Privacy Notice & POPIA Compliance

WebAcumen Software Development and Hosting (Pty) Ltd ("WebAcumen", "we", "us", or "our") is committed to protecting the personal information of our clients, website visitors, and business contacts in compliance with the Protection of Personal Information Act 4 of 2013 ("POPIA"). This Privacy Notice explains how we collect, use, store, and protect your personal information, and what rights you have in relation to that information.

WebAcumen Software Development and Hosting (Pty) Ltd is the responsible party for personal information processed in connection with our services. We are a South African registered company providing software development, web hosting, digital marketing, and related services. Contact: sales@webacumen.co.za | +27 78 876 3095

We may collect the following categories of personal information: Identity information: Full name, company name, job title. Contact information: Email address, telephone number, physical or postal address. Financial information: Billing address, payment reference information (we do not store card numbers — payment processing is handled by certified third-party providers). Technical information: IP address, browser type, pages visited, time of visit (via analytics tools). Communication records: Emails, support tickets, and form submissions. We do not collect sensitive personal information (as defined in POPIA Section 26) unless strictly necessary and with your explicit consent.

We use your personal information for the following lawful purposes: • To provide and manage the services you have requested from us. • To communicate with you about your account, projects, and support requests. • To process payments and manage billing. • To send service-related notifications (invoices, maintenance notices, security alerts). • To improve our website and services through analytics. • To comply with our legal obligations. • To respond to enquiries and provide quotes. We will only send marketing communications to existing clients and to individuals who have opted in to receive them. You may opt out at any time.

Under POPIA, we process your personal information on the following grounds: Contractual necessity: To perform the contract between us and to provide the services you have requested. Legitimate interest: To communicate with you about our services, to improve our offering, and to protect our business. Legal obligation: Where we are required by law to process your information. Consent: Where we have obtained your express consent, particularly for marketing communications.

We do not sell, rent, or trade your personal information. We may share it with: Service providers: Third-party companies that assist us in operating our business (e.g. payment processors, hosting providers, email platforms, analytics tools). These parties are contractually bound to process your information only on our instructions and in compliance with POPIA. Legal requirements: Where we are required by law, court order, or government authority to disclose information. Business transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity. We ensure that all third parties we engage with provide adequate protection for your personal information.

We retain personal information for as long as is necessary for the purpose for which it was collected, or as required by law. Client records are retained for a minimum of 5 years after the end of the client relationship, as required for legal and accounting purposes. Website analytics data is retained for 24 months. You may request deletion of your personal information at any time, subject to our legal retention obligations.

You have the following rights in relation to your personal information: Right of access: You may request a copy of the personal information we hold about you. Right to correction: You may request that inaccurate or incomplete information be corrected. Right to deletion: You may request that we delete your personal information, subject to our legal retention obligations. Right to object: You may object to the processing of your personal information for direct marketing purposes at any time. Right to lodge a complaint: You may lodge a complaint with the Information Regulator of South Africa if you believe we have breached POPIA. To exercise any of these rights, contact us at sales@webacumen.co.za.

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, loss, destruction, or disclosure. These include: • SSL/TLS encryption for all data in transit. • Password hashing and secure credential management. • Role-based access controls — staff access only the information needed for their role. • Regular security audits and vulnerability assessments. • Off-site encrypted backups. No method of transmission over the internet is 100% secure. While we strive to protect your personal information, we cannot guarantee absolute security.

Our website uses cookies and similar tracking technologies to improve user experience and to analyse site traffic. We use Google Analytics (or equivalent) to understand how visitors interact with our website. Analytics data is anonymised and aggregated — it does not identify individuals. You may disable cookies in your browser settings. Note that disabling cookies may affect the functionality of certain parts of our website.

If you are not satisfied with how we have handled your personal information, you have the right to lodge a complaint with the Information Regulator of South Africa: Website: www.justice.gov.za/inforeg/ Email: inforeg@justice.gov.za

We may update this Privacy Notice from time to time to reflect changes in our practices or applicable law. We will notify existing clients of material changes via email. The current version will always be available on this page with its effective date.