Privacy Policy and POPIA Notice

Effective date: 12 October 2026
Responsible party: Kagiso Online (Pty) Ltd, trading as Kagiso Online
Privacy contact / Information Officer: Thabo Moses Makhele ( IT and Cyber Security Consultant )
Email: infosec@kagisoonline.com
Postal or physical address: 9139 Zwelitsha Street, Father Gerald Martin, Kagiso 2, Krugersdorp, 1754

This policy explains how we handle personal information when you visit our website, send an enquiry, open a support ticket, request a quote, use our services or communicate with us. We process personal information in accordance with applicable law, including South Africa’s Protection of Personal Information Act (POPIA), where applicable.

Information we may collect

Depending on how you interact with us, we may collect:

Contact and inquiry information, such as your name, email address, phone number, selected service and message.

Support and service information, such as ticket details, device or website details, work history, quotes and communications.

Account and transaction information needed to provide services, issue invoices and maintain business records.

Technical and cookie information, such as browser or device details and website activity, where collected through our website or tools.

Please do not send passwords, payment-card details or other sensitive information through an inquiry form or ordinary email. If access credentials are needed for a project, we will agree on an appropriate method for providing them.

Why we use information

We may use information to respond to inquiries; assess requirements and provide quotes; deliver, support and improve services; manage customer accounts, tickets and payments; protect the website and our systems; keep business records; meet legal obligations; and handle disputes.

We will only use personal information for purposes that are lawful and compatible with the reason it was collected, or where another lawful basis applies. If we want to use your information for direct marketing, we will do so as permitted by law and provide a way to object or opt out.

When we share information

We may share information with service providers who help operate our website, hosting, email, ticketing, payment, analytics or business systems, where those providers are actually used and the sharing is necessary for the stated purpose.

We may also disclose information where required by law or needed to establish, exercise or defend legal rights.

Where a provider processes personal information for us, we will take appropriate steps to require suitable confidentiality and security safeguards. If information is transferred outside South Africa, we will do so only where permitted by applicable law and with appropriate safeguards.

Retention and security

We keep personal information only for as long as reasonably necessary for the purpose it was collected, including to provide services, maintain required records, resolve disputes and meet legal obligations. The retention period depends on the type of information and the circumstances.

We use reasonable technical and organizational measures to protect information against loss, unauthorized access, disclosure or misuse. No method of transmission or storage can be guaranteed completely secure. If a security compromise occurs, we will take the steps required by applicable law.

Your rights and how to contact us

Subject to applicable law and any lawful grounds for retaining or processing information, you may ask us to:

Confirm whether we hold your personal information and request access to it.

Correct or delete information that is inaccurate, incomplete, outdated, excessive, misleading or unlawfully obtained.

Object to certain processing, including direct marketing, or withdraw consent where processing is based on consent.

Send requests to infosec@kagisoonline.com with enough detail for us to identify the information and respond. We may ask for reasonable proof of identity before acting on a request. You may also lodge a complaint with the South African Information Regulator.

Information Regulator contact details, checked on 12 October 2026:

• Email: enquiries@inforegulator.org.za

• Telephone: 010 023 5200

• Website: Information Regulator of South Africa www.inforegulator.org.za

The Regulator’s PAIA page lists Form 02, Form 03 and Form 05, among other prescribed forms

3. Cookie Policy

Our website displays cookie preference controls for necessary, functional, analytical, advertising and unclassified cookies.

Cookies and similar technologies may store information on your device or help recognize a browser. Some may collect information that relates to an identifiable person.

Necessary: Used for functions the site needs to operate, such as remembering cookie choices or supporting essential features.

Functional: Used for additional features or integrations, if enabled.

Analytical: Used to understand site use and performance, if enabled.

Advertising: Used for advertising or measuring campaigns, if enabled.

Unclassified: Cookies still being identified or categorized; investigate these and update this policy.

You can use the website’s cookie controls to accept, reject or customize optional categories and change your choice later through, by simply clicking on the cookie icon diplayed at the bottom left of your screen.

Cookie contact: infosec@kagisoonline.com