Privacy Policy

Cyber Intelligent Systems (Pty) Ltd ("CIS", "we", "us", or "our") is the Responsible Party as defined under POPIA. We are a registered South African company specialising in cybersecurity services.

To exercise any data subject rights or submit a privacy query, contact us at s*****@cyberintelligence.co.za.

We collect personal information only when necessary and relevant to providing our services. Categories we may collect include:

• Identity information: full name, job title, company name
• Contact information: email address, phone number, physical address
• Technical information: IP address, browser type, device identifiers, pages visited, time on site (collected via cookies and analytics tools)
• Communication records: emails, form submissions, support tickets
• Professional information: details of your organisation's security posture shared during engagements
• Financial information: billing details required to process invoices (we do not store card numbers)

We do not intentionally collect special personal information (e.g., health data, biometrics, political views) and request that you do not submit such information.

• Directly from you: contact forms, assessment requests, email enquiries, phone calls
• Automatically: through cookies and analytics when you use our website (see our Cookie Policy)
• From third parties: referrals, LinkedIn, public company directories

We process your personal information for the following lawful purposes:

• To respond to enquiries and schedule consultations
• To deliver contracted cybersecurity services (penetration testing, SOC monitoring, incident response, training)
• To send service-related communications (proposals, invoices, reports)
• To send newsletters and security insights where you have consented
• To comply with legal and regulatory obligations
• To protect the security and integrity of our systems and services
• To improve our website and service offerings through analytics

Under POPIA, we rely on one or more of the following grounds:

We do not sell your personal information. We may share it with:

• Service providers acting as Operators: hosting (Hetzner/Vercel), email delivery (Resend), analytics (Google Analytics), CRM tools, all under written data processing agreements
• Professional advisors: legal counsel, auditors, insurers, under confidentiality obligations
• Regulatory authorities: where required by South African law, court order, or the Information Regulator
• Business transfers: in the event of a merger, acquisition, or sale of assets (you will be notified)

Some of our service providers (e.g., cloud infrastructure) may process data outside South Africa. Where this occurs, we ensure the receiving country provides adequate protection, or we put in place appropriate safeguards (standard contractual clauses or binding corporate rules) as required by POPIA section 72.

We retain personal information only as long as necessary for the purposes for which it was collected, or as required by law:

After the retention period, data is securely deleted or anonymised.

Under POPIA, you have the right to:

• Access: request a copy of the personal information we hold about you
• Correction: request we correct inaccurate or incomplete information
• Deletion: request erasure of your personal information where no lawful basis remains
• Objection: object to processing based on legitimate interests or for direct marketing
• Restriction: request we limit processing in certain circumstances
• Portability: receive your data in a machine-readable format where technically feasible
• Withdraw consent: at any time, without affecting lawfulness of prior processing

Submit requests to s*****@cyberintelligence.co.za. We will respond within 30 days in line with POPIA requirements.

As a cybersecurity company, we hold information security to the highest standard. Measures include:

• Encryption in transit (TLS 1.2+) and at rest
• Role-based access controls and least-privilege principles
• Multi-factor authentication on all systems handling personal data
• Regular security assessments and penetration testing of our own infrastructure
• Incident response procedures with notification timelines compliant with POPIA

In the event of a security compromise likely to affect your rights, we will notify you and the Information Regulator as required by POPIA section 22.

Our services are not directed at persons under the age of 18. We do not knowingly collect personal information from children. If you believe we have inadvertently collected such information, please contact us immediately.

If you are unhappy with how we handle your personal information, you may:

• Contact us at s*****@cyberintelligence.co.za
• Lodge a complaint with the Information Regulator (South Africa):
  Website: www.inforegulator.org.za
  Email: complaints.IR@justice.gov.za
  Phone: 010 023 5207

We may update this policy periodically. Material changes will be communicated by email (where we hold your contact details) and by updating the "Last updated" date above. Continued use of our services after changes constitutes acceptance of the revised policy.