Privacy Policy

1. Information We Collect

We may collect the following categories of personal information:

Information You Provide

• Contact Information: Name, email address, phone number, company name when you submit our contact form or request a quote
• Enquiry Details: The nature of your enquiry and any information you choose to include in your message
• Service Information: Details about your IT environment when you complete our IT Health Check or assessments
• Training Records: Name, email address, and organisation when you register for our cybersecurity awareness training, together with your module progress, quiz scores, and certificate status

Information Collected Automatically

• Device Information: Browser type, operating system, and device type
• Usage Data: Pages visited, time spent on pages, and navigation patterns
• IP Address: For security and analytics purposes

2. Purpose of Processing

We process your personal information for the following purposes:

• To respond to your enquiries and provide customer support
• To provide IT services and support as requested
• To send you quotes, proposals, and service information
• To improve our website and services
• To comply with legal obligations
• To protect our legitimate business interests

3. Legal Basis for Processing

Under POPIA, we process your personal information based on:

• Consent: When you voluntarily submit information through our forms
• Contract: When necessary to provide services you have requested
• Legitimate Interest: For business operations, security, and service improvement
• Legal Obligation: When required by South African law

4. Data Sharing and Third Parties

We do not sell your personal information. We may share your information with:

• Service Providers: Technology vendors who assist in delivering our services (e.g., Microsoft, Google)
• Business Partners: Only when necessary to fulfil service requests
• Legal Authorities: When required by law or to protect our rights

All third parties are required to protect your information in accordance with POPIA.

5. Data Retention

We retain your personal information only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. Typical retention periods:

• Contact form submissions: 3 years from last contact
• Client records: Duration of business relationship plus 5 years
• Website analytics: 26 months
• Cybersecurity training records: 12 months from registration, after which they are permanently deleted

6. Your Rights Under POPIA

You have the following rights regarding your personal information:

• Access: Request a copy of your personal information
• Correction: Request correction of inaccurate information
• Deletion: Request deletion of your personal information
• Objection: Object to processing of your personal information
• Withdrawal of Consent: Withdraw consent at any time where processing is based on consent

To exercise any of these rights, please contact our Information Officer.

7. Security Measures

We implement appropriate technical and organisational measures to protect your personal information, including:

• Encryption of data in transit (HTTPS/TLS)
• Secure data storage with access controls
• Regular security assessments
• Staff training on data protection

8. Cookies

Our website uses cookies to improve your browsing experience. We use:

• Essential Cookies: Required for website functionality
• Analytics Cookies: Help us understand how visitors use our site

You can control cookies through your browser settings. Disabling cookies may affect website functionality.

9. Information Officer

For any privacy related enquiries or to exercise your rights under POPIA, please contact our Information Officer:

10. Complaints

If you believe your personal information has been processed unlawfully, you have the right to lodge a complaint with the Information Regulator:

11. Changes to This Policy

We may update this Privacy Policy from time to time. The updated version will be indicated by the "Last Updated" date at the top of this page. We encourage you to review this policy periodically.