Privacy Notice

Last updated: 24 September 2026

This notice explains what personal information Enerleq collects through enerleq.com, why we collect it, and what rights you have over it. It describes how we handle that information under South Africa’s Protection of Personal Information Act (POPIA) and, where applicable, the UK GDPR and the EU GDPR.

Who we are

Enerleq is a specialist hydrogen and fuel cell advisory based in Sandton, South Africa. For the purposes of this notice, Enerleq is the responsible party under POPIA and the data controller under the GDPR.

• Registered name: Enerleq Investments CC
• Company registration number: 2006/024431/23
• Registered address: CubeWS, 205 Rivonia Road, Morningside, Sandton 2057, South Africa
• Email: contact@enerleq.com
• Telephone: +27 10 141 0021
• Information Officer (POPIA): Dr Sakib Khan, Founder & Principal — contact@enerleq.com

What we collect

Almost everything we hold is what you have chosen to send us. If you complete the contact form, we receive your name, email address, organisation, role, the area of interest you select, and the content of your message. Separately, and as any website does, our host records standard technical information when a page is requested, and our analytics service records which pages are visited; see “Who else handles it” below. If you email or telephone us directly, we hold whatever you include in that correspondence.

This website sets no cookies and uses no advertising trackers or social media pixels. It does use one analytics service, Leadfeeder. When you open a page, Leadfeeder receives your IP address, the page you are viewing, the page that referred you and any file you download, and matches the IP address against business records to tell us which organisation the visit came from. It does not tell us who you are, and a visit from a home or mobile connection is usually not matched to anyone. It does not follow you between sites. You can prevent this by blocking scripts from lfeeder.com in your browser, for example with a content blocker. Our fonts are served from our own domain rather than a third party.

Why we use it, and on what basis

We use the information you send to respond to your enquiry, to assess whether we can help, and to carry on the resulting correspondence. Where you have asked us to get in touch, our lawful basis is your consent; where we are discussing or performing an engagement, it is the performance of a contract or our legitimate interest in conducting our business.

We use website analytics to understand which organisations are interested in our work and, where it is relevant, to contact those organisations. Our lawful basis is our legitimate interest in developing our business. You may object at any time; see “Your rights” below.

We do not sell personal information, and we do not use it to send marketing you have not asked for.

Who else handles it

Our contact form is operated by Formspree, which receives and stores form submissions on servers in the United States before delivering them to us by email. It may also receive technical information associated with a submission, such as your IP address, browser type, access time and referring page. This means information you submit through the form is transferred outside South Africa and outside the EEA. For transfers covered by the GDPR, Formspree states that it relies on Standard Contractual Clauses as a data processor. Its processing is also subject to Formspree’s privacy policy.

Our website analytics are provided by Leadfeeder, part of the Dealfront group, which processes visit information on our behalf as a data processor under a data processing agreement. That processing takes place primarily in the European Union, which is a transfer outside South Africa. Some of its service providers are in the United States, and Leadfeeder is bound to use a lawful transfer mechanism, such as Standard Contractual Clauses, for any processing outside the EU. Its processing is also subject to Leadfeeder’s privacy information.

Our email is hosted by Google Workspace. Our website is hosted by UK2, which records standard server logs, including IP addresses, for security purposes. We do not share your information with anyone else except where we are required to by law.

How long we keep it

We keep enquiry correspondence for up to 3 years, engagement records for up to 7 years and records of website visits for up to 2 years, after which they are deleted, save where a longer period is required for tax, professional or regulatory reasons.

Your rights

Depending on where you are and subject to applicable law, you may ask us to confirm what personal information we hold about you, provide a copy of it, correct it if it is wrong, delete it, or restrict how we use it. You may also object to processing based on legitimate interests, and withdraw consent at any time. To exercise any of these, write to contact@enerleq.com.

If you are not satisfied with our response, you may complain to the Information Regulator of South Africa, or — if you are in the United Kingdom or the EEA — to your local supervisory authority.

Confidentiality of client work

Engagement examples published on this site describe commercial client work without naming clients, and commercially sensitive detail is withheld. Public-sector work is identified where it is already a matter of public record. Descriptions are necessarily specific enough to be informative, so we cannot guarantee that a reader with sector knowledge could not infer an identity. If you are a client and would like an engagement description amended or removed, write to contact@enerleq.com and we will do so.

Changes to this notice

We will update this page when our practices change, and the date at the top will change with it.