Privacy Policy

Last updated: 19 October 2026

1. Who we are

Technosult (Pty) Ltd ("Technosult", "we", "us") is the responsible party for the personal information described in this policy. It explains what we collect through technosult.co.za and in running our business, why we collect it, and the rights you have under the Protection of Personal Information Act 4 of 2013 (POPIA).

2. Who this policy covers

This policy applies to:

• visitors to technosult.co.za;
• anyone who contacts us by web form, email, phone or WhatsApp;
• our clients and prospective clients, and the people who work for them;
• our suppliers, contractors and partners.

Section 5 also explains how we handle personal information that we process for our clients when we deliver services such as cloud backup, hosting, AI, security and IoT. POPIA protects information about companies as well as individuals, so this policy applies to both.

Our affiliated brands (One2Backup, Parkguard, IoT Global and Winelands Atlas) have their own websites. Information collected through those sites is covered by the privacy policy published on each site.

3. Personal information we collect

We collect only what we need to respond to you, deliver our services and run our business.

We collect this information directly from you, from your employer when it appoints us, automatically when you use our website or services, and occasionally from public sources such as the CIPC company register.

We do not ask for special personal information (such as health, religious or biometric information) or information about children. Please do not include it in enquiries.

Giving us your information is voluntary. However, we need at least your name and email address to respond to an enquiry, and we need client account and billing details to provide a service. Where a law requires us to collect specific information, such as tax legislation for invoicing, we will tell you at the time.

4. Why we use it and our lawful basis

We use personal information only for the purposes below, each of which has a lawful basis under section 11 of POPIA.

We will not use your information for a new purpose that is incompatible with the original one unless we tell you first and, where required, get your consent.

We do not make decisions about you that have legal or similarly significant effects based solely on automated processing, including AI tools.

5. Client data we process on your behalf

When we process personal information inside a client's systems or services, the client remains the responsible party and Technosult acts as its operator under sections 20 and 21 of POPIA. This covers, for example, the files in your backups, data on servers we host, information handled by AI agents we deploy, camera footage and IoT sensor or location data.

As an operator, we:

• process the information only on the client's instructions and for the agreed service;
• keep it confidential and protected by the security measures in section 10;
• never sell it or use it for our own purposes, including training shared AI models;
• tell the client without undue delay if we suspect a security compromise;
• return or delete it when the service ends, unless the law requires us to keep it.

How this applies to specific services:

• Cloud Data Backup (One2Backup): backup data is encrypted and stored in South African data centres.
• Hosting and private AI: hosted servers and AI agents run in South African data centres by default, and on-premises deployments keep data on the client's own hardware. We use a cloud AI service hosted outside South Africa only if the client agrees in writing.
• CCTV and Parkguard: footage and recordings stay under the client's control. Our technicians access them only to install, maintain or monitor the system as agreed.
• IoT solutions: device location, sensor readings and telemetry are used only to deliver the tracking or monitoring service the client has ordered.
• Social media and video marketing: we access client accounts only as instructed, and the platform's own terms also apply.

If your information is held by one of our clients, please contact that client first. We will help them respond to your request.

6. Cookies and website technologies

We do not use advertising or marketing cookies on technosult.co.za, and we have not added third-party analytics tools such as Google Analytics. A small amount of technical information is still processed so the site can load:

• Hosting: our hosting provider keeps standard server logs (IP address, browser type, pages requested and time of visit) for security, fault-finding and performance. Its control panel can also produce visitor statistics from these logs, such as page views and referring sites, which we see only in aggregate form.
• Google Fonts: the site loads its typeface from Google's servers, so your browser shares your IP address with Google when a page loads.

If we add analytics or marketing tools in future, we will update this policy first and ask for your consent where the law requires it. You can also block or delete cookies in your browser settings.

7. Direct marketing

We send marketing by email, SMS or WhatsApp only if you have given us your written consent, or if you are an existing client and the message is about services similar to those you already use from us.

• We never treat silence, a pre-ticked box or a failure to opt out as consent.
• Every marketing message tells you how to opt out, and opting out is free.
• You can object to marketing at any time by replying "unsubscribe", emailing brett@technosult.co.za or telling us by phone. We record phone objections and give you a copy on request.
• We keep a record of opt-outs so that we do not contact you again.
• We never sell or rent your contact details to anyone.

8. Who we share it with

We share personal information only where it is needed for the purposes in section 4:

• Service providers who help us run our business, such as website hosting, email and cloud software, data-centre, accounting, payment and IT security providers. They act as our operators and are contractually bound to keep the information confidential and secure.
• Network and connectivity partners (for example fibre, LTE, VoIP, LoRaWAN and NB-IoT network operators) when needed to set up a service you have ordered.
• Our affiliated brands (One2Backup, Parkguard, IoT Global and Winelands Atlas) where your enquiry relates to their products.
• Professional advisers such as auditors, accountants and lawyers, who owe us a duty of confidentiality.
• Authorities where the law, a court order or a regulator requires it, or where it is needed to protect someone's rights or safety.
• A buyer or successor if all or part of our business is sold or restructured, on condition that your information stays protected as described here.

We do not sell personal information.

9. Transfers outside South Africa

Most of the information we hold is stored in South Africa. Some of our service providers, such as email and cloud software providers and Google Fonts, may store or process information outside South Africa.

We transfer personal information across borders only where section 72 of POPIA allows it: the recipient is bound by a law, binding corporate rules or an agreement that gives protection substantially similar to POPIA, or you have consented, or the transfer is needed to perform a contract with you.

Client backup and hosted AI data stays in South Africa unless the client agrees otherwise in writing (see section 5).

10. How we protect it

We take appropriate, reasonable technical and organisational measures to keep personal information secure, as section 19 of POPIA requires. These include:

• encryption of data in transit (HTTPS) and of client backup data;
• access limited to staff and contractors who need it, protected by strong authentication;
• firewalls, security updates and monitoring on our systems;
• regular backups and tested recovery procedures;
• confidentiality obligations in our staff, contractor and supplier agreements.

No system is completely secure, so we review these measures regularly. If we have reasonable grounds to believe your personal information has been accessed or acquired by an unauthorised person, we will notify the Information Regulator and you as soon as reasonably possible, as section 22 of POPIA requires.

11. How long we keep it

We keep personal information only as long as we need it for the purpose it was collected or as the law requires. After that, we delete or destroy it, or de-identify it so it can no longer identify you.

12. Your rights

Under POPIA you have the right to:

• Know whether we hold personal information about you, and ask for a description of it, free of charge.
• Access a copy of the records we hold about you.
• Correct or delete information that is inaccurate, out of date, incomplete, excessive or unlawfully obtained.
• Object at any time to processing based on our legitimate interests, and to direct marketing.
• Withdraw your consent where we rely on it. This does not affect processing that took place before you withdrew it.
• Not be subject to decisions with legal or similar effects made solely by automated means.
• Complain to the Information Regulator (see section 15).

To exercise these rights, contact our Information Officer using the details in section 15. You can do so by email, phone or in writing, and you may use the Information Regulator's prescribed forms, but you do not have to. Objections and requests to correct or delete information are free.

We may need to confirm your identity before acting on a request. We will respond in writing within 30 days. Requests for access to records are handled under the Promotion of Access to Information Act (PAIA), which may involve a prescribed fee; our PAIA Manual, which explains the process, is available on request from our Information Officer.

13. Children and links to other websites

Our services are aimed at businesses and are not directed at children under 18. We do not knowingly collect children's personal information through this website.

Our website links to other sites, including our affiliated brands and social media pages. We are not responsible for how those sites handle personal information, so please read their privacy policies.

14. Changes to this policy

We may update this policy when our services, systems or the law change. The date at the top shows when it was last updated. If we make a significant change, we will highlight it on this page and, where appropriate, tell our clients by email.

15. Contact us

For any question, request or complaint about your personal information, please contact our Information Officer first. We will do our best to resolve it.

If you are not satisfied with our response, you may lodge a complaint with the Information Regulator (South Africa):