The short version: this site sets no cookies unless you agree. If you write to us, we use your message to reply to you and nothing else. We don't sell anything about you to anyone.
1. Who is responsible
Thato Ncube, trading as Live and Thrive Coaching ("Coach Thato", "we", "us") is the responsible party under POPIA and the data controller under the GDPR for the information described here.
Information Officer: Thato Ncube.
How to reach us about privacy: use the contact form on this site, or WhatsApp +27 (0)73 426 5113. Please mention "privacy request" so it reaches the right place quickly.
2. What we collect, and why
When you contact us or order the book
Your name, email address and whatever you write in the message; and, if you order Beautiful Woman, Bloom Again, your proof of payment and delivery address or chosen PEP store.
- Why: to reply to you, to arrange coaching or speaking, and to send you the book.
- Lawful basis: your consent, and where you are ordering, because it is necessary to perform the sale (POPIA s11(1)(a) and (b); GDPR Art 6(1)(a) and (b)).
- Who handles it: the form is delivered by Web3Forms; messages sent by WhatsApp are handled by WhatsApp (Meta) under their own terms.
Analytics — only if you agree
If you accept analytics cookies, Google Analytics 4 records which pages you view, how you arrived, roughly where in the world you are (from a shortened IP address), and basic device and browser details. It does not tell us your name, and we never try to identify individuals from it.
- Why: to see which pages people find useful.
- Lawful basis: your consent, which you may withdraw at any time.
- If you decline: Google Analytics is never loaded. No request is made to Google and no analytics cookie is created.
Hosting records
The site is hosted on Google Firebase Hosting, which keeps standard server logs (including IP addresses) to deliver pages and protect against abuse. Lawful basis: our legitimate interest in running a secure site (GDPR Art 6(1)(f); POPIA s11(1)(f)).
3. Cookies and similar storage
Nothing below is created until you choose "Accept" or switch analytics on.
| Name | Set by | Purpose | Kept for |
|---|---|---|---|
ct-consent-v1 | This site (browser storage, not a cookie) |
Remembers your cookie choice so you aren't asked again. Never leaves your device. | Until you clear your browser data |
_ga | Google Analytics | Distinguishes one visitor from another | Up to 2 years |
_ga_G-2G67D1F69P | Google Analytics | Keeps the visit session going | Up to 2 years |
To change your mind at any time, use the button below or the "Cookie preferences" link at the bottom of every page. Withdrawing consent deletes the analytics cookies from this browser.
4. Who we share information with
We do not sell personal information and we do not use it for advertising. It is shared only with the service providers that make the site work:
- Google — Firebase Hosting (serving the site) and, with consent, Google Analytics.
- Web3Forms — delivers contact and order enquiries to Coach Thato.
- WhatsApp (Meta) — if you choose to message us there.
5. Information sent outside South Africa
These providers operate servers outside South Africa, and may process data outside the EEA. That makes them cross-border transfers under POPIA s72 and Chapter V of the GDPR. Google and Web3Forms commit to recognised safeguards — principally the European Commission's Standard Contractual Clauses — which require them to give your information a comparable level of protection.
6. How long we keep it
- Enquiries and coaching correspondence: for as long as we are in contact and up to three years afterwards, so we can pick up where we left off.
- Order records: as long as South African tax and company record-keeping rules require.
- Analytics: retained by Google for the period set on our property, no longer than 14 months.
7. Your rights
Under POPIA you may ask us to confirm what personal information we hold about you and to give you a copy (POPIA Form 2 may be used), to correct or delete information that is inaccurate, irrelevant, excessive or out of date, and to object to processing. Under the GDPR and UK GDPR you additionally have rights of access, rectification, erasure, restriction, portability, objection, and the right to withdraw consent at any time without affecting what was done beforehand.
To exercise any of these, contact us using the details in section 1. We will respond as quickly as we can and in any event within the time the law allows. There is no charge, unless a request is clearly unfounded or excessive.
8. Complaints
South Africa — Information Regulator
Complaints are lodged through the Regulator's eServices Portal at
eservices.inforegulator.org.za.
General enquiries: enquiries@inforegulator.org.za ·
010 023 5200 · toll free 0800 017 160
Woodmead North Office Park, 54 Maxwell Drive, Woodmead, Johannesburg, 2191
EU / UK
You may complain to the data protection authority where you live or work. In the UK this is the
Information Commissioner's Office, ico.org.uk.
We would appreciate the chance to put things right first — please do contact us.
9. Children
This site is intended for adults. We do not knowingly collect information from children. If you believe a child has sent us personal information, contact us and we will delete it.
10. Changes to this notice
If we change how we handle personal information, we will update this page and the date below. Material changes affecting analytics will also reset the cookie banner so you can choose again.
Last updated: 7 August 2026. · Back to the site