Privacy Policy

1. Who I am

andygood.me is operated by Andrew James Good, trading as Andy Good.

For the purposes of the Protection of Personal Information Act 4 of 2013 (POPIA), Andrew James Good is the responsible party for personal information processed through this website and in connection with Andy Good services.

Business address: 2 Hills Avenue, Ballito, South Africa, 4339
Privacy enquiries: letschat@andygood.me
Information Officer: Andrew James Good
Website: andygood.me

This Privacy Policy explains how I collect, use, store, share and protect personal information.

2. South African privacy law

I process personal information in accordance with POPIA and, where applicable, the Promotion of Access to Information Act 2 of 2000 (PAIA).

This policy is intended to explain those processing activities clearly. It does not limit any rights provided by applicable law.

3. Information I may collect

Depending on how you use the website or work with me, I may collect:

• your name
• work email address
• company or organisation
• information included in enquiries or correspondence
• information about your content, marketing, website or business challenges
• URLs and other information submitted through AI Lab tools
• responses submitted through diagnostics or interactive tools
• booking and meeting information
• information required to prepare proposals or provide services
• contractual, billing and administrative information if you become a client
• technical information such as IP address, browser or device information, timestamps, request logs and security information

The Website Friction Scan may process a webpage URL supplied by you together with an email address where you request the full report.

4. Information you should not submit

Please do not knowingly submit through public website forms or AI Lab tools:

• passwords or login credentials
• payment-card information
• identity documents
• confidential client data you are not authorised to disclose
• private or access-controlled URLs
• health, biometric or other special personal information
• personal information about children
• unlawful material
• information belonging to another person unless you have authority to provide it

Where an AI Lab tool accepts source material, text or URLs, provide only information you are authorised to use.

5. How information is collected

Personal information may be collected when you:

• submit the contact form
• use an AI Lab tool or diagnostic
• request a Website Friction Scan report
• email or otherwise communicate with me
• arrange or participate in a meeting
• become a client
• use the website

Information may also be generated through normal website hosting, security and infrastructure operations or obtained from publicly available sources where reasonably necessary for a legitimate business purpose.

6. Why I process personal information

I may process personal information to:

• respond to enquiries
• understand the problem you are trying to solve
• provide requested AI Lab results or reports
• deliver Website Friction Scan results
• arrange meetings
• prepare proposals and scopes of work
• enter into and perform client agreements
• provide content, marketing, strategy and AI-related services
• communicate with clients and prospective clients
• administer billing and business records
• improve website and service quality
• operate, secure and troubleshoot the website
• prevent abuse, fraud or unauthorised access
• comply with legal, accounting and regulatory obligations
• establish or protect legal rights
• send marketing communications where permitted by law

Submitting an enquiry or requesting a tool result does not automatically subscribe you to marketing communications.

7. Basis for processing

Depending on the circumstances, information may be processed because you consented to it, because processing is needed to respond to something you requested, because it is necessary to perform an agreement, because the law requires it, or because there is a legitimate business interest permitted by applicable law.

Where processing relies on consent, you may withdraw that consent.

8. AI-assisted processing

AI systems may be used in the operation of AI Lab tools and may also support parts of my research, analysis, content workflows and client delivery.

Where personal information is processed using an AI-enabled service, I aim to minimise the information involved, avoid unnecessary confidential or special personal information, use appropriate providers and safeguards, and retain human review where appropriate.

AI-generated analysis can contain errors. Website tools should not be treated as purely automated decisions producing legal or similarly significant effects.

9. Service providers

I may use third-party providers for website hosting and infrastructure, email delivery, databases and storage, forms, scheduling, collaboration, security, AI processing and professional services.

Where providers process personal information on my behalf, reasonable steps will be taken to use appropriate security and contractual safeguards.

Personal information is not sold to third parties.

10. International processing

I operate from South Africa and work internationally.

Some cloud, infrastructure and AI providers may process information outside South Africa.

Cross-border transfers will be handled in accordance with section 72 of POPIA and other applicable data-protection requirements.

11. Security

Reasonable technical and organisational safeguards are used according to the information and risks involved.

These may include access controls, authentication, restricted system access, secure infrastructure, encrypted transmission, software updates, data minimisation and security monitoring.

No internet-based service can guarantee absolute security.

12. Retention

Personal information is kept only for as long as reasonably necessary for the purpose for which it was collected, to meet contractual requirements, to maintain appropriate business records, to comply with law or to establish, exercise or defend legal rights.

Information that no longer needs to be retained will be deleted, destroyed, de-identified or appropriately restricted where reasonably practicable.

13. Direct marketing

Submitting the contact form, using an AI Lab tool or requesting a Website Friction Scan does not automatically add you to a marketing list.

Where direct marketing is undertaken, it will be carried out in accordance with applicable law and communications will provide a reasonable way to opt out.

14. Cookies, analytics and technical information

The website may use storage, logs or similar technologies necessary to operate, secure and deliver the website.

Hosting and infrastructure providers may process limited technical information such as IP addresses, request information and timestamps as part of normal website delivery.

Where non-essential analytics, tracking, advertising or similar technologies are used, appropriate transparency and consent mechanisms will be implemented where required by applicable law.

15. UK visitors and clients

I provide services remotely to international clients, including businesses in the United Kingdom.

Where the UK GDPR applies to a particular processing activity, personal information will be handled in accordance with the applicable requirements of UK data-protection law.

Depending on the circumstances, UK individuals may have rights including access, correction, deletion, restriction, objection and data portability, as well as the right to withdraw consent where consent is relied upon.

16. Children

The website and services are intended for businesses and professional users and are not directed at children.

I do not knowingly use the website to collect personal information from children.

17. Your rights under POPIA

Subject to applicable law, you may ask whether I hold personal information about you, request access to it, ask for inaccurate or unlawfully held information to be corrected or deleted, object to certain processing, object to direct marketing and withdraw consent where consent is the basis for processing.

Requests can be sent to letschat@andygood.me.

18. PAIA

Some requests for access to records are governed by PAIA.

The Andy Good PAIA Manual explains how these requests can be made.

19. Complaints

Privacy concerns can be sent to:

letschat@andygood.me

You also have the right to lodge an appropriate complaint with the Information Regulator in South Africa.

Information Regulator
POPIA complaints: POPIAComplaints@inforegulator.org.za
General enquiries: enquiries@inforegulator.org.za
Telephone: 010 023 5200
Toll-free: 0800 017 160

Where UK data-protection law applies, UK individuals may also have the right to complain to the Information Commissioner’s Office.

20. Changes

This Privacy Policy may be updated when my website, services, providers or legal obligations change.

The current version will be published here with its latest update date.