Privacy Policy

Your privacy is critically important to us. This policy outlines how we collect, use, and protect your personal information in compliance with South Africa's Protection of Personal Information Act (POPIA).

1. Introduction & Responsible Party

This Privacy Policy applies to all personal information collected by EB5 Immigration South Africa ("we", "us", "our") through the website eb5immigration.co.za. The responsible party for the processing of your personal information is:

EB5 Immigration South Africa
Sandton, Johannesburg, 2196
South Africa
Email: info@eb5immigration.co.za

2. What Information We Collect

We collect information in the following ways:

  • Information you provide directly: When you fill out our Free Assessment form or Contact form, we collect personal information such as your name, email address, phone number, and details about your immigration and investment interests.
  • Information collected automatically: When you browse our website, we collect technical information such as your IP address, browser type, device information, and pages visited. This is done through cookies and similar technologies.

3. How We Use Your Information (Purpose of Processing)

We process your personal information for the following specific purposes:

  • To provide you with a preliminary eligibility assessment for US visa programs.
  • To respond to your inquiries and communicate with you.
  • To send you relevant information, newsletters, and marketing materials, but only where you have given explicit consent.
  • To improve our website, services, and user experience.
  • To comply with legal and regulatory obligations.

4. Lawful Basis for Processing

Our lawful basis for processing your personal information under POPIA is primarily:

  • Consent: Where you have given us clear, informed, and specific consent to process your information for a particular purpose (e.g., by submitting the assessment form).
  • Legitimate Interest: For improving our website and for security purposes, where our legitimate interests do not override your rights.

5. Data Sharing and Third Parties

We do not sell, rent, or trade your personal information. We may share your information with trusted third-party service providers only when necessary to provide our services, such as:

  • Cloudflare: Our website hosting and security provider.
  • SendGrid: Our email delivery provider for sending assessment results and communications.
  • AI Service Providers (OpenAI, Anthropic, etc.): Anonymized or pseudonymized query data may be processed by our AI pipeline to generate responses on the "Ask Our AI" page. No personally identifiable information from forms is sent to these providers.

We have data processing agreements in place with these providers to ensure they protect your information to the same standard we do.

6. International Data Transfers

Some of our service providers are located outside of South Africa. When we transfer your information internationally, we ensure that it is protected by implementing appropriate safeguards, such as Standard Contractual Clauses, to ensure the recipient country has adequate data protection laws.

7. Your Rights Under POPIA

As a data subject in South Africa, you have the following rights:

  • The right to be notified that your personal information is being collected.
  • The right to access the personal information we hold about you.
  • The right to request correction of inaccurate or incomplete information.
  • The right to request destruction or deletion of your personal information.
  • The right to object to the processing of your personal information.
  • The right to withdraw consent at any time.
  • The right to lodge a complaint with the Information Regulator of South Africa.

To exercise any of these rights, please contact us at info@eb5immigration.co.za.

8. Data Security

We implement appropriate technical and organizational measures to protect your personal information against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access. This includes encryption, access controls, and regular security assessments.

9. Data Retention

We will only retain your personal information for as long as is necessary to fulfill the purposes for which it was collected, or as required by law. Assessment data is typically retained for 24 months before being anonymized or deleted.

10. Changes to This Policy

We may update this Privacy Policy from time to time. The latest version will always be available on this page, and we will notify you of any material changes.

Last Updated: 4 March 2026