Privacy Policy
POPIA Compliant Data Protection and Privacy Practices
Last Updated: July 21, 2025
This Privacy Policy complies with the Protection of Personal Information Act 4 of 2013 (POPIA)
1. Introduction
Dev-iT ("we," "our," or "us") is committed to protecting your privacy and personal information in accordance with the Protection of Personal Information Act 4 of 2013 (POPIA) and other applicable South African legislation.
This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our website, services, or interact with us.
2. Information We Collect
2.1 Personal Information You Provide
We collect information you voluntarily provide to us, including:
- Contact information (name, email address, phone number)
- Company or business information
- Project requirements and specifications
- Communication preferences
- Any other information you choose to provide in forms or communications
2.2 Information Automatically Collected
When you visit our website, we may automatically collect:
- IP address and location information
- Browser type and version
- Operating system
- Pages visited and time spent on our website
- Referral sources
- Device information
2.3 Cookies and Tracking Technologies
We use cookies and similar technologies to enhance your experience, analyse website usage, and provide relevant content. You can control cookie settings through your browser preferences.
3. How We Use Your Information
We process your personal information for the following lawful purposes:
3.1 Service Provision
- Responding to inquiries and providing quotes
- Delivering contracted services
- Project management and communication
- Technical support and maintenance
3.2 Business Operations
- Processing payments and invoicing
- Maintaining client relationships
- Improving our services and website
- Compliance with legal obligations
3.3 Marketing Communications (with consent)
- Sending newsletters and service updates
- Providing information about new services
- Industry insights and relevant content
4. Legal Basis for Processing
We process your personal information based on:
- Consent: When you explicitly agree to processing for specific purposes
- Contract: When processing is necessary for service delivery
- Legitimate Interest: For business operations that don't override your privacy rights
- Legal Obligation: When required by South African law
5. Information Sharing and Disclosure
We do not sell, trade, or rent your personal information to third parties. We may share information only in the following circumstances:
5.1 Service Providers
We may share information with trusted third-party service providers who assist in:
- Website hosting and maintenance
- Email communication services
- Payment processing
- Technical support services
5.2 Legal Requirements
We may disclose information when required by law, court order, or to protect our rights and interests.
5.3 Business Transfers
In the event of a business sale or transfer, personal information may be transferred to the new entity with appropriate safeguards.
6. Data Storage and Security
6.1 Security Measures
We implement appropriate technical and organisational measures to protect your information:
- Encryption of data in transit and at rest
- Secure servers and databases
- Access controls and authentication
- Regular security assessments
- Staff training on data protection
6.2 Data Retention
We retain personal information only as long as necessary for the purposes for which it was collected, or as required by law. Generally:
- Client project data: 7 years after project completion
- Marketing communications: Until consent is withdrawn
- Website analytics: 2 years maximum
- Financial records: As required by South African tax law
7. Your Rights Under POPIA
As a data subject, you have the following rights:
Access
Request access to personal information we hold about you
Correction
Request correction of inaccurate or incomplete information
Deletion
Request deletion of your personal information
Objection
Object to processing of your personal information
Restriction
Request restriction of processing in certain circumstances
Portability
Request transfer of your data to another party
To exercise these rights, please contact us using the details provided below.
8. Children's Privacy
Our services are not directed to children under 18 years of age. We do not knowingly collect personal information from children under 18. If we become aware that we have collected personal information from a child under 18, we will take steps to delete such information.
9. International Transfers
We primarily process data within South Africa. Any international transfers will be conducted in accordance with POPIA requirements and appropriate safeguards will be implemented.
10. Updates to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by:
- Posting the updated policy on our website
- Updating the "Last Updated" date
- Sending notification to registered users when appropriate
11. Contact Information
If you have questions about this Privacy Policy or wish to exercise your rights, please contact us:
Information Officer
Dev-iT
Email: privacy@dev-it.co.za
General Email: info@dev-it.co.za
Information Regulator
If you believe we have not adequately addressed your concerns, you may lodge a complaint with the Information Regulator:
Website: www.justice.gov.za/inforeg/
Email: inforeg@justice.gov.za
12. Consent
By using our website and services, you acknowledge that you have read and understood this Privacy Policy. Where required by law, we will obtain your explicit consent before processing your personal information.
POPIA Compliance Statement
This Privacy Policy has been designed to comply with the Protection of Personal Information Act 4 of 2013 (POPIA) and its regulations. We are committed to processing personal information lawfully, fairly, and transparently.