Privacy & POPIA Policy
Privacy, Protection of Personal Information and data-handling practices
Effective Date: 26 September 2026
Business: OPCT IT Partners
Website: www.opct.co.za
Email: info@opct.co.za
Address: 639 Rubenstein Drive, Moreleta Park, Pretoria, South Africa
1. PURPOSE
This Privacy & POPIA Policy explains how OPCT IT Partners collects, uses, stores, shares and protects personal information when customers, prospective customers, suppliers, employees, website visitors and other individuals interact with OPCT.
OPCT seeks to process personal information in accordance with the Protection of Personal Information Act, 4 of 2013 (POPIA), the Promotion of Access to Information Act where applicable, and other relevant South African law.
2. RESPONSIBLE PARTY
OPCT IT Partners is the responsible party for personal information it determines the purpose and means of processing. Where OPCT processes information solely on behalf of a customer, OPCT may act as an operator and the customer’s own privacy obligations may also apply.
3. INFORMATION WE MAY COLLECT
Depending on the relationship and service, OPCT may collect:
- Name, surname, company name and job title.
- Email address, telephone number and physical or delivery address.
- Billing, quotation, invoice and payment-related information.
- Device, system, network, licence, asset and service information.
- Support tickets, fault descriptions, communications and service history.
- Website usage information, IP address, browser and cookie information.
- Information contained in documents or systems that a customer gives OPCT authorised access to for support.
- Supplier, contractor and business contact information.
4. WHY WE PROCESS PERSONAL INFORMATION
OPCT may process personal information to:
- Provide quotations, products, support, repairs, projects and managed services.
- Create customer, supplier and service records.
- Bill, allocate payments, reconcile accounts and manage outstanding amounts.
- Respond to enquiries and support requests.
- Manage warranties, returns, deliveries and supplier claims.
- Provision licences, cloud services, domains, connectivity and hosting.
- Secure OPCT and customer systems and investigate suspected abuse or incidents.
- Meet legal, tax, accounting, regulatory and contractual obligations.
- Improve services, website performance and customer experience.
- Send service notices and, where permitted, relevant marketing communications.
5. GROUNDS FOR PROCESSING
Depending on the circumstances, processing may be necessary for a contract, required by law, based on consent, necessary to protect a legitimate interest or otherwise permitted by POPIA. OPCT aims to collect only information that is reasonably adequate, relevant and not excessive for the purpose.
6. INFORMATION FROM CUSTOMERS’ SYSTEMS
During authorised support, backup, recovery, migration or security work, technicians may incidentally encounter personal or confidential information stored on a customer’s systems. OPCT will limit access to what is reasonably necessary for the authorised work and expects technicians and contractors to maintain confidentiality.
7. REMOTE SUPPORT
Remote support tools may allow an authorised technician to view or control a device during a support session. Customers should close personal or unrelated information before a session where practical. OPCT should not request passwords or information unrelated to the support task.
8. SPECIAL OR SENSITIVE INFORMATION
OPCT does not intentionally request special personal information unless it is genuinely required and lawful for a specific purpose. Customers should avoid sending identity documents, health information, passwords, full payment-card details or other highly sensitive data through ordinary website forms unless OPCT has specifically requested it through an appropriate secure process.
9. SHARING WITH THIRD PARTIES
OPCT may share necessary information with trusted suppliers, distributors, couriers, hosting providers, software vendors, connectivity providers, payment processors, professional advisers and other service providers where required to deliver a product or service.
Information may also be disclosed where required by law, court order or a lawful regulatory request.
10. OPERATORS AND SECURITY
Where third parties process personal information for OPCT, OPCT seeks to use reputable providers and appropriate contractual or operational safeguards. No technical system can be guaranteed completely secure, but OPCT applies reasonable administrative, technical and organisational measures appropriate to the information and service.
11. INTERNATIONAL PROCESSING
Cloud, software and hosting providers may process information outside South Africa. Where cross-border processing occurs, OPCT will seek to use providers and arrangements that support lawful protection of personal information.
12. RETENTION
Personal information is retained for as long as reasonably necessary for the purpose for which it was collected, to support the business relationship, meet legal or accounting requirements, resolve disputes, maintain service history and protect legitimate interests. Information that is no longer required should be securely deleted, anonymised or archived in accordance with applicable obligations.
13. WEBSITE, COOKIES AND ANALYTICS
The OPCT website may use essential cookies and, where configured, analytics, chat, embedded content or marketing technologies. More information is provided in the Cookie Policy.
14. DIRECT MARKETING
OPCT may send service-related communications where necessary for an existing service. Marketing messages will be sent only where permitted by applicable law. Recipients may opt out of non-essential marketing using the method provided in the message or by contacting OPCT.
15. ACCURACY OF INFORMATION
Customers should inform OPCT when important contact, billing or service information changes. OPCT may update information when reliable corrected information is provided.
16. YOUR RIGHTS
Subject to POPIA and other applicable law, individuals may have rights to request access to personal information, ask for correction or deletion, object to certain processing, withdraw consent where processing depends on consent and raise a complaint about how information is handled.
17. ACCESS, CORRECTION OR PRIVACY REQUESTS
Privacy, POPIA and access requests can be sent to info@opct.co.za. OPCT may need to verify the requester’s identity before providing, changing or deleting personal information.
18. SECURITY INCIDENTS
If OPCT becomes aware of a security compromise affecting personal information under its control, OPCT will investigate and take reasonable containment and remediation steps. Notifications will be made where required by applicable law.
19. THIRD-PARTY WEBSITES
Links to third-party websites do not make OPCT responsible for those sites’ privacy practices. Customers should review the privacy terms of the external service they choose to use.
20. CHILDREN
OPCT’s business services are not directed primarily at children. If information about a child must be processed for a legitimate service purpose, OPCT will handle it with appropriate care and in accordance with applicable law.
CONTACT AND LEGAL PRIORITY
Questions about this policy may be sent to info@opct.co.za. Please include the relevant customer, order, invoice, service or ticket reference where available.
These terms are intended to explain OPCT’s standard business practices. They do not remove any right or remedy that cannot lawfully be excluded or limited. If a provision conflicts with mandatory South African law, the applicable law will prevail to the extent of the conflict.
OPCT may update this policy when business processes, services, technology or legal requirements change. The version published on this website is the current public version.