Legal

Privacy policy

Last updated: March 2025

1. Who we are

This website is operated by Rhentech Pty Ltd, registered in the Republic of South Africa. When we refer to "we", "us", or "our" in this policy, we mean Rhentech Pty Ltd.

We provide cybersecurity audits, managed cybersecurity services, and strategic IT consulting to organisations across South Africa.

2. What data we collect

We collect only the personal data you voluntarily provide through the contact form on our website. This may include:

  • Your name
  • Company name
  • Email address
  • Phone number (optional)
  • The content of your message
  • Your area of interest (e.g. Audit, Managed Services, Consulting)

We do not collect data through analytics tools, tracking pixels, or third-party advertising scripts. This is a static website with no server-side data collection beyond form submissions.

3. How we use your data

We use the personal data you provide to:

  • Respond to your enquiry or request
  • Provide the services you have asked about
  • Send relevant follow-up information related to your enquiry
  • Improve our services and communications

We will never use your data for unsolicited marketing. If we wish to send you updates beyond the scope of your original enquiry, we will seek your explicit consent first.

4. Legal basis for processing

Under the Protection of Personal Information Act, 2013 (POPIA), we process your personal information in accordance with the eight conditions for lawful processing. The conditions most directly relevant to our handling of your enquiry are:

  • Accountability (s.8) — we, as the responsible party, take responsibility for compliance with the conditions for lawful processing in relation to the information you provide.
  • Processing limitation (s.9–12) — we process only the personal information that is adequate, relevant and not excessive for the purpose of responding to your enquiry, and only with a lawful justification — typically your consent in submitting the form, or our legitimate interest in responding to a business enquiry you have initiated.
  • Purpose specification (s.13–14) — we collect your personal information for the specific, explicitly defined and lawful purpose of replying to your enquiry and providing information about our services, and we do not retain it for longer than necessary.
  • Further processing limitation (s.15) — we will not process your personal information for any purpose that is incompatible with the purpose for which it was originally collected.
  • Information quality (s.16) — we take reasonably practicable steps to ensure that the personal information we hold is complete, accurate, not misleading and kept up to date.
  • Openness (s.17–18) — this policy is part of how we discharge our openness obligations under POPIA. We will tell you what we hold, why we hold it and who else we share it with, on request.
  • Security safeguards (s.19–22) — we maintain appropriate technical and organisational measures to secure the integrity and confidentiality of your personal information, and will notify the Information Regulator and affected data subjects under section 22 if there are reasonable grounds to believe your personal information has been accessed or acquired by an unauthorised person.
  • Data subject participation (s.23–25) — you have the right to ask whether we hold personal information about you, to request access to it, and to request its correction or deletion in line with section 24.

5. Data sharing

We do not sell, rent, or trade your personal data to any third party.

Form submissions are processed by Formspree (Formspree, Inc.), which acts as a data processor on our behalf. Formspree receives and transmits your form data so that we can respond to your enquiry. You can review Formspree's privacy policy at formspree.io/legal/privacy-policy.

Our website is hosted on Cloudflare Pages. Cloudflare may process limited technical data (such as IP addresses) as part of delivering the website. Cloudflare acts as a data processor in this context. You can review Cloudflare's privacy policy at cloudflare.com/privacypolicy.

6. Data retention

We retain enquiry data (form submissions) for a maximum of 2 years from the date of submission. After this period, your data is securely deleted.

If your enquiry leads to a service engagement, data related to that engagement will be retained in accordance with our contractual obligations and applicable legal requirements.

7. Your rights

Under POPIA, you have the following rights regarding your personal information:

  • Right of access (s.23) — request confirmation of whether we hold personal information about you, and request a copy of that information.
  • Right to correction or deletion (s.24) — request that we correct or delete personal information that is inaccurate, irrelevant, excessive, out of date, incomplete, misleading or obtained unlawfully.
  • Right to object (s.11(3)) — object, on reasonable grounds relating to your particular situation, to the processing of your personal information.
  • Right to withdraw consent (s.11(2)) — withdraw any consent you have given, at any time, where consent was the legal basis for processing.
  • Right not to be subject to automated decision-making (s.71) — not be subject to a decision based solely on automated processing of your personal information that has legal or similarly significant effects, save for the limited exceptions set out in section 71.
  • Right to complain (s.74) — submit a complaint to the Information Regulator if you believe we have not handled your personal information in line with POPIA.

In addition to your POPIA rights, the Promotion of Access to Information Act, 2000 (PAIA) gives you a separate statutory route to request access to records we hold. PAIA requests are handled in line with our PAIA manual, available on request via our contact page.

To exercise any of these rights, please contact us via our contact page.

If you are not satisfied with our response, you have the right to lodge a complaint with the Information Regulator of South Africa:

8. Cookies

This website is a static site and does not set any first-party cookies for analytics, tracking, or advertising purposes.

Cloudflare, our hosting and CDN provider, may set functional cookies (such as __cflb or __cf_bm) to manage load balancing and bot protection. These are strictly necessary cookies and do not track your activity across other websites. You can learn more about Cloudflare's cookies at Cloudflare's cookie documentation.

9. Contact

If you have any questions about this privacy policy or how we handle your data, please get in touch via our contact page.

Rhentech Pty Ltd
Registered in South Africa