Privacy Policy

1. Information We Collect

We collect the following categories of personal information:

• Contact information: Name, email address, phone number, company name, and physical address.
• Account information: Login email, role assignment, and session data.
• Business information: VAT number, billing details, and payment history.
• Usage data: Pages visited, features used, and interaction logs within the platform.
• Communication records: Messages, support tickets, and form submissions.

2. Lawful Basis for Processing

We process your personal information on the following lawful bases:

• Consent: You have given clear consent for us to process your personal information for specific purposes.
• Legitimate interest: Processing is necessary for the performance of a contract, compliance with a legal obligation, or our legitimate business interests (such as providing services, preventing fraud, and maintaining security).

3. How We Store and Secure Data

All personal information is stored on secure, encrypted servers. We implement industry-standard security measures including:

• Encryption in transit (TLS/SSL) and at rest.
• Role-based access control (RBAC) with row-level security policies.
• Regular security audits and vulnerability assessments.
• Session token management with automatic expiry.
• Separation of admin and client access at the API level.

4. Data Sharing

We do not share your personal information with third parties without your consent, except where required by law or necessary to provide the services you have requested. We do not sell your personal information to any third party.

5. Your Rights as a Data Subject

Under POPIA, you have the right to:

• Access the personal information we hold about you.
• Request correction of inaccurate or incomplete information.
• Request deletion of your personal information (subject to legal retention requirements).
• Object to the processing of your personal information.
• Withdraw consent at any time.

To exercise these rights, contact our Information Officer at infoprimedesksa@gmail.com.

6. Information Officer

Our Information Officer can be contacted at:

Email: infoprimedesksa@gmail.com
Phone: +27 72 932 7257

7. Complaints

If you believe we have not handled your personal information in accordance with POPIA, you have the right to lodge a complaint with the Information Regulator:

Information Regulator (South Africa)
Website: inforegulator.org.za
Email: complaints@inforegulator.org.za

8. Data Retention

We retain personal information only for as long as necessary to fulfil the purposes for which it was collected, including legal, accounting, and reporting requirements. Client data is retained for the duration of the business relationship and for a period of 5 years thereafter, unless a longer retention period is required by law.

9. Updates to This Policy

We may update this Privacy Policy from time to time. The date of the last update is shown at the top of this page. We will notify you of any material changes.