Privacy notice.

This notice explains what personal information Squid Tech (Pty) Ltd collects, why we collect it, and what rights you have. It is issued in terms of section 18 of the Protection of Personal Information Act 4 of 2013.

Who is responsible

What we collect, and from where

When you send an enquiry we receive the name, contact details and message you choose to give us. Our enquiry buttons hand off to WhatsApp or your own email program, so that message reaches us through those services rather than being stored on this website.

If you buy hosting or a domain, the order is placed through our client portal, which holds the contact and billing details needed to invoice you and administer the service, along with the technical details of the services themselves.

We collect this directly from you. We do not buy personal information or collect it from third-party sources.

Why we process it

To respond to enquiries and quote; to perform a contract with you; to invoice and collect payment; to provide and support the services you buy; and to keep the records the law requires of us.

Is supplying it voluntary?

At the enquiry stage it is entirely voluntary, and no law requires us to collect it. If you choose not to supply it, the only consequence is that we cannot reply or quote.

Once you become a client it does become mandatory: the Companies Act 71 of 2008 and the Tax Administration Act 28 of 2011 require accurate records of who we invoice and what we were paid. Domain registration additionally requires registrant details to be supplied to the relevant registry.

Website analytics

With your consent we use analytics and advertising measurement to understand which pages lead to enquiries. Declining changes nothing about your use of the site, and you can withdraw consent at any time by clearing this site’s stored data in your browser.

Who else sees it

We share personal information only with operators processing it on our behalf — our hosting provider, domain registries and registrars, our billing system, and the messaging and analytics services described above — and where the law requires disclosure. We do not sell personal information.

Information sent outside South Africa

Client website data that we host is kept in South Africa. Some operators we use are based abroad, so information reaching them — analytics, advertising measurement, and certain domain registries — is processed outside the country. Where that happens we rely on section 72 of POPIA: those operators are bound by terms requiring protection substantially similar to POPIA’s conditions, or the transfer is necessary to perform a contract with you.

How long we keep it

Enquiries that do not become work are kept for set in Settings → Squid Tech and then deleted. Client records are kept for at least five years after the relationship ends, as company and tax records require, then deleted.

Your rights

Under POPIA you may ask what personal information we hold and request access to it (sections 23 and 24, read with PAIA); ask us to correct or delete information that is inaccurate, irrelevant, excessive, out of date or unlawfully obtained; object to processing on reasonable grounds under section 11(3); withdraw consent; and complain to the Information Regulator. Access requests are handled under our PAIA manual.

Security

Access to client systems is restricted to those who need it and protected by strong authentication, and the sites we manage are monitored continuously for unauthorised change. If personal information in our care is accessed by an unauthorised person, we will notify you and the Regulator as section 22 requires.

Complaining to the Regulator

last updated set in Settings → Squid Tech