1. Introduction
RM — Results Measured ("RM", "we", "our", or "us") respects your privacy and is committed to protecting personal information in accordance with the Protection of Personal Information Act, 2013 ("POPIA") and other applicable privacy legislation.
This Privacy Policy explains how RM collects, uses, stores, protects, and processes personal information through:
- the RM website (www.r-m.co.za);
- the free VACAG Self-Test;
- assessment bookings and delivery (Visibility Assessment, Accountability Assessment, Business Control Assessment);
- payment processing for booked assessments;
- and related communications.
By accessing the RM website or booking an assessment, you acknowledge this Privacy Policy and the lawful processing of personal information as described herein.
Forward note: RM does not currently operate a client login or account portal. Should RM introduce an authenticated client portal in future, this Privacy Policy will be updated to reflect account-based data processing (see Section 16), and renewed consent will be sought where legally required.
2. Responsible Party
For purposes of POPIA, the Responsible Party determining the purpose and means of processing personal information is:
RM — Results Measured
Operated by: Results Measured (Pty) Ltd
Registration Number: 2019/552604/07
Physical Address: 67 Zeekoeifontein, Vanderbijpark, 1911
Postal Address: PO Box 455, Park South, 1911
Phone: 062 185 8647
Email: info@r-m.co.za
3. Information Officer
RM's designated Information Officer is:
Manzel Oelofsen
The Information Officer may be contacted regarding privacy-related enquiries, data subject requests, withdrawal of consent, access requests, correction requests, deletion requests, or security concerns.
Email: info@r-m.co.za
Phone: 062 185 8647
Address: 67 Zeekoeifontein, Vanderbijpark, 1911
4. Information We Collect
4.1 Self-Test Submissions
- Name and email address (if provided at results stage)
- Responses to the 12 VACAG Self-Test questions (operational/business practice information — not personal in nature)
4.2 Assessment Bookings
- Full name
- Email address
- Phone number
- Business name
- Business information voluntarily disclosed during Facilitated or Consultant-Led sessions (financial, operational, or process information relevant to the engagement)
4.3 Payment Information
- Payments are processed through PayFast. RM does not collect or store card numbers, banking credentials, or payment card details on its own systems.
4.4 Technical Information
- IP address, browser/device information, and website usage logs, where analytics tools are implemented.
RM does not intentionally collect special personal information (health, biometric, religious, political, or similar categories under POPIA) through the website, Self-Test, or standard assessment process.
5. How We Use Information
Personal information may be used to:
- Deliver Self-Test results and a recommended next step;
- Process and deliver booked assessments;
- Process payment via PayFast;
- Communicate with you about your booking or engagement;
- Improve the Self-Test content, website, and service delivery;
- Meet legal, tax, and regulatory obligations.
6. Legal Basis for Processing
- Contractual necessity — processing required to deliver a booked assessment you have paid for.
- Consent — Self-Test submissions, optional marketing communications.
- Legitimate business interests — service improvement, security, operational analytics.
- Legal obligation — financial recordkeeping (SARS/tax requirements).
7. Confidentiality of Business Information Disclosed During Engagements
Where a client discloses business, financial, or operational information during a Facilitated or Consultant-Led assessment, RM treats this information as confidential and uses it solely for the purpose of delivering the engagement and the resulting deliverable. This information is not shared beyond RM's delivery team without the client's consent, except where legally required.
8. Minors
RM's services are directed at business owners and are not intended for use by minors. RM does not knowingly collect personal information from minors through the website or Self-Test.
9. Third-Party Service Providers
RM may utilise trusted third-party service providers for infrastructure and operational support, including:
- Vercel — website hosting;
- PayFast — payment processing;
- Afrihost mail hosting (mail.r-m.co.za) — transactional email notifications;
- analytics services, if and when implemented on the website.
Where third-party operators process information on RM's behalf, RM remains the Responsible Party for personal information processed through the website.
10. Payments
Payments are processed through PayFast. RM does not store credit card information, banking credentials, or payment card details on its systems. Payment processing is subject to PayFast's own privacy and security policies.
11. Cookies & Website Technologies
The RM website may use essential cookies and similar technologies for security, functionality, and (where implemented) analytics. Full detail is set out in the separate RM Cookie Policy.
12. Data Security
RM implements reasonable technical and organisational safeguards to protect information, including secure hosting infrastructure, access controls, and encrypted communications. While no system can guarantee absolute security, RM takes reasonable measures to protect information against unauthorised access, disclosure, alteration, loss, misuse, or destruction.
13. Data Retention
| Information Type | Retention Approach |
|---|---|
| Self-Test submissions (no booking made) | 12 months from submission, then deleted or anonymised unless a booking is made within that period |
| Client/booking records | Retained for the duration of the engagement plus applicable financial recordkeeping requirements (South African tax law generally requires 5 years) |
| Payment records | Retained as required by applicable law |
| Website/technical logs | Retained for security and operational purposes for a limited period |
Information no longer reasonably required may be deleted, anonymised, archived, or securely destroyed.
14. Cross-Border Processing
Certain infrastructure providers (e.g. Vercel, PayFast) may process or store information outside the Republic of South Africa. Where this occurs, RM takes reasonable steps to ensure such processing remains consistent with applicable privacy and data protection principles.
15. Marketing Communications
Where you provide your email address (via the Self-Test, a booking, or otherwise), RM may use it to send you occasional updates about RM's services, content, or relevant insights, unless you have opted out.
You may opt out of marketing communications at any time by using the unsubscribe link in any such communication, or by emailing the Information Officer. Please allow up to 21 days for an opt-out to take effect. Opting out of marketing does not affect transactional communications relating to a booking you've made (e.g. confirmations, delivery of your assessment).
16. Your Rights
Subject to applicable law, you may request:
- access to your personal information;
- correction of inaccurate information;
- deletion of information where legally permissible;
- objection to certain processing activities;
- withdrawal of consent, where processing is based on consent.
Withdrawal of consent does not affect processing already lawfully performed. To exercise any of these rights, contact the Information Officer using the details in Section 3.
RM will endeavour to respond to data subject requests within 30 days of receipt.
Formal requests for access to records held by RM (in terms of PAIA) can be made following the procedure set out in the RM PAIA Manual, available on request from the Information Officer.
17. Future Client Portal
RM currently operates a marketing and booking website without user accounts. Should RM introduce an authenticated client portal (for example, to allow clients to view assessment history, track action items, or manage bookings), this Privacy Policy will be updated to reflect:
- account credentials and authentication data;
- stored assessment records and history;
- any additional third-party infrastructure supporting the portal.
Material changes of this kind will be published on this page, and renewed acknowledgement will be sought where legally required.
18. Data Breaches
Should RM become aware of a data breach affecting personal information, reasonable steps will be taken to investigate, contain, and address the incident. Where required by law, affected parties and the Information Regulator will be notified as soon as reasonably possible.
19. Complaints
If you believe your personal information has been processed unlawfully, you may lodge a complaint with the Information Regulator of South Africa.
Information Regulator (South Africa)
Website: https://inforegulator.org.za/
Email: inforeg@justice.gov.za
20. Updates to this Privacy Policy
RM may update this Privacy Policy from time to time. The latest version will always be available on the RM website. Material changes may require renewed acknowledgement where required by law.
21. Governing Law
This Privacy Policy is governed by the laws of the Republic of South Africa, including the Protection of Personal Information Act, 2013 (POPIA).
22. Contact Information
RM — Results Measured
Results Measured (Pty) Ltd | Reg. No. 2019/552604/07
Information Officer: Manzel Oelofsen
Email: info@r-m.co.za
Phone: 062 185 8647
Physical Address: 67 Zeekoeifontein, Vanderbijpark, 1911
Postal Address: PO Box 455, Park South, 1911