Privacy notice.

Last updated 3 November 2026

Griffiths & Felix (“we”, “us”) is a consulting firm based in Gaborone, Botswana. This notice explains how we handle personal data collected through this website. We process personal data in line with the Data Protection Act, 2024 (Act No. 18 of 2024) of Botswana.

What we collect

• What you send us. When you use the contact form: your name, company, work email, phone number, how you heard about us, and anything you tell us about the work.
• Your cookie choice. One cookie records whether you accepted analytics. See the cookie policy.
• Usage information, only if you allow analytics. Pages viewed, how you arrived, device and browser type, and approximate location (country or city). This is collected by Google Analytics, which does not store full IP addresses.
• Technical logs. Our hosting provider processes IP addresses and request details to deliver the site and protect it from abuse.

Why we use it

• To reply to your enquiry and, where it fits, to scope and propose the work. You asked us to, and we have a legitimate interest in replying.
• To send occasional insights and updates, only if you opt in. You can opt out at any time.
• To understand which pages are useful and improve the site, only with your consent.
• To keep the site secure and working, which is necessary to run it.

We do not sell personal data and we do not use it for advertising.

Who we share it with

We use service providers who process data for us under contract and only on our instructions:

• Vercel Inc., which hosts and delivers the website.
• The form-delivery service that passes contact form submissions to our team.
• Google LLC, for analytics, only if you accept analytics cookies.

We may also disclose information where the law requires it.

Transfers outside Botswana

Some of these providers store data outside Botswana, for example in the United States or the European Union. When data leaves Botswana we rely on the safeguards the Data Protection Act, 2024 allows, such as contractual protections with the provider.

How long we keep it

• Enquiries: up to 24 months after our last contact. If an enquiry becomes an engagement, it is kept with the engagement records for as long as the law requires.
• Marketing preferences: until you opt out.
• Analytics data: up to 14 months.
• Your cookie choice: 6 months, after which we ask again.

Your rights

Under the Data Protection Act, 2024 you can ask us to:

• give you access to the personal data we hold about you;
• correct data that is wrong or incomplete;
• delete your data, or restrict how we use it;
• stop using your data for direct marketing, or object to other processing;
• give you your data in a portable format;
• withdraw a consent you gave. This does not affect what we did before you withdrew it.

To use any of these rights, write to us through the contact page and mention “Privacy”. We may need to confirm your identity before we act. If you are unhappy with how we handle your data, you can complain to the Information and Data Protection Commission of Botswana.

Security

The site is served only over HTTPS, access to enquiries is limited to the people who need it, and our providers apply industry-standard safeguards. No system is completely secure, but we work to protect the data you give us.

Children

This website is for organisations and professionals. It is not directed at children, and we do not knowingly collect their data.

Changes to this notice

We may update this notice from time to time. The date at the top shows when it last changed.