Privacy policy

This privacy statement was last updated on 8 April 2026

This privacy statement describes our reasons for collecting personal data through the PwC Store (“Store”) and provides information about individuals’ legal rights in relation to personal data. We may use the personal data provided through the PwC Store for any of the reasons set out in this privacy statement.

This privacy statement relates only to the store platform. It does not relate to other technologies, products, services or sites of PwC or any other party.

Controller information

The controller of the information collected in connection with this application is the PwC firm responsible for delivering professional services to you or your organisation.

If you are not receiving professional services from any PwC firm and you are a PwC professional or act in a professional capacity for PwC then the data controller of your personal data is the PwC firm in the location from which you normally access this application.

To understand the structure of the PwC network, see: https://www.pwc.com/gx/en/about/corporate-governance/network-structure.html

Each firm in the PwC network is a separate legal entity. For a list of PwC firms, see https://www.pwc.com/gx/en/about/corporate-governance/legal-entities.html.

For countries and regions in which PwC firms operate, see http://www.pwc.com/gx/en/about/office-locations.html.

In this privacy statement, “PwC”, “us”, and “we” means the PwC firm that is the controller of your personal information.

In this privacy statement, we refer to information about you or information that identifies you as “personal data” or “personal information”. We also sometimes collectively refer to handling, collecting, protecting or storing your personal information as “processing” such personal information.

Your acknowledgement/consent

By using the Store and providing personal information to us, you acknowledge that you have read and understood this privacy statement, and, to the extent your consent is necessary and valid under applicable law, you consent to the collection, use and disclosure of such personal information by PwC and any third-party recipients in accordance with this privacy statement.

The purpose of the PwC store

The Store is an e-commerce platform that provides an online storefront where users can visit, browse products or services (such as training, events, and thought leadership offerings), add items to their cart, and complete purchases. The Store manages the full customer journey including product presentation, cart management, order creation, and checkout.

We do not need to collect sensitive personal data through the Store (and please do not provide any when using it, without prior discussions with us).

We do not need to collect sensitive personal data through the Store. Sensitive personal data, also known as special category personal data, covers information relating to, among other things, race, ethnicity, political opinions, religious or philosophical beliefs, biometric or genetic data when used to uniquely identify you, information about health or sexual life and criminal acts. If there is a need for you to provide sensitive personal data, please ensure it is anonymised before uploading it. If anonymization is not feasible, please notify us in advance before uploading any sensitive personal data.

We do not share personal information with third parties for direct marketing purposes

Personal information we collect

You are not required to provide personal data to us; however, without processing limited personal data, we may not be able to process your orders or provide access to the Store.

We collect the following categories of personal information through the Store:

Basic business card data, such as your name and email address;

Order and transaction data, such as your billing address, and VAT number (collected during checkout for order fulfilment and invoicing purposes);

Analytics data, including anonymised identifiers used to analyse Store performance and usage patterns.

Personal data captured, created, inferred or derived from your use of the Store:

- Last login timestamp

- IP address

- The Store uses small text files called ‘cookies’ which are placed on your computer to assist in providing you with a more customised shopping experience and to analyse your use of the Store. The cookies used are explained in the cookie statement below. The use of cookies is now standard operating procedure for most websites. However, if you are uncomfortable with the use of cookies, most browsers permit users to opt out of receiving them. This can be done via the tools menu of your internet browser. If you do opt out, please note that you may be unable to use certain Store features.

Personal data obtained from third party sources

- We do not generally collect personal data directly from third party sources.

- We may receive payment status information from our integrated payment service provider to confirm transaction completion

Sensitive personal data:

- We do not need to collect sensitive personal data through this application.

Use of personal data

We use personal data for the following purposes:

To fulfil our contractual obligations with you;

To identify, authorise, and authenticate users, including for access control purposes;

To maintain the security of the Store, including preventing unauthorised access and monitoring system usage;

To operate, administer, manage, and improve the Store, including troubleshooting and performance monitoring;

To maintain administrative or client relationship management systems, where you are a business contact of PwC;

To analyse how the Store and associated services perform, including aggregated usage analytics.

The Store does not make automated decisions about individuals.

Cookie statement

Cookies are small text files that are placed on your computer by the websites that you visit. They are widely used in order to make websites work, or work more efficiently, as well as to provide information to the owners of the site. The use of cookies is now standard for most websites. If you are uncomfortable with the use of cookies, you can manage and control them through your browser, including removing cookies by deleting them from your ‘browser history’ (cache) when you leave the site.

Types of cookies

Session' cookies remain in your browser during your browser session only, i.e. until you leave the website.

‘Persistent’ cookies remain in your browser after the session unless you delete them.

‘Performance' cookies collect information about your use of the website, such as webpages visited and any error messages; they do not collect personally identifiable information, and the information collected is aggregated such that it is anonymous. Performance cookies are used to improve how a website works.

'Functionality' cookies allow the website to remember any choices you make about the website (such as changes to text size, customised pages) or enable services such as commenting on a blog.

In every application’s settings, the customers are provided with a feature to track the user. So, if the tracking functionality is enabled, then this cookie expiration would be set to permanent. If it is disabled, then that means we do not track the information if the customer is revisiting back and hence it would be captured as a session.

Use of cookies by PwC:

Provider	Name	Purpose	Type	Duration
Google Analytics (GA4)	_ga	Used to distinguish users.	Performance / Analytics (first‑party cookie used by GA4 tags).	2 years (default).
Google Analytics (GA4)	_ga_<container-id>	Used to persist session state.	Performance / Analytics (first‑party cookie used by GA4 tags).	2 years (default).
Microsoft Clarity	_clck	Persists the Clarity User ID and preferences (unique to that site, attributed to the same user ID).	First‑party.	1 year (as reported in cookie reference database).
Microsoft Clarity	_clsk	Connects multiple page views by a user into a single Clarity session recording.	First‑party.	1 day (as reported in cookie reference database).
Microsoft Clarity	CLID	Identifies the first time Clarity saw this user on any site using Clarity.	Third‑party.	1 year (as reported in published cookie guidance).
Microsoft Clarity	ANONCHK	Indicates whether MUID is transferred to ANID (Clarity doesn’t use ANID; set to 0).	Third‑party.	“At least one session” (as reported in cookie reference database).
Microsoft Clarity	MR	Indicates whether to refresh MUID.	Third‑party.	1 hour (as reported in cookie database).
Microsoft Clarity	MUID	Identifies unique web browsers visiting Microsoft sites (used for advertising, site analytics, and other operational purposes).	Third‑party.	1 year (as reported in cookie reference database).
Microsoft Clarity	SM	Used in synchronising the MUID across Microsoft domains.	Third‑party.	Not specified in Microsoft’s cookie list (duration not published on the referenced Microsoft Learn cookie list page).

By using this website, you agree that we can place these cookies on your computer or device for the above purposes.

Third party links

The Store may link to third party sites not controlled by PwC and which do not operate under PwC privacy practices. When you link to third party sites, this PwC privacy statement no longer applies. We encourage you to review each third-party site's privacy policy before disclosing any personal information.

Our legal grounds for processing personal data

Applicable laws may require us to set out in this privacy statement the legal grounds on which we rely to process your personal information.

In such cases, we rely on one or more of the following processing conditions:

Our legitimate interests in the effective delivery of information and services to you and in the effective and lawful operation of our businesses and the legitimate interests of our clients in receiving professional services from us as part of running their organisation (provided these do not interfere with your rights);

Our legitimate interests in developing and improving our businesses, services and offerings and in developing new PwC technologies and offerings (provided these do not interfere with your rights);

To satisfy any requirement of law, regulation or professional body of which we are a member (for example, for some of our services, we have a legal obligation to provide the service in a certain way);

To perform our obligations under a contractual arrangement with you; or

Where no other processing condition is available, if you have agreed to us processing your personal information for the relevant purpose (please note we do not generally process personal data based on consent as we can usually rely on another legal basis).

Transfers of personal data

Cross-border transfers

If we process your personal information, your personal information may be transmitted and stored outside the country where you are located. This includes countries outside South Africa, the European Economic Area (EEA) and countries that do not have laws that provide specific protection for personal information.

Where we collect your personal information within South Africa or the European Economic Area, transfer outside South Africa or the European Economic Area will be only:

to a recipient located in a country that provides an adequate level of protection for your personal information; and/or

under an agreement which satisfies South African or EU requirements for the transfer of personal data to data processors or data controllers outside South Africa or the EEA, such as the Standard Contractual Clauses approved by the European Commission.

Recipients of personal data

Recipients of personal data: other PwC Firms

For PwC member firm locations, see https://www.pwc.com/gx/en/about/office-locations.html

We may share personal data with other PwC firms where necessary in connection with the purposes described in this privacy statement. For example, when providing professional services to a client we may share personal information with PwC member firms in different territories that are involved in providing services to that client.

Recipients of personal data: Third party providers

We may transfer or disclose the personal data we collect to third party contractors, subcontractors, and/or their subsidiaries and affiliates. Third parties support the PwC network in providing its services and help provide, run and manage IT systems. Examples of third-party providers we use are providers of identity management, website hosting and management, data analysis, data backup, security and cloud storage services, payment service providers and banking partners. The servers powering and facilitating our IT infrastructure are located in secure data centres, and personal data may be stored in any one of them.

The third-party providers may use their own third-party subcontractors that have access to personal data (sub-processors). It is our policy to use only third-party providers that are bound to maintain appropriate levels of security and confidentiality, to process personal information only as instructed by PwC, and to flow those same obligations down to their sub-processors.

Other recipients of personal data

We may also disclose personal information under the following circumstances:

With professional advisers, for example, auditors and law firms, as necessary to establish, exercise or defend our legal rights and obtain advice in connection with the running of our businesses. Personal data may be shared with these advisers as necessary in connection with the services they have been engaged to provide;

When explicitly requested by you;

When required to deliver publications or reference materials requested by you;

To a third party as necessary in connection with a corporate reorganisation, merger, sale, joint venture, assignment, transfer or other disposition of all or any portion of our business, assets or capital; and

With law enforcement or other government and regulatory agencies or with other third parties as required by, and in accordance with, applicable laws and regulations. Occasionally, we may receive requests from third parties with authority to obtain disclosure of personal data, such as to check that we are complying with applicable law and regulations, to investigate an alleged crime or to establish, exercise or defend legal rights. We will only fulfil requests for personal data where we are permitted to do so in accordance with applicable law and regulation.

Security

We adhere to internationally recognised standards of technology and operational security in order to protect personal information from loss, misuse, alteration and destruction. Only authorised persons are provided access to personal information. These individuals have agreed to maintain the confidentiality of this information. We have a framework of policies and procedures in place covering data protection, confidentiality and security and regularly review the appropriateness of the measures we have in place to keep the data we hold secure.

Although we use appropriate security measures once we have received your personal data, the transmission of data over the Internet (including by email) is never completely secure. We endeavour to protect personal data, but we cannot guarantee the security of data transmitted electronically over the Internet.

Retention

We will retain your personal information only for as long as we need it for the purposes described in this privacy statement unless we are required by law, regulation or our professional obligations to retain it for a longer period.

Children

Our applications are not intentionally designed for or directed at children, and our terms and conditions of use require all users to be above the age of majority in their local country. We never knowingly collect or maintain personal information about individuals under the age of 18.

Changes to this privacy statement

We may update this privacy statement at any time by publishing an updated version here. So, you know when we make changes, we will amend the last revision date at the top of this page. The new modified privacy statement will apply from that revision date. Therefore, we encourage you to review this privacy statement periodically to be informed about how we are protecting your information.

How to deactivate your account

Users of this application may request their account be deactivated at any time by sending their request to their PwC contact.

Your legal rights in relation to your personal data

You may have certain rights under your local law in relation to the personal information we hold about you.

In particular, you may have the legal rights listed below.

Obtain confirmation as to whether we process personal data about you, access a copy of your personal data and obtain certain other information, including why we process it and recipients of personal data.

Request rectification of personal data if it is inaccurate (for example, if you change your address) and to have incomplete personal data completed.

Delete/erase your personal data in the following cases:

- The personal data is no longer necessary in relation to the purposes for which it was collected and processed;

- Our legal ground for processing is consent, you withdraw consent, and we have no other lawful basis for the processing;

- Our legal ground for processing is that the processing is necessary for legitimate interests pursued by us or a third party, you object to the processing, and we do not have overriding legitimate grounds;

- You object to processing for direct marketing purposes;

- Your personal data has been unlawfully processed; or

- Your personal data must be erased to comply with a legal obligation to which we are subject.

Restrict personal data processing in the following cases:

- For a period enabling us to verify the accuracy of personal data where you have contested the accuracy of the personal data;

- Your personal data have been unlawfully processed, and you request restriction of processing instead of deletion;

- Your personal data is no longer necessary in relation to the purposes for which it was collected and processed but the personal data is required by you to establish, exercise or defend legal claims; or

- For a period enabling us to verify whether the legitimate grounds relied on by us override your interests where you have objected to processing based on it being necessary for the pursuit of a legitimate interest identified by us.

Object to the processing of your personal data in the following cases:

- Our legal ground for processing is that the processing is necessary for a legitimate interest pursued by us or a third party; or

- Our processing is for direct marketing purposes.

Data portability

- The right to receive your personal data provided by you to us and the right to transmit the data to another organisation (or ask us to do so if technically feasible) where our lawful basis for processing the personal data is consent or necessity for the performance of our contractual relationship with you and the processing is carried out by automated means.

Withdraw your consent

- Where we process personal data based on consent, you have the right to withdraw consent at any time. We do not generally process personal data based on consent (as we can usually rely on another legal basis). Please note that withdrawing consent does not affect the lawfulness of processing done before the withdrawal. Please also note that if you withdraw consent, this may affect our ability to provide the services you have requested.

If you believe the processing of your personal data violates applicable laws, you may have the right to lodge a complaint with the data protection supervisory authority in the location where you normally reside or normally work, or the location where the alleged infringement occurred.

Contact Us

Please submit a request to exercise a legal right in relation to your personal data, or an enquiry if you have a question or complaint about handling of your personal data.

Item added to your cart