1. Who is responsible and how to contact us
Infraweb (Pty) Ltd, business registration number 2025/049318/07, is responsible for the personal information it processes for its own website and business administration. Contact legal@infraweb.co.za for privacy enquiries or to contact the person responsible for privacy requests.
Where we administer a customer’s systems or process information on the customer’s instructions, the respective responsibilities and safeguards are determined by the applicable service agreement and law. This policy does not replace a customer’s own privacy notice.
2. Information we collect
You may give us your name, email address, telephone number, company information, service interests, message content and related correspondence when you contact us. Customer accounts may also contain a username, customer reference, account contact details and password hash. Please do not send unnecessary identity documents, financial details or sensitive information through an ordinary enquiry.
Contact enquiry emails include your IP address, an approximate country derived from it, the submission time and the originating form URL. We use a server-side HTTPS lookup with ipwho.is (IPWhois.io) for the country estimate; only the IP address is sent to that provider, after security verification. The estimate may reflect a VPN or proxy and is not proof of your location. If lookup is unavailable, your enquiry can still be sent. Our hosting and security systems may record IP addresses, request times, requested pages, browser or device information, errors and security events. The customer portal uses authentication-session records and login-attempt controls. We do not store account passwords in readable form.
3. Why we use information and the basis for doing so
We use information to respond to enquiries, assess and deliver requested services, manage customer accounts, communicate about an engagement, protect systems, investigate misuse, maintain appropriate business records and meet legal obligations.
Processing is based on an applicable lawful ground, such as taking steps towards or performing a contract, complying with a legal obligation, protecting legitimate interests in a proportionate way, or consent where consent is required. Where processing relies on consent, you may withdraw it without affecting processing that was lawful before withdrawal. We do not treat browsing alone as consent to unrelated marketing.
4. Providing information and marketing
Providing information is generally voluntary, but we may be unable to answer an enquiry, verify an account or deliver a service without information reasonably necessary for that purpose. Required website fields are identified where information is collected.
We will use electronic direct marketing only where permitted by law and will provide an appropriate way to object or unsubscribe. A service enquiry or customer login does not by itself enrol you in a marketing mailing list.
5. Cookies, public data and external resources
The customer portal uses a secure, HttpOnly, host-only session cookie to authenticate your browser. It normally expires after 12 hours. Signing out revokes the session; changing your password revokes earlier sessions. Blocking essential cookies prevents the portal from working.
This version of the website does not install advertising pixels or behavioural advertising cookies. The contact and login forms use Cloudflare Turnstile to distinguish legitimate enquiries from automated abuse. Cloudflare may process browser, device, network and interaction information for this security check. It uses externally hosted Google Fonts, so your browser may send connection information such as an IP address to the font provider. External websites reached through links apply their own privacy policies.
With your permission, Google Analytics (G-VFSDH9KPTS) helps us understand visits to public website pages. The Google tag is not loaded until you accept analytics cookies. It is excluded from customer portal pages. You can decline or change your choice using Cookies in the footer. We store that preference in your browser. Analytics may process device, browser and page-use information and set analytics cookies; advertising storage, advertising personalisation and Google signals are disabled in this integration. We do not send enquiry content, passwords or customer account details to Analytics. Google applies its own privacy policies. Browser or network privacy tools may also block analytics.
Technology Pulse exchange-rate, Bitcoin and public-status data is collected by our server and served as cached data and charts. Those background checks do not require visitors to supply customer account details to the data providers. World clocks are calculated in your browser.
6. Who may receive information
Access is limited to people and providers who reasonably need information for the stated purpose, including authorised personnel and appropriate hosting, email, IT, professional or legal service providers. The online enquiry form uses SMTP2GO to process and deliver the message to us. Email correspondence may be retained in relevant mailboxes and delivery records.
We may disclose information where lawfully required, to protect legal rights, or with an appropriate lawful authorisation. We do not sell customer account information. Separate provider terms may apply when you choose to use an external service directly.
7. International processing
Our infrastructure and service providers may operate in South Africa and other countries. Where personal information is transferred across borders, the transfer must have a lawful basis and appropriate safeguards as required by POPIA, including suitable protection by the recipient or another permitted ground. Contact us if you need information about arrangements relevant to a particular service.
8. Retention and security
We keep personal information for as long as reasonably necessary for its purpose, contractual administration, legal record-keeping, a legitimate dispute or another lawful requirement. We then delete, restrict or de-identify it as appropriate. Retention periods vary with the type of record; contact us for the period applicable to your information.
We use reasonable technical and organisational safeguards, including access controls, protected connections and password hashing for the portal. No website or communication channel is completely risk-free. Where a security compromise triggers a legal notification obligation, we will notify the appropriate parties as required by law.
9. Your rights and requests
Subject to the conditions and exceptions in applicable law, you may ask whether we hold your personal information, request access, request correction or appropriate deletion, object to certain processing, withdraw consent where processing relies on consent, and raise a complaint. We may need proportionate proof of identity or authority before disclosing or changing a record.
Send requests to legal@infraweb.co.za and describe the information or processing concerned. We will consider the request within the applicable legal requirements and explain any lawful restriction. These rights do not necessarily require deletion of records that we must lawfully retain.
You may also approach the Information Regulator of South Africa. Current complaint procedures and contact details are available on its official website.
10. Children and changes to this policy
Our services and customer portal are directed at businesses and authorised adult representatives, not children. If you believe a child’s information has been supplied inappropriately, please contact us so that we can assess and address it.
We may revise this policy to reflect service, technology or legal changes. The updated date will appear at the top of this page, and significant changes will be communicated where appropriate or required.