Home / Privacy policy

Privacy policy

This Privacy Policy explains how CYP450 Insights collects, uses, stores and shares personal information in line with the Protection of Personal Information Act, 2013 (POPIA). It applies when you visit our site, submit an enquiry, or engage with our educational services.

1. What information we collect when you enquire

We may collect personal information that you choose to give us through the enquiry form on our contact page. This can include your name, contact details, organisation, role, province or city, and the message you send us. If you request a literature review, educational brief, plain language summary or training talk, we may also collect project details needed to understand your request and respond properly.

We do not collect more information than we need for a legitimate business purpose. If you send us information about medicines, health topics or client matters, please only share what is necessary for the enquiry. Do not include highly sensitive details unless they are required for the work and you are comfortable sharing them.

  • Enquiry and contact details
  • Organisation and professional role
  • Project scope and topic notes
  • Any records you voluntarily provide for review

2. Why we use personal information

We use personal information to respond to enquiries, assess whether we can assist, prepare quotations or project notes, and deliver the services you request. We also use it to manage client communication, keep internal records, and meet legal or professional obligations where applicable. Our work is educational and research focused, so we may use information to prepare literature reviews, plain-language summaries, journal scans, interaction overviews and training materials.

We do not use your personal information for unrelated marketing unless you have agreed to receive such communication. If we need to use information for a new purpose that is not reasonably connected to the original request, we will only do so where lawful and appropriate.

3. How your information may be shared

We may share personal information only where it is necessary for our work and where lawful. This may include sharing with team members who need the information to handle your enquiry or project, or with service providers who support our administrative operations. These service providers are required to handle information responsibly and only for the purpose we specify.

We may also disclose information if required by law, a court order, or a lawful request from a regulator or other authority. We do not sell personal information.

  • Internal team access on a need to know basis
  • Administration and support service providers
  • Lawful disclosures required by South African law

4. POPIA rights and your choices

Under POPIA, you have rights in relation to your personal information. You may ask whether we hold information about you, request access to that information, and ask for correction where details are inaccurate or incomplete. In some cases you may object to certain processing or ask us to delete information, subject to legal or contractual requirements.

To protect your privacy, we may need to verify your identity before responding to a request. Please note that some information may need to be retained for record keeping, compliance or dispute resolution. If you do not want us to keep your details after an enquiry has closed, you may let us know and we will consider the request in line with the law.

5. Security, storage and retention

We take reasonable technical and organisational steps to protect personal information from loss, unauthorised access, misuse or alteration. Access is limited to persons who need it for legitimate business purposes. We store information for as long as it is needed for the purpose for which it was collected, or for a longer period where required by law or good record keeping practice.

Because no system can be guaranteed as fully secure, please use care when sending information through online forms or other electronic channels. We review retention needs from time to time and remove information that is no longer required, where appropriate.

  • Access controls and restricted handling
  • Retention linked to business and legal needs
  • Deletion or anonymisation where appropriate

6. Cookies, site use and analytics

Our site may use basic cookies or similar technologies to support normal site functions and help us understand general usage patterns. These tools do not usually identify you by name, but they may collect device or browser information. You can manage cookies through your browser settings, although some site functions may be affected if cookies are disabled.

If we use analytics or similar tools, the information gathered is used in aggregate form to help us understand how visitors interact with the site and to improve navigation and content presentation. We do not use this information to make medical decisions about any person.

7. Contact details and operator information

CYP450 Insights is operated by Astros Marketing (Pty) Ltd for the purpose of handling this website and related enquiries. Our base is in Rondebosch, Cape Town, and we support clients across South Africa, including Cape Town, Johannesburg, Pretoria, Durban and Bloemfontein. If you have a privacy question, want to exercise your rights, or need clarification about how we handle information, please use the enquiry form on our contact page.

By using this site, you acknowledge that you have read this Privacy Policy. We may update it from time to time to reflect changes in law, our services or our handling of personal information. The latest version will apply from the date it is published.