Care for sensitive records

Privacy notice

How Buildgridbase collects, protects, retains and deletes personal information during bursary supporting-record audits.

Effective 15 August 2026

Responsible party

Buildgridbase, at Level 8, 29 Rivonia Road, Sandton, Johannesburg 2196, is the responsible party for personal information processed for enquiries and audits. Contact info@buildgridbase.digital with privacy questions.

Information and purpose

We collect enquiry details, contact information, service instructions, payment records and only the supporting-record copies agreed for an audit. We use them to quote, contract, perform the review, communicate, meet tax or legal duties, protect the service and resolve complaints. Our grounds include contract performance, legal obligation, consent where required and legitimate operational interests balanced against your rights.

Sharing and security

Access is limited to personnel and service providers who need it for secure storage, communications, accounting or professional advice. Providers are contractually restricted. We do not sell personal information. We use access controls, limited collection and deletion practices, but no transmission method is risk-free.

Retention

Unaccepted enquiry details are normally deleted after 12 months. Working supporting-record copies are normally deleted within 30 days after the completed engagement unless the estimate states a shorter period or law requires retention. Contracts, invoices and necessary dispute records may be retained for legally required periods.

International transfers

Where a contracted service stores information outside South Africa, we use a lawful safeguard under the Protection of Personal Information Act, including an agreement requiring comparable protection. Ask us for relevant transfer information.

Your rights

Subject to law, you may request access, correction or deletion; object to certain processing; withdraw consent; and complain to South Africa’s Information Regulator. We may need to verify your identity without collecting more information than necessary.

Minors and third-party records

A parent, guardian or authorised support body should arrange services involving a minor. Applicants sharing household-member records must have an appropriate basis to do so and should provide only what the fund requires.

See our cookie notice for browser storage details.