Privacy Policy

1. Who we are

ZA Corp Technical Services ("ZA Corp", "we", "us") is a South African business based in Jeffreys Bay, Eastern Cape that provides technical automation, integration and consulting services to small and medium enterprises.

For the purposes of POPIA, ZA Corp is the Responsible Party for the personal information collected via this website and our service engagements.

Information Officer: The Information Officer of ZA Corp Technical Services
Information Regulator Registration No.: 2026-011129 (registered 2026-04-29)
Contact route: via the contact form on this website

2. What information we collect

We collect personal information that you voluntarily provide to us, and a limited set of technical information automatically when you visit this site.

• From the contact form: name, email address, phone number (optional), the nature of your enquiry.
• From an engagement: contact details for nominated stakeholders, billing information, project documentation you choose to share with us.
• Automatically: IP address, browser user-agent, pages viewed, referring URL, approximate location based on IP, device type. This is collected for security and for understanding which content is useful.

We do not collect Special Personal Information (race, health, biometrics, etc.) and ask that you do not share it with us unless it is strictly necessary to deliver a service you have engaged us for.

3. Why we collect it (purpose specification)

• To respond to your enquiry and discuss potential work.
• To deliver the services you engage us for, including communication about progress, deliverables and invoices.
• To meet our legal and regulatory obligations (tax, accounting, retention).
• To improve this website and the relevance of our content.
• To protect this website and our systems from fraudulent or harmful activity.

4. Lawful basis for processing

We process your personal information on one or more of the following lawful grounds, as set out in section 11 of POPIA:

• Consent — when you submit our contact form or accept non-essential cookies.
• Performance of a contract — when we are delivering services you have engaged us for.
• Compliance with a legal obligation — for tax, accounting and regulatory reporting.
• Legitimate interests — for security, fraud prevention, and improving our services, balanced against your reasonable expectations.

5. Who we share your information with

We do not sell your personal information. We share it only with operators (in POPIA terms) that we have engaged to support our services, under written data-processing agreements:

• Zoho Corporation — for customer relationship management, accounting, mail and project tracking. Data is hosted in the European Union datacentre region.
• Hostinger — for domain and supporting infrastructure services.
• Cloudflare — for content delivery and DDoS protection on customer-facing surfaces.
• Payment providers (such as PayFast, Stripe, or banks) — only the information needed to process a payment you have authorised.
• SARS and other regulators — when required by law.

6. International transfers

Some of our operators are located outside South Africa, including in the European Union and the United States. We rely on the protection afforded by these jurisdictions' data protection laws (notably the EU General Data Protection Regulation), the operators' published data processing agreements, and contractual safeguards to ensure your information receives an equivalent level of protection.

7. How long we keep your information

We retain personal information only as long as is necessary for the purpose it was collected for, or as required by law:

• Contact-form enquiries that do not become engagements: up to 24 months, then deleted.
• Active engagement records: for the duration of the engagement and a further 5 years, in line with retention requirements under the Companies Act and tax legislation.
• Anonymised analytics: indefinitely.

8. Your rights as a data subject

Under POPIA, you have the right to:

• Access the personal information we hold about you.
• Request correction of information that is inaccurate or out-of-date.
• Request deletion of information that is no longer required for the purpose it was collected.
• Object to processing, including for direct marketing.
• Withdraw consent at any time, where consent is the lawful basis for processing.
• Lodge a complaint with the Information Regulator if you believe we have not handled your information lawfully.

To exercise any of these rights, send a request through the contact form. We will respond within a reasonable period and at no charge for ordinary requests.

9. Cookies

This website uses a small number of cookies and similar storage mechanisms. Essential storage (used to remember your cookie preferences) is set without consent. Any additional cookies (analytics, embeds) are set only after you have accepted them on first visit.

You can change your cookie preferences at any time by clearing this site's data in your browser, after which the consent banner will appear again.

10. Security

We take reasonable technical and organisational measures to protect personal information from loss, unauthorised access, disclosure, alteration or destruction. Measures include encryption in transit, access controls on our systems, two-factor authentication for staff accounts, and ongoing review of our security posture.

No method of transmission over the internet is 100% secure. If you become aware of a security incident affecting your information held by us, please notify us through the contact form as soon as possible.

11. Changes to this policy

We may update this policy from time to time to reflect changes in our practice or in applicable law. The "Last updated" date at the top of this page will reflect the most recent change. Material changes will be communicated through this website.

12. Complaints

If you are not satisfied with how we have handled your personal information, you have the right to lodge a complaint with the Information Regulator of South Africa:

Information Regulator (South Africa)
Email: complaints.IR [at] justice.gov.za
Website: inforegulator.org.za