Privacy Policy
This Privacy Policy applies to SyntaxPath (Pty) Ltd and is compliant with the Protection of Personal Information Act 4 of 2013 (POPIA) of the Republic of South Africa. Please read this policy together with our Cookie Policy and Terms of Service.
Introduction
SyntaxPath (Pty) Ltd ("SyntaxPath", "we", "us", "our") is committed to protecting your personal information. This Privacy Policy explains how we collect, use, store, and share information about you when you visit our website (www.syntaxpath.co.za) or engage our consulting services. This policy is governed by the Protection of Personal Information Act 4 of 2013 (POPIA) of the Republic of South Africa.
Information We Collect
When you submit a contact form, request a proposal, or engage our services, we collect: your name, email address, company name, phone number, and the content of your message or project brief.
When you visit our website we automatically collect: IP address, browser type and version, pages visited, time and date of visits, referring URLs, and device information. This data is collected via cookies and similar technologies as described in our Cookie Policy.
During a consulting engagement we may collect technical and business information necessary to deliver our services, as outlined in the applicable Statement of Work.
How We Use Your Information
To respond to enquiries, deliver consulting services, and manage client engagements.
To send project updates, invoices, and relevant service information. We do not send unsolicited marketing emails.
To analyse how visitors use our website and improve its content and performance.
To comply with applicable South African laws and regulations, including POPIA and tax obligations.
To detect, prevent, and address fraud, security incidents, and technical issues.
Legal Basis for Processing
Under POPIA, we process your personal information on the following grounds: your consent (e.g. when you submit a contact form); the performance of a contract (e.g. when delivering a consulting engagement); compliance with a legal obligation; and our legitimate interests in operating and improving our business, provided these are not overridden by your rights and interests.
Data Retention
We retain personal information only for as long as necessary for the purposes outlined in this policy, or as required by law. Contact enquiry data is retained for 24 months. Client engagement data is retained for 7 years for tax and legal compliance. Website analytics data is retained for 14 months. You may request deletion of your data at any time, subject to our legal retention obligations.
Data Security
We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, disclosure, alteration, or destruction. These include encrypted data transmission (HTTPS), access controls, and regular security reviews. While we take all reasonable precautions, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.
Cross-Border Transfers
Our infrastructure may involve processing data outside South Africa (e.g. cloud servers in the EU or US). Where we transfer personal information across borders, we ensure adequate safeguards are in place as required by POPIA section 72, including contractual protections with recipients.
Your Rights Under POPIA
You may request a copy of the personal information we hold about you.
You may request correction of inaccurate or incomplete information.
You may request deletion of your information, subject to legal retention obligations.
You may object to the processing of your information for direct marketing or on legitimate grounds.
You have the right to lodge a complaint with the Information Regulator of South Africa at inforeg.org.za.
Children's Privacy
Our website and services are not directed at children under the age of 18. We do not knowingly collect personal information from minors. If you believe we have inadvertently collected such information, please contact us immediately and we will delete it.
Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be communicated via email to active clients or by a prominent notice on our website. The effective date at the top of this page reflects the most recent revision. Continued use of our website or services after changes constitutes acceptance of the updated policy.
Contact & Information Officer
SyntaxPath has appointed an Information Officer as required by POPIA. For any privacy-related queries, access requests, or complaints, please contact: privacy@syntaxpath.co.za · Information Officer · SyntaxPath Consulting (Pty) Ltd · Johannesburg, Gauteng, South Africa. We will respond to all requests within 30 days.