Privacy Policy

We are business engineers first, who develop client-specific strategic capabilities through modern, purpose-fit software development.

Section 18 of POPIA requires from us to ensure you are aware of the following:

• Your personal information may be processed by us in line with the purpose that it was provided by you for and will be used solely for this purpose
• The provision of your personal information is not mandatory, however, failure to provide us with your information as requested may severely prejudice our ability to provide our services

By engaging our services, you therefore consent to us processing your personal information in line with the purpose for which it was provided to us.

As a data subject, you have the right to:

1. Be informed that your personal information is being collected
2. Be informed that your personal information has been accessed by an unauthorised person
3. Establish whether we hold your personal information and request access thereto
4. Request deletion, destruction or correction of your personal information
5. Object to the processing of your personal information (on reasonable grounds)
6. Object to the processing of your personal information for purposes of direct marketing
7. Not be subject to a decision based solely on the automated processing of your personal information
8. Submit a complaint to the Information Regulator
9. Institute civil proceedings regarding an alleged interference with your personal information

We have implemented comprehensive security measures to protect your personal information:

Electronic Data Protection:

• Password-protected and secure Wi-Fi network
• Protected and securely locked server
• Trusted cloud-based software with high security standards
• Strong passwords reviewed frequently
• Access control and lock screens on all devices
• Daily backups with secure storage
• Regular cloud-based backups
• Regular software updates
• Employee training and awareness programs

Physical Safeguards:

• Multi-level access control
• 24-hour armed response
• Security guards patrolling office areas
• Secure office park location
• Alarm system
• Securely locked access points

In the unlikely event of a data breach, we will take the following steps:

1. Notify our IT manager or service provider
2. Conduct internal analysis to establish:
   • Whether there was in fact a breach
   • What data, if any, was compromised
   • Which parties were affected
   • The extent of the compromise
3. Draft an internal report with IT service providers
4. Notify affected persons of the breach
5. Notify the Information Regulator
6. Notify our insurers
7. Cooperate to prevent processing of compromised data
8. Review safeguarding structures to prevent reoccurrence

In conducting our business activities, we may transmit personal information to other countries. We do not transfer special personal information to foreign countries. We ensure that cross-border transmission complies with POPIA standards or higher standards as required in destination countries (e.g., GDPR in the European Union).

We will not send your personal information abroad unless:

• Consent has been provided
• It is required to perform in terms of a contract
• The foreign laws are equally or more strict than those contained in POPIA

We will only process personal information of children where consent has been provided by a competent person (parent or guardian) or where otherwise authorised by POPIA. We acknowledge that the processing of children's information involves great risk, and we take special care to protect this information.

We will retain your personal information only for as long as necessary to fulfil the purposes for which it was collected, or for as long as retention is required by applicable law. We will not retain personal information longer than reasonably necessary.

Once the applicable retention period has expired, we will take all reasonably practicable steps to ensure that your personal information is securely destroyed, deleted, or de-identified in a manner that prevents its reconstruction.