Privacy Policy

1. Introduction & Scope

Afrithink Technologies Pty Ltd ("Afrithink", "we", "us", or "our") is dedicated to safeguarding your privacy and respecting the confidentiality of your personal information. This Privacy Policy details how we collect, use, store, share, and protect your personal data when you visit our website, engage our digital and IT consulting services, or interact with us.

This policy adheres strictly to the Protection of Personal Information Act No. 4 of 2013 ("POPIA"), the Electronic Communications and Transactions Act ("ECTA"), and applicable international data protection standards.

2. Responsible Party

Under POPIA, Afrithink Technologies Pty Ltd operates as the designated Responsible Party regarding all personal data processed via our platforms and service engagements.

3. Information We Collect

We only collect personal information that is adequate, relevant, and necessary for our business engagements and technical services. Such information may include:

• Identity & Contact Details: Full name, company name, job title, email address, physical address, and telephone number.
• Service & Technical Specifications: Project requirements, IT infrastructure parameters, user logs, enterprise software environment details, and correspondence history.
• Billing & Transactional Data: Invoicing details, VAT numbers, transaction histories, and authorized payment records.
• Digital & Telemetry Data: IP addresses, browser types, device information, operating system characteristics, and website interaction metrics collected via cookies.

4. Purpose of Processing

We process your personal information for lawful business objectives, including but not limited to:

• Delivering, managing, and maintaining our software, cybersecurity, web development, and cloud services.
• Preparing service proposals, contracts, project milestones, and processing accounting records.
• Responding promptly to inquiries, technical support tickets, and consultation requests.
• Ensuring systems integrity, network security, and preventing fraudulent or unauthorized activities.
• Complying with statutory, tax, auditing, and corporate governance requirements under South African law.

5. POPIA Compliance & Legal Grounds

In accordance with Section 11 of POPIA, all personal data processing is justified on one or more of the following legal grounds:

6. Third-Party Disclosures & Cross-Border Transfers

We do not sell, rent, or trade your personal information. We may share data strictly with:

• Operators and Service Providers: Trusted third-party vendors, cloud infrastructure hosts, and technical partners bound by formal written operator agreements complying with Section 21 of POPIA.
• Statutory Authorities: Law enforcement agencies, regulators, or judicial courts when legally obligated by South African statutes.

Where personal data is transferred across borders (e.g. cloud hosting servers located outside South Africa), we ensure that the recipient territory enforces data protection laws providing an adequate level of protection substantially similar to POPIA (pursuant to Section 72 of POPIA).

7. Information Security & Data Retention

Afrithink employs industry-standard technical, organisational, and physical safeguards to secure personal information against loss, unauthorized access, disclosure, alteration, or destruction. These measures include encrypted communications, access-controlled facilities, regular security audits, and firewall defenses.

Personal data is retained only for as long as necessary to fulfill the purposes for which it was gathered, or as required by South African statutory retention rules (such as the Companies Act and tax legislation). Once no longer required, data is de-identified or destroyed securely.

8. Your Data Subject Rights

Under Chapter 3 of POPIA, you possess specific rights regarding your personal records held by Afrithink:

• Right of Access: You may request confirmation of whether we hold personal data about you and obtain a copy of that record.
• Right to Correction & Deletion: You may request the correction, amendment, or deletion of personal data that is inaccurate, irrelevant, outdated, or unlawfully obtained.
• Right to Object: You have the right to object to the processing of personal data on reasonable grounds relating to your particular situation.
• Right to Complain: You may submit a complaint directly to the South African Information Regulator if you believe your rights under POPIA have been infringed.

To exercise any of these rights, please submit a formal request to our Information Officer using the contact channels specified below.

9. Cookies & Digital Tracking

Our website utilizes cookies and similar tracking technologies to enhance user browsing experience, analyze site traffic, and support technical functionality. You can adjust your browser settings to refuse cookies; however, some features of the website may not function as intended.