1. Introduction
Highpass Systems (Pty) Ltd, a South African private company with registration number 2019/325170/07, operating under the domain www.highpass.co.za (“we,” “us,” or “our”), is committed to protecting your personal information and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, store, and protect your personal information when you visit our website, use our services, communicate with us, or otherwise interact with our business.

By accessing or using our services or website, you acknowledge that you have read, understood, and consented to the practices described in this Privacy Policy. If you do not agree with any part of this policy, please do not use our services.

2. Information We Collect
We may collect the following types of personal information:

• Contact Information: Name, email address, phone number, physical address, and company details.
• Technical Data: IP address, browser type, operating system, device identifiers, and usage data (e.g., pages visited, time spent on site).
• Communication Records: Records of your inquiries, feedback, support requests, or correspondence with us.
• Transactional Data: Details of purchases, invoices, and payment information (processed securely via third-party payment processors).
• Marketing Preferences: Your consent preferences regarding promotional communications.

We collect this information directly from you when you:

• Submit a contact form or request a quote
• Register for an account or subscribe to our services
• Attend webinars, events, or training sessions
• Interact with our website via cookies or similar tracking technologies

3. How We Use Your Information
We use your personal information for the following purposes:

• To provide, operate, and improve our products and services
• To respond to your inquiries and support requests
• To process orders, payments, and service delivery
• To communicate important updates about our services or contractual obligations
• To send marketing communications (only with your consent, where required by law)
• To comply with legal and regulatory obligations
• To analyze website usage and enhance user experience

4. Legal Basis for Processing
Under applicable data protection laws (including the Protection of Personal Information Act, 2013 (POPIA) in South Africa), we process your personal information based on one or more of the following lawful grounds:

• Your consent (e.g., for marketing communications)
• Performance of a contract (e.g., delivering services you requested)
• Compliance with a legal obligation
• Our legitimate business interests (e.g., fraud prevention, service improvement), provided these do not override your rights

5. Sharing of Information
We do not sell, rent, or trade your personal information. We may share your data only in the following circumstances:

• With service providers: Trusted third parties who assist us in hosting, payment processing, IT support, or marketing (e.g., cloud providers, email platforms). These partners are contractually obligated to protect your data.
• For legal compliance: If required by law, court order, or government request.
• In business transactions: In the event of a merger, acquisition, or asset sale, your information may be transferred as part of the transaction, with appropriate safeguards.

6. International Transfers
While we primarily operate in South Africa, certain service providers may process data outside the country (e.g., cloud infrastructure). When this occurs, we ensure adequate safeguards are in place (such as standard contractual clauses or reliance on adequacy decisions) in compliance with POPIA.

7. Data Security
We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These include encryption, secure authentication, access controls, and regular security assessments.

8. Data Retention
We retain your personal information only for as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required by law. For example:

• Customer account data: Retained for the duration of our business relationship plus up to 5 years for legal/tax compliance
• Marketing consent records: Retained until you withdraw consent
• Website analytics: Aggregated and anonymized where possible

9. Your Rights
Under POPIA and other applicable laws, you have the right to:

• Access your personal information we hold
• Request correction of inaccurate or incomplete data
• Request deletion of your data (subject to legal exceptions)
• Object to or restrict certain types of processing
• Withdraw consent at any time (without affecting the lawfulness of prior processing)
• Lodge a complaint with the Information Regulator of South Africa

To exercise these rights, please contact us using the details below. We will respond to verified requests within 30 days.

10. Cookies and Tracking Technologies
Our website uses cookies and similar technologies to enhance functionality, analyze traffic, and personalize content. You can manage or disable cookies through your browser settings. Note that disabling essential cookies may affect website usability.

11. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The revised policy will be posted on www.highpass.co.za with an updated “Last Updated” date. We encourage you to review this page periodically.

12. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or your personal information, please contact our Information Officer:

Highpass Systems (Pty) Ltd
Email: privacy@highpass.co.za
Phone: +27 10 0018185
Website: www.highpass.co.za

You may also lodge a complaint with the Information Regulator of South Africa:

• Website: https://www.justice.gov.za/inforeg
• Email: complaints.IR@justice.gov.za
• Postal Address: PO Box 31534, Braamfontein, 2017

Updated 11 December 2025