Privacy policy

Draft: this page will be reviewed before the website goes live.

Version 1. This policy explains how IsangoTech handles your personal information under the Protection of Personal Information Act (POPIA).

What we collect

When you contact us or fill in a form, we collect only what we need to help you:

Why we use it

We don't sell your information, and we don't use it for anything you haven't agreed to.

Where it's stored

Our systems run on Supabase, which stores data in data centres in the European Union or the United Kingdom, because it has no South African region. That means your information is transferred outside South Africa. We only use providers bound by a data processing agreement that protects your information to a standard at least as high as POPIA requires.

How long we keep it

If you don't become a client, we anonymise your details after 12 months without contact. If you do become a client, we keep your records for as long as we work together and as long as the law requires for financial records afterwards.

How we protect it

Only our staff can see your information. They sign in with a password and a second check on their phone, and each person sees only what their work needs. We keep a record of who changes or exports information, and access is removed the day someone leaves.

Your rights

You can ask us at any time to:

Contact us using the details on our contact page. If you're not happy with our response, you can complain to the Information Regulator at inforegulator.org.za.

If something goes wrong

If we ever discover that your information has been accessed without permission, we'll contain it, assess it, and notify you and the Information Regulator as POPIA requires.

Cookies

This website doesn't use tracking or advertising cookies, and our fonts are served from our own site. Our spam check (Cloudflare Turnstile) runs only on our forms, to tell people from bots. The map on our contact page loads from Google, which may set cookies, only if you choose to show it.