Legal & Compliance

Privacy Policy

How Global ICT Technologies collects, uses, stores and protects your personal information.

Last updated: 15 May 2025 Jurisdiction: Republic of South Africa Compliant with POPIA (Act 4 of 2013)

This Privacy Policy is issued by Global ICT Technologies (Pty) Ltd in compliance with the Protection of Personal Information Act, 4 of 2013 (POPIA) and applies to all personal information processed by us in the course of our business activities.

1. Responsible Party

The Responsible Party for your personal information is:

Our designated Information Officer is responsible for ensuring compliance with POPIA. Queries may be directed to info@globalict.co.za.

2. Information We Collect

Information you provide directly

  • Full name and contact details (email address, telephone number)
  • Company name and job title
  • Enquiry details and service requirements submitted via our contact form
  • Correspondence and communications with our team

Information collected automatically

  • IP address and browser type (logged by our web server for security purposes)
  • Pages visited and time spent on the site (via Google Analytics, if enabled)
  • Form submission timestamps (for rate-limiting and spam prevention)
  • reCAPTCHA interaction data (processed by Google — see Section 8)

Information we do NOT collect

We do not collect special personal information as defined by POPIA (i.e. race, religion, health data, biometric information, sexual orientation, or criminal records) through this website.

3. Lawful Basis for Processing

We process your personal information only when at least one of the following lawful grounds applies:

  • Consent: You have given us clear consent by submitting our contact form or entering into correspondence with us.
  • Contractual necessity: Processing is necessary to take steps at your request prior to entering into a contract, or to perform a contract we have with you.
  • Legitimate interests: Processing is necessary for our legitimate business interests (e.g. responding to enquiries, preventing fraud, maintaining website security), provided these are not overridden by your rights.
  • Legal obligation: Processing is necessary to comply with a legal obligation to which we are subject.

4. Purpose of Processing

We process your personal information for the following purposes:

  • Responding to enquiries and requests for quotes submitted through our website
  • Providing ICT products and services you have engaged us for
  • Sending you service-related communications and invoices
  • Sending you marketing communications about our services, where you have consented or where permitted by law (you may opt out at any time)
  • Improving our website and services through analytics
  • Preventing fraud, spam and unauthorised access to our systems
  • Complying with legal and regulatory obligations

We will not process your information for any purpose incompatible with the purposes listed above without your prior consent.

5. Sharing of Information

We do not sell, rent or trade your personal information to third parties. We may share your information only in the following limited circumstances:

  • Service providers: Third-party providers who assist us in operating our business (e.g. hosting providers, email services), subject to confidentiality obligations and POPIA-compliant data processing agreements.
  • Technology partners: Where delivering a solution requires engagement with a vendor or partner (e.g. Microsoft, Sophos), only the information necessary for that purpose will be shared.
  • Google reCAPTCHA: Our contact form uses Google reCAPTCHA v3, which processes interaction data subject to Google's Privacy Policy.
  • Legal requirements: Where we are required to disclose information by law, court order or competent authority.
  • Business transfers: In the event of a merger, acquisition or sale of assets, your information may be transferred subject to equivalent privacy protections.

6. Retention of Information

We retain your personal information only for as long as necessary to fulfil the purposes for which it was collected, or as required by law:

  • Contact form enquiries: Retained for up to 3 years for business relationship management purposes
  • Client records: Retained for a minimum of 5 years as required by the Companies Act and tax legislation
  • Server logs (IP addresses): Retained for up to 90 days for security monitoring purposes
  • Marketing opt-ins: Retained until you withdraw consent

When information is no longer required, it is securely deleted or anonymised.

7. Security Measures

We take the security of your personal information seriously and implement appropriate technical and organisational measures to protect it, including:

  • SSL/TLS encryption on all web communications (HTTPS)
  • Server-side input validation and sanitisation on all form submissions
  • Honeypot spam filtering and rate limiting on contact forms
  • reCAPTCHA v3 bot detection
  • Access controls limiting staff access to personal information on a need-to-know basis
  • Regular security monitoring of our hosting environment

While we take all reasonable precautions, no method of transmission over the internet is 100% secure. In the event of a data breach that poses a risk to your rights, we will notify the Information Regulator and affected data subjects as required by POPIA.

8. Cookies

Our website uses the following cookies and similar technologies:

  • Session cookies: Temporary cookies used for rate-limiting on our contact form. These expire when you close your browser.
  • Google reCAPTCHA: Sets cookies to distinguish humans from bots. These are subject to Google's Privacy Policy.
  • Analytics cookies: If Google Analytics is enabled, it sets cookies to collect anonymised usage statistics. You may opt out via the Google Analytics Opt-out Browser Add-on.

You may control cookies through your browser settings. Disabling cookies may affect the functionality of our contact form.

9. Your POPIA Rights

As a data subject under POPIA, you have the following rights with respect to your personal information:

Right of Access

Request a copy of the personal information we hold about you (POPIA Section 23).

Right to Rectification

Request correction of inaccurate or incomplete personal information (Section 24).

Right to Erasure

Request deletion of your personal information, subject to legal retention obligations (Section 24).

Right to Object

Object to the processing of your information for direct marketing purposes at any time (Section 11).

Right to Withdraw Consent

Where processing is based on consent, withdraw it at any time without affecting prior processing.

Right to Complain

Lodge a complaint with the Information Regulator of South Africa if you believe we have violated POPIA.

To exercise any of these rights, contact us at info@globalict.co.za. We will respond within 30 days. We may require proof of identity before processing your request.

You may also contact the Information Regulator directly:

10. Children's Privacy

Our website and services are directed at businesses and adults. We do not knowingly collect personal information from persons under the age of 18. If you believe we have inadvertently collected such information, please contact us immediately so we can delete it.

11. Changes to this Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The "Last updated" date at the top of this page will be revised accordingly. Material changes will be communicated via a notice on our website. Continued use of our website after any changes constitutes acceptance of the updated policy.

12. Contact & Complaints

For any questions, requests or complaints relating to this Privacy Policy or how we handle your personal information, please contact our Information Officer:

Global ICT Technologies — Information Officer

Global ICT Technologies (Pty) Ltd · Reg. 2019/084939/07

829 Frhensch St, Moreleta Park, Pretoria

We take privacy complaints seriously and will respond within 30 days. If you are not satisfied with our response, you have the right to escalate your complaint to the Information Regulator of South Africa.