CRI Privacy Policy
Effective Date: 12 October 2026
Last Updated: 12 October 2026
The Change Readiness Index™ ("CRI™", "we", "us" or "our") respects your privacy and is committed to protecting the personal information you provide when using our website and related services.
This Privacy Policy explains what information we collect, why we collect it, how we use and protect it, and the choices available to you.
This policy should be read together with our Terms of Use and POPIA Privacy Notice.
1. Who We Are
The website and services are operated by:
Legal Entity: Change Leadership Partner (Pty) Ltd
Enterprise Name: CHANGE LEADERSHIP PARTNERS
Registration Number: 2026/798574/07
Jurisdiction: Republic of South Africa
Business Address: Atrium on 5th, 5th Street, Sandhurst, Sandton, 2196
Email: hello@changereadinessindex.com
Telephone: +27 83 321 2456
Website: www.changereadinessindex.com
Change Leadership Partner (Pty) Ltd operates under the customer-facing brand Change Readiness Index™.
For purposes of applicable South African data-protection legislation, Change Leadership Partner (Pty) Ltd is responsible for the processing of personal information described in this Privacy Policy, to the extent that it determines the purposes and means of that processing.
2. Information We May Collect
Depending on how you interact with the website, we may collect the following categories of information.
2.1 Information You Provide Directly
This may include:
• Name and surname.
• Email address and telephone number.
• Organisation or company name.
• Job title or professional role.
• Information submitted through website forms.
• Enquiries and correspondence.
• Responses submitted through the Change Readiness Snapshot™ assessment.
• Assessment results associated with identifiable individuals.
• Other information you voluntarily provide.
You should provide only information that is reasonably necessary for the service or interaction concerned.
2.2 Assessment Information
When you complete the Change Readiness Snapshot™, we may process your responses to calculate and present an indicative organisational change-readiness result.
The information processed will depend on the assessment configuration and the information you submit.
Please avoid including confidential information, personal information about identifiable third parties or sensitive personal information that is not required by the assessment.
2.3 Automatically Collected Information
When you visit our website, certain technical information may be collected, depending on the technologies enabled. This may include:
• IP address.
• Browser and device information.
• Operating system.
• Pages visited and referring websites.
• Date and time of access.
• Website usage and performance information.
• Approximate geographic information.
• Cookie identifiers and similar technical data.
This information may be collected through website infrastructure, analytics services, cookies or similar technologies.
3. How We Use Personal Information
We may use personal information for purposes including:
• Operating and maintaining the CRI website.
• Providing the Change Readiness Snapshot™ assessment.
• Calculating and delivering assessment results.
• Responding to enquiries and requests.
• Providing services or information requested by you.
• Improving our website, assessment and user experience.
• Monitoring website performance and security.
• Preventing fraud, abuse and unauthorised access.
• Maintaining appropriate business records.
• Communicating information about CRI™ services, research, articles, events and related offerings where legally permitted.
• Complying with applicable legal and regulatory obligations.
We will process personal information only for an identified and lawful purpose and will take reasonable steps to ensure that further processing is compatible with the purpose for which the information was collected.
4. Lawful Basis for Processing
Depending on the circumstances, we may process personal information on the basis of:
• Your consent.
• Steps taken at your request or the performance of a contract.
• Compliance with a legal obligation.
• Protection of a legitimate interest recognised by applicable law.
• Our legitimate interests, where permitted by law and appropriately balanced against your rights.
• Another lawful justification recognised under applicable legislation.
Where processing relies on consent, you may withdraw that consent, subject to applicable legal requirements and the consequences of withdrawal.
5. Marketing Communications
Where permitted by law, we may use your contact information to send communications about CRI™ services, insights, articles, research, events or related offerings.
Where consent or another specific legal requirement applies, we will obtain or satisfy that requirement before sending the relevant communications.
You may opt out of marketing communications at any time using the unsubscribe mechanism provided or by contacting hello@changereadinessindex.com.
Opting out of marketing does not necessarily require us to delete information that we are lawfully required or permitted to retain for other purposes.
6. Cookies and Similar Technologies
Our website may use cookies and similar technologies to:
• Enable website functionality.
• Remember preferences.
• Understand website usage.
• Improve performance and user experience.
• Support analytics and other website services.
Third-party providers may place or access cookies where their services are enabled.
You can manage cookies through your browser settings and, where available, the website's cookie preferences. Disabling certain cookies may affect website functionality.
Where required by law, appropriate consent mechanisms will be implemented for relevant technologies.
7. Sharing Personal Information
We do not sell personal information.
We may disclose or make personal information available to parties where reasonably necessary for the purposes described in this policy, including:
• Website hosting and infrastructure providers.
• Website and assessment technology providers.
• Analytics providers.
• Email and communications providers.
• Professional advisers.
• Service providers supporting our business operations.
• Regulators, law-enforcement authorities or other parties where disclosure is legally required or permitted.
Where third parties process personal information on our behalf, we will take reasonable steps to ensure that appropriate contractual, confidentiality and security obligations apply.
The specific providers involved will depend on the services and technologies enabled on the website.
8. International Transfers
Some service providers may store or process personal information outside South Africa.
Where personal information is transferred outside South Africa, we will take appropriate steps to ensure that the transfer satisfies the requirements of the Protection of Personal Information Act 4 of 2013 (POPIA), including applicable requirements concerning the recipient's legal protections and safeguards.
9. Information Security
We take reasonable technical and organisational measures designed to protect personal information against loss, misuse, unauthorised access, disclosure, alteration or destruction.
No internet transmission or electronic storage system can be guaranteed to be completely secure.
Please avoid submitting confidential or highly sensitive information through public website forms unless it is specifically required and appropriate safeguards are in place.
10. Data Retention
We retain personal information for no longer than is reasonably necessary for the purpose for which it was collected, unless a longer period is required or permitted by law.
Retention may depend on the nature of the information, the service provided, legitimate business requirements and applicable legal or regulatory obligations.
11. Your Privacy Rights
Subject to applicable law, you may have the right to:
• Request access to personal information we hold about you.
• Request correction or updating of inaccurate or incomplete information.
• Request deletion or destruction of information where legally permissible.
• Object to certain forms of processing.
• Withdraw consent where processing is based on consent.
• Object to direct marketing.
• Request information about the processing of your personal information.
• Lodge a complaint regarding the processing of your personal information.
Requests can be submitted using the contact details in Section 13. We may need to verify your identity before acting on a request.
12. Third-Party Websites
Our website may contain links to third-party websites, platforms or services.
We are not responsible for the privacy practices, content or security of external websites. You should review the applicable privacy policies before providing personal information to third parties.
13. Privacy Enquiries and Requests
For privacy-related enquiries, requests or complaints, contact:
Change Leadership Partner (Pty) Ltd
Trading as Change Readiness Index™
Email: hello@changereadinessindex.com
Telephone: +27 83 321 2456
Address: Atrium on 5th, 5th Street, Sandhurst, Sandton, 2196
Website: www.changereadinessindex.com
You may also contact the Information Regulator of South Africa where appropriate.
Official website: https://inforegulator.org.za/
14. Changes to This Policy
We may update this Privacy Policy to reflect changes in our services, technology, processing activities or legal requirements.
The latest version will be published on our website, together with its effective and last-updated dates.
15. Governing Law
This Privacy Policy is governed by the laws of the Republic of South Africa.
Change Leadership Partner (Pty) Ltd
Trading as Change Readiness Index™
Effective Date: 12 October 2026
Last Updated: 12 October 2026