Privacy Policy (POPIA Compliant)

1. Introduction & Purpose

Sekoala Bopape trading as iT-U Company ("we," "us," or "our") respects your privacy and is committed to protecting your personal information. This Privacy Policy outlines how we collect, use, process, disclose, and safeguard personal data when you visit our website (sekoala.co.za) or engage our IT support, network diagnostic, and web architecture services.

This policy is formulated in compliance with South Africa’s Protection of Personal Information Act 4 of 2013 (POPIA) and the Promotion of Access to Information Act 2 of 2000 (PAIA).

2. Responsible Party & Information Officer Details

For the purposes of POPIA, Sekoala Bopape operates as the designated Responsible Party for data processing activities.

3. Personal Information We Collect

We collect personal information directly from you when you submit technical support requests, contact us for service quotes, or communicate with us. Types of personal data collected include:

• Identity & Contact Data: Full name, telephone number, and email address.
• Technical Infrastructure Data: Device hardware specs, operating system details, network topology logs, IP addresses, and DNS configuration information provided during IT audits or consultations.
• Operational & Communication Data: Service request details, project scope files, billing references, and email communications.
• Usage Analytics: Anonymized browser data, user interaction metrics, and performance telemetry used strictly for optimizing web delivery.

4. Purpose & Lawful Basis of Processing

Under Section 11 of POPIA, we process personal information only when lawful. Our primary purposes include:

5. Disclosure to Third Parties & Cloud Operators

We do not sell, rent, or trade your personal information. We may share necessary data with trusted third-party service operators strictly to render contracted IT infrastructure services:

• Hosting & DNS Partners: GitHub Pages and HostAfrica (for domain verification and static deployment routing).
• Communication Platforms: Encrypted webmail and client management software.
• Legal Compliance: Statutory bodies or South African law enforcement authorities if required by law or judicial court order.

6. Cross-Border Data Transfers

Our website is hosted using global static delivery networks (e.g., GitHub Pages). As a result, non-sensitive public web requests or anonymized analytics may cross South African borders. We ensure that foreign hosting infrastructure complies with international data security standards (such as GDPR) providing protection equivalent to or higher than Section 72 of POPIA.

7. Technical Safeguards & Security Measures

We implement robust technical and organizational measures under Section 19 of POPIA to guard against unauthorized access, loss, or destruction of personal data:

• SSL/TLS web encryption across all domain endpoints.
• Strict access control and multi-factor authentication for technical administration assets.
• Routine system vulnerability auditing and firewalls.

8. Data Retention & Destruction

Personal records are retained only for as long as necessary to complete the operational purpose for which they were collected or as required by South African accounting laws. Once data is no longer needed, it is permanently deleted or anonymized securely.

9. Data Subject Rights Under POPIA

You retain full rights under POPIA regarding your personal information, including:

10. South African Information Regulator

If you are unsatisfied with our response regarding data privacy inquiries, you may contact the Information Regulator directly: