Policy and procedure pack
Practical POPIA-aligned policies and procedures written for how your team actually works, not generic templates left unused.
Ask about a policy pack
Page Willowhub
Compliance readiness support rooted in how South African businesses actually operate
From POPIA inventories to customer security questionnaires, we help Cape Town and nationwide teams gather evidence, close gaps, and brief staff without theatre.
Flagship engagement
Compliance readiness assessment
A structured review of personal-information flows, operator relationships, and control evidence—ending in a risk-ranked report and a 90-day remediation map.
Built for owners, compliance officers, and IT leads who need to answer board questions or buyer due diligence with more than a policy PDF. We inventory processing activities, interview process owners, and leave you with priorities your team can schedule.
Typical engagements run two to four weeks across Cape Town sites or remote sessions nationwide. Legal opinions and penetration tests stay outside scope so the work stays focused on readiness.
Related engagements
Support around the assessment
When documents, people, or questionnaires need attention alongside the readiness review, these offerings fit the same programme.
Staff awareness briefings
Focused sessions that walk employees through phishing habits, personal information handling, and incident reporting in plain language.
Book a briefing
Gap analysis workshops
Facilitated workshops that map controls against ISO 27001 themes or customer security questionnaires without turning the day into jargon.
Plan a workshop
Advisory retainer
Monthly access to a named advisor for policy questions, vendor reviews, and readiness check-ins as your programme matures.
Discuss a retainerFrom recent work
Evidence that mentions the real friction
“The assessment forced us to list every courier and warehouse system that touched consignee details. The report was blunt about our access reviews, which stung a little, yet the 90-day plan finally gave finance and IT the same checklist.”
“We needed procedures our juniors would follow during busy seasons. Page Willowhub rewrote our retention rules around tax-year cycles instead of abstract cloud jargon, and the pack survived a bank onboarding review on the first pass.”
Guides
Field notes for POPIA programmes
A POPIA readiness checklist South African SMEs can actually finish
Twelve practical checks covering operator agreements, access logs, and breach contacts—without drowning a small team in paperwork.
Preparing for a customer security questionnaire without panic
How to answer bank and retailer information-security forms with evidence folders instead of last-minute guesswork.