DitungaICT
☰
Legal

Privacy & POPIA Notice

How DitungaICT collects, uses, shares and protects personal information under South Africa’s Protection of Personal Information Act, 2013 (POPIA).

Last updated: June 2026

This notice explains how DitungaICT processes personal information when you contact us, request a quotation, or receive our managed IT, connectivity and related services. We aim to process personal information lawfully, fairly and transparently.

1. Responsible party

DitungaICT is the responsible party for the personal information described here.

Privacy enquiries and data subject requests can be sent to info@ditungaict.co.za.

2. Personal information we collect

Depending on how you interact with us, we may collect:

  • Contact and identification details such as your name, company, job title, email address and telephone number.
  • The content of enquiries, support requests and correspondence, including the service you are interested in and details about your IT environment.
  • Account and billing details where you become a client, and records of the services we provide to you.
  • Technical information collected automatically when you visit our website (see “Cookies and analytics” below).

In the course of delivering managed IT services we may also process personal information contained within client systems, mailboxes or backups on our clients’ behalf. Where we do so, the client is the responsible party and we act as an operator under their instructions.

3. Source of information

We usually collect personal information directly from you — for example when you complete our contact form, email us, call us, or enter into a service agreement. In some cases we may receive information from your employer or from publicly available business sources.

4. Purposes for processing

We process personal information to:

  • respond to your enquiries and provide quotations;
  • deliver, support, maintain and improve our services;
  • manage our client relationship, billing and administration;
  • meet legal, regulatory and contractual obligations; and
  • protect the security of our systems and those of our clients.

5. Lawful basis for processing

We rely on one or more of the justifications recognised by POPIA, including: processing necessary to conclude or perform a contract with you; compliance with a legal obligation; the pursuit of our legitimate interests (such as responding to enquiries and securing our systems) balanced against your rights; and, where required, your consent.

6. Service providers and operators

We use trusted third parties to help us operate — for example hosting, connectivity, email, backup, security and software vendors and distributors that form part of our supply ecosystem. These parties process personal information only as needed to provide their service to us, under appropriate confidentiality and security obligations. We do not sell personal information.

7. Cross-border transfers

Some of the cloud and software services we use may store or process personal information outside South Africa. Where this happens, we take reasonable steps to ensure the information receives a level of protection consistent with POPIA.

8. Security safeguards

We maintain reasonable technical and organisational measures to protect personal information against loss, unauthorised access and misuse. No method of transmission or storage is completely secure, but we work to protect information appropriately and to address any incident responsibly.

9. Retention

We keep personal information only for as long as necessary to fulfil the purposes above, or as required by applicable law, contract or legitimate business need, after which it is deleted or anonymised.

10. Your rights as a data subject

Subject to applicable law, you have the right to:

  • request access to the personal information we hold about you;
  • request correction or deletion of your personal information;
  • object to processing in certain circumstances; and
  • withdraw consent where processing is based on consent.

To exercise these rights, contact us at info@ditungaict.co.za. We may need to verify your identity before responding.

11. Direct marketing

We do not send unsolicited electronic marketing. Where we send service or marketing communications, you may opt out at any time by contacting us or using the unsubscribe option in the message.

12. Cookies and analytics

Our website may use essential cookies and limited analytics to understand how the site is used and to improve it. You can control or block cookies through your browser settings; doing so may affect some site functionality.

13. Complaints to the Information Regulator

If you are not satisfied with how we have handled your personal information, you may lodge a complaint with the Information Regulator (South Africa):

We would, however, appreciate the opportunity to address your concern first.

14. Contact us

For any questions about this notice or about how we handle personal information, please contact DitungaICT at info@ditungaict.co.za or 010 605 0030.

15. Changes to this notice

We may update this notice from time to time. The latest version will always be available on this page, with the “Last updated” date revised accordingly.