ChiefAIOfficer™
Home

Privacy & POPIA

How we handle your data.

ChiefAIOfficer™ is built in South Africa, runs a national research benchmark, and is held to the Protection of Personal Information Act (POPIA). This page is the plain version of how we collect, process, and protect your data. It's deliberately short. If something here is unclear, email us and we'll explain it properly.

POPIA-alignedHosted in South AfricaAnonymised for the benchmark

What we collect.

When you take the Diagnostic, the Full Diagnostic, or apply to the Programme, we collect: your business name, your role, the answers you submit, and your email if you provide it. Firmographics (industry, size, province, years trading) feed the cohort cuts in the national benchmark.

We do not collect financial data, identity numbers, health information, or any other special-category personal information.

How we use it.

Your individual responses produce your individual report. Anonymised and aggregated, your responses also contribute to the State of AI in South African Business benchmark — the rolling-window national research engine. No individual respondent is ever identified in any published statistic.

We use your email only for the report, the guided session, and (if you opt in) the monthly research pulse. We do not sell, rent, or share your data with third parties beyond the platform providers required to run the service (hosting, database, email).

How we protect it.

Data is stored securely with strict access controls; respondents cannot see each other's answers. Access for ChiefAIOfficer™ staff is limited to what's needed to run the engagement. The platform is audit-trail-friendly and reviewed before each public release.

Your rights.

Under POPIA you can ask for: access to the personal information we hold on you, correction of anything inaccurate, or deletion of your record. Email us; we'll action it within a reasonable time and confirm in writing.

Information Officer.

Our designated Information Officer can be reached at privacy@chiefaiofficer.co.za. For complaints you cannot resolve with us, the South African Information Regulator is the supervisory authority.

Changes to this notice.

When this notice changes materially we'll publish the update with a revision date. The current revision is below. We don't make changes silently.

Last revised · 2026-05-25 · rev 1