Privacy notice
Draft — not yet reviewed by an attorney. This document was prepared from the text of the applicable legislation and published guidance. It is a solid starting point, not a substitute for advice. Have it reviewed before you rely on it, and delete this box once you have.
Last updated: 26 July 2026
This notice explains what personal information Intellitics Business Solutions collects, why, and what you can do about it. It is our notification under section 18 of the Protection of Personal Information Act, 2013 (POPIA).
1. Who we are
Intellitics Business Solutions (registration TODO/TODO/TODO), of 5th Floor, Bloukrans Building, Lynnwood Bridge, Pretoria, Gauteng 0081, South Africa.
Our Information Officer is Christian Muller, reachable at privacy@intellitics.co.za.
2. Two different roles
We handle personal information in two distinct capacities, and your rights differ depending on which applies.
- As responsible party. For information about our own visitors, enquirers and customers — the people who fill in our forms and buy our products. This notice governs that.
- As operator. For information our customers store inside their MasterVault instances. We process that only on their documented instructions, under the operator agreement. If your information is in someone's vault, they are the responsible party — please direct your request to them, and we will assist them in answering it.
3. What we collect, and why
| Information | Why we collect it | Basis |
|---|---|---|
| Name, email, phone, business name (contact and waitlist forms) | To answer your enquiry and follow up on it | Your consent, and our legitimate interest in responding to you |
| Name, email, phone, business name, billing details (signup) | To create and administer your account and invoice you | Necessary to perform our contract with you |
| Record of the agreements you accepted, with date and IP address | To evidence the written operator agreement POPIA s21(1) requires, and marketing consent under s69 | Legal obligation and legitimate interest |
| Payment records (not card numbers) | Accounting, tax and dispute handling | Legal obligation |
| Server logs (IP address, page requested, timestamp) | Security, abuse prevention and diagnosing faults | Our legitimate interest in a secure service |
Supplying your information is voluntary. If you do not supply what a form marks as required, we cannot answer your enquiry or open your account — there is no other consequence.
4. We do not track you
This website carries no advertising pixels, no third-party analytics profiling and no social media trackers. Our fonts are served from our own domain rather than a font CDN, specifically so that visiting this site does not disclose your IP address to a third party abroad. See our cookie notice.
5. Who else sees your information
- Amazon Web Services — hosting and storage, in the Africa (Cape Town) region. Our operator for infrastructure. These public pages are delivered through Amazon CloudFront, a content delivery network with servers in many countries, so the request your browser makes for a page may be answered from outside South Africa and your IP address may appear in that server's logs. This applies to browsing this website only. Everything we store about you — your enquiry, your account, your files — is held in Cape Town.
- Paystack — payment processing. You enter your card details on Paystack's own page; we never receive or store them. Paystack processes some information outside South Africa. This is a transfer under section 72 and is necessary for the performance of our contract with you.
- Our professional advisers — accountants and attorneys, where genuinely necessary and under confidentiality.
We do not sell personal information. We never have and we will not.
6. Sending information out of South Africa
Customer data stored in MasterVault stays in South Africa. The limited transfers described above happen only where section 72 permits them — principally because the transfer is necessary to perform our contract with you, or because the recipient is bound by an agreement providing an adequate level of protection.
7. How long we keep it
- Enquiries that don't become customers: 24 months, then deleted.
- Customer account records: for the life of the account, then 5 years, to meet tax and company-law record-keeping requirements.
- Vault contents after cancellation: 30 days, then permanently deleted.
- Marketing consent records: for as long as we rely on the consent, plus 3 years.
- Server logs: 90 days.
8. How we protect it
We take the technical and organisational measures described on our security page, as section 19 requires, and we review them rather than setting them once.
If personal information is accessed or acquired by an unauthorised person, we will notify the Information Regulator and affected people as soon as reasonably possible, as section 22 requires, and tell you what happened, what we are doing, and what you should do.
9. Your rights
You may:
- ask what personal information we hold about you, and get a copy;
- ask us to correct or delete information that is wrong, misleading, excessive or out of date;
- object to processing we base on legitimate interest;
- withdraw consent at any time, without affecting what we did before you withdrew it;
- complain to the Information Regulator. We would rather you came to us first, but it is your call.
Email privacy@intellitics.co.za and we will respond within 30 days. Access requests follow the process in our PAIA manual.
The Information Regulator
Information Regulator (South Africa), JD House, 27 Stiemens Street, Braamfontein, Johannesburg 2001 — inforegulator.org.za
10. Marketing
We will only send you marketing email if you have separately opted in. Every such email carries a one-click unsubscribe. Asking us a question is not consent to marketing, and we do not treat it as such.
11. Changes
If we change this notice materially we will say so on this page and, for customers, by email. The date at the top always reflects the current version.