Privacy Policy

1. Who this policy covers

This policy applies to anyone who uses Strategy Partner Pro: individual users with a login, the organisations (our clients) whose strategic data is stored on the platform, and visitors to our marketing and login pages.

2. Information we collect

Account information

When you or your organisation registers, we collect your email address, a password (stored only as a securely hashed value, never in plain text), your organisation name, and your role within that organisation.

Your organisation's strategic data

The core purpose of this platform is to help your organisation plan and track its strategy. This means we store the actual content you and your team enter: Strategic Pillars, Goals, Objectives, KPIs and their targets/actuals, Initiatives, and entries in your Risk Register. We treat this as confidential business information belonging to your organisation. See Section 5 on how we protect it.

Organisation profile information

Your industry, country, and financial year dates, which you provide in Account Settings. We use this to tailor content (see Section 3) and to determine currency for billing.

Payment information

For online payments, card and mobile money details are collected and processed directly by our payment processor, The Teller. We do not receive or store your full card number. We do store the payment amount, date, status, and a transaction reference. For cheque payments, we store the cheque number, issuing bank, and date you provide.

Usage and technical information

Like most web platforms, our servers and hosting provider log standard technical information (IP address, browser type, access times) for security and troubleshooting. Your session is maintained using an essential login/security cookie. See Section 7.

3. How we use your information, and who we share it with

We use your information to provide and improve the platform. Some features send limited information to third-party service providers in order to work. Here's exactly which ones, and what they receive:

We do not sell your data or your organisation's strategic information to anyone, for any purpose. We do not share your organisation's Goals, KPIs, Initiatives, or Risk Register with any third party except as described above (and in that case, only industry/country context, never the content itself).

4. Data belonging to your organisation

Strategic data you enter belongs to your organisation. Platform administrators can view organisation data as necessary to provide support and manage the platform, but do not use it for any purpose beyond operating and supporting your account.

5. How we protect your information

• Passwords are stored using industry-standard hashing, never in plain text.
• Access to your organisation's data is restricted to users you've approved within your own organisation, based on the role you assign them.
• All communication with the platform is encrypted in transit (HTTPS).
• We do not store full payment card numbers. These are handled entirely by our payment processor.

No system is completely immune to risk, and we can't guarantee absolute security. We do take reasonable, industry-standard steps to protect your information and will notify affected organisations promptly if we become aware of a data breach affecting their data.

6. How long we keep your information

We retain your account and organisation data for as long as your organisation maintains an active licence, and for a reasonable period afterward in case you wish to reactivate. If your organisation requests deletion of its account, we will delete your strategic data within a reasonable timeframe, except where we're required to retain certain records (such as payment records) for legal or accounting purposes.

7. Cookies and analytics

We use essential cookies required for you to log in and stay securely logged in (session and CSRF-protection cookies). These don't require consent, since the platform can't function without them. With your permission, given through the cookie banner shown on your first visit, we also use Google Analytics to understand overall usage of the platform, for example, which countries our visitors and organisations are located in. Google Analytics uses its own cookies and may process your IP address to estimate your general location; we do not use it for advertising, and we do not sell or share this data with third parties for marketing purposes. You can read Google's own privacy policy at policies.google.com/privacy, or opt out of Google Analytics tracking across all websites using the Google Analytics Opt-out Browser Add-on. You can change your choice at any time by selecting Cookie Settings here or in the site footer. Some pages also load fonts and libraries from third-party content delivery networks (Google Fonts, cdnjs), which may see your IP address as part of normal internet infrastructure when your browser requests those files.

8. Your rights

Depending on where you and your organisation are located, you may have rights to access, correct, export, or request deletion of your personal information. Most of this you can already do yourself: editing your KPIs, goals, and profile directly in the platform, or asking your organisation's Exec Sponsor or Strategy Owner to do so. For anything else, including full account deletion, contact us using the details below.

9. International data transfers

Strategy Partner Pro serves organisations across Africa and beyond. Depending on where our hosting and third-party providers are located, your information may be processed in a country other than your own. Where this happens, we rely on our providers' own security and data protection commitments.

10. Children's privacy

Strategy Partner Pro is a business tool intended for use by working professionals and is not directed at, or knowingly used to collect information from, children.

11. Changes to this policy

We may update this policy as the platform evolves. The date below reflects the last update. For significant changes, we'll make reasonable efforts to notify active organisations.