as a privacy request, or call one of the South African numbers below.
This notice reflects the website’s current data flows and should be reviewed whenever providers, retention practices or uses of personal information change.