Legal • POPIA Compliance

POPIA Compliance

This page explains how VanguardTech handles personal information responsibly in line with the Protection of Personal Information Act, 2013, including website enquiries, client communication, project work, hosting support, software development and technical services.

Responsible processing Data subject rights Security safeguards Client systems
Data Protection Workspace

Personal Information

source: enquiry form
purpose: project response
access: limited
processing: documented

Safeguards

Access ControlActive
HTTPSRequired
BackupsService Based
Support AccessLimited

Processing Flow

Collect
Use
Protect
Retain

Data Subject Request

request received
identity verified
records reviewed
response prepared
Overview

POPIA regulates how personal information is processed in South Africa.

POPIA refers to the Protection of Personal Information Act, 2013. It applies to the processing of personal information and supports responsible, lawful and transparent handling of information.

VanguardTech processes personal information for legitimate business and service purposes, including responding to enquiries, preparing proposals, delivering software and website services, supporting hosting environments and communicating with clients.

Processing flow

How personal information moves through a typical VanguardTech enquiry.

This simplified flow shows how information is usually handled when someone contacts VanguardTech.

1. EnquiryA visitor submits contact or project details.
2. ReviewThe request is reviewed to understand the requirement.
3. ResponseVanguardTech responds, quotes or requests more detail.
4. DeliveryApproved work is completed using necessary information.
5. RetentionRecords are kept only as needed for business or legal purposes.
Information categories

Personal information VanguardTech processes.

The information handled depends on the enquiry, project, service or support request.

Personal information categories and examples
Category Examples Typical source Purpose
Contact detailsName, surname, email address, phone number, WhatsApp number.Website forms, email, phone or direct client communication.Responding to enquiries and managing communication.
Business detailsCompany name, role, website, domain, project information and service requirements.Client enquiries, proposals and onboarding discussions.Understanding the business need and preparing quotes or project plans.
Project informationProcesses, workflows, files, screenshots, system details, reporting requirements and technical notes.Discovery sessions, support tickets, emails and project discussions.Designing, developing, supporting or improving technology solutions.
Technical informationHosting details, domain details, email configuration, access logs, support information and system error details.Hosting platforms, websites, systems and support requests.Providing hosting, support, troubleshooting and maintenance.
Client system dataDatabase samples, reports, customer records or operational data shared for approved work.Client systems, exports, integrations or databases.Development, testing, migration, integration or support under client instruction.
Website usage informationServer logs, device information, browser type, requested pages and analytics information where enabled.Website hosting, analytics and security tools.Security, troubleshooting, performance monitoring and website improvement.
Processing purposes

Why VanguardTech processes personal information.

Information is processed for practical business, service, technical and legal reasons.

Responding to enquiries

Using contact and project details to reply, ask questions or schedule next steps.

Preparing quotes

Understanding scope, systems, business needs and project requirements.

Providing services

Delivering software development, web development, hosting, domains, automation, APIs and support.

Project management

Managing communication, files, tasks, approvals and delivery records.

Technical support

Troubleshooting websites, hosting, email, databases, software systems and integrations.

Security and records

Protecting systems, keeping business records and complying with applicable obligations.

POPIA principles

POPIA processing principles followed by VanguardTech.

VanguardTech handles personal information according to practical POPIA-aligned principles.

Accountability

Taking reasonable responsibility for personal information handled by the business.

Processing limitation

Processing information only where there is a valid business, service, legal or authorised reason.

Purpose specification

Collecting information for clear service, project, support or business purposes.

Further processing limitation

Avoiding unrelated use of information unless allowed by law, contract or consent.

Information quality

Taking reasonable steps to keep information accurate where needed for the work.

Openness

Explaining how personal information is collected, used and protected.

Security safeguards

Using reasonable measures to protect information from unauthorised access, loss or misuse.

Data subject participation

Allowing individuals to request access, correction or other POPIA-related support where applicable.

Data subject rights

Your POPIA-related rights.

Data subjects may have rights relating to their personal information, subject to applicable legal, contractual, security and technical limitations.

Access

Ask whether VanguardTech holds personal information about you and request access where applicable.

Correction

Request correction of inaccurate, outdated or incomplete personal information.

Objection

Object to certain processing where POPIA allows this.

Deletion

Request deletion or destruction where legally appropriate and technically possible.

Complaint

Raise concerns with VanguardTech or lodge a complaint with the Information Regulator.

Direct marketing

Ask to stop receiving direct marketing communication where applicable.

Security safeguards

How VanguardTech protects information.

Safeguards depend on the service, system, hosting environment and project requirements.

Access control

Limiting access to information to people or systems that need it for the work.

HTTPS and SSL

Using HTTPS and SSL certificates for websites where applicable.

Secure hosting practices

Using hosting configurations, backups and support practices according to the service provided.

Careful credential handling

Handling system access details only for approved work and limiting exposure where possible.

Technical troubleshooting

Using logs and system information to resolve issues while limiting unnecessary access to personal information.

Incident response

Investigating known incidents, reducing harm and communicating where required by law.

Service-specific handling

How POPIA applies to VanguardTech services.

Different services can involve different types of information and access.

Website enquiries and forms

Information submitted through website forms is used to respond to enquiries, prepare quotes and provide requested services.

Hosting and domains

Hosting, email, SSL and domain support may involve technical contact information, account details, logs and configuration data.

Software development

Development work may involve business process details, user roles, test data, reports, databases or system access approved by the client.

API integrations

Integrations can involve data mapping, test payloads, API credentials, logs and records moving between systems.

Customer portals

Portal projects can include user accounts, role-based access, documents, uploads, customer-specific dashboards and audit requirements.

Business automation

Automation work can involve workflows, notifications, approvals, reports and information moving between departments or systems.

Related policies

Please also review the Privacy Policy, Cookie Policy and Website Terms.

Version: 1.0 • Last reviewed: July 2026

Privacy and compliance

Have a question about personal information?

Contact VanguardTech for POPIA-related requests, privacy questions or information about how your enquiry, project or hosting data is handled.