Last updated: 7 October 2026
1. Introduction
Cyberxperts is the responsible party for personal information collected through our website, enquiries, recruitment and business communications. This policy explains how we handle that information under the Protection of Personal Information Act 4 of 2013, known as POPIA.
Personal information includes information about an identifiable individual and, where applicable, an identifiable organisation.
When we process information on a client's behalf, we act within the client's lawful instructions and the agreed service scope. This policy does not authorise access to systems or information beyond that scope.
2. Information We Collect
We collect information relevant to your interaction with us. This may include:
- Your name, contact details, organisation and correspondence.
- Answers to a security assessment, its results and details needed to deliver a requested report.
- Your CV, qualifications, employment history and recruitment interests.
- Information needed to prepare proposals, administer contracts and perform agreed services.
- Website usage, browser and device details, IP addresses and security records.
We usually collect information directly from you. Where lawful, we may receive it from your organisation, an authorised representative or systems covered by an engagement. We provide any notice required when information comes from another source.
Submitting a website form is voluntary. Required fields are needed to handle your request. Without that information, we may be unable to respond, consider an application or deliver a report. Optional fields may be left blank. Our general forms do not require information under a statutory obligation.
Provide only information relevant to your request. You must have lawful authority to provide information about another person. Do not send passwords, access keys, identity documents or sensitive client records through general forms. Information needed for an engagement should be supplied through an agreed method.
Our general forms are not intended to collect children's information or special personal information. Any activity requiring that information needs an appropriate legal basis and safeguards.
3. How We Use Your Information
We use information to respond to enquiries, provide requested assessment results, consider recruitment opportunities, administer business relationships and perform agreed services. We also use relevant records to operate and protect the website, meet legal obligations and establish, exercise or defend legal rights.
Processing must have a lawful basis. Depending on the activity, this may be consent, a contract, a legal obligation or a legitimate interest recognised by POPIA. We limit processing to the stated purpose or another lawful purpose permitted by POPIA.
Assessment results are calculated from the answers you provide. Automated tools may prepare explanatory summaries. These results are indicative and do not verify your systems or certify compliance. They are not used to make employment decisions or decisions with legal consequences for an individual.
An enquiry, report request or application does not automatically subscribe you to marketing. Electronic direct marketing must meet POPIA's requirements. You may ask us to stop marketing at any time using the contact details below or the method provided in the message.
4. Information Security
We must take appropriate, reasonable technical and organisational measures to protect personal information against loss, damage and unlawful access or processing. Access is limited to people who need the information for an authorised purpose.
No website or communication method can guarantee that every security incident will be prevented. This does not remove our duties under POPIA. Where the law requires notification of a security compromise, we notify the Information Regulator and affected persons as soon as reasonably possible, subject to the Act. When acting as an operator, we notify the responsible party as required by POPIA.
This policy does not create a guarantee that systems are secure or expand the services agreed with a client.
5. Retention
We retain information for as long as legally permitted and necessary for its intended purpose or another lawful purpose permitted by POPIA. Records may also be retained where lawfully required for contracts, legal obligations or the establishment, exercise or defence of legal rights.
Where you agree to join our talent pool, we may retain your recruitment information to consider suitable future opportunities. Continued retention depends on the purpose remaining relevant and a valid lawful basis. We review whether the information is still needed. You may update your details or request removal, subject to lawful retention requirements.
Information that we are no longer authorised to retain must be deleted, destroyed or changed so that it no longer identifies you. A removal request does not require destruction of records that we must or may lawfully retain. Any such records remain restricted to their authorised purpose.
6. Your Rights
Subject to applicable law, you may:
- Ask us, without charge, to confirm whether we hold your personal information.
- Request access to your information and information about its recipients.
- Request correction or deletion on the grounds provided by POPIA.
- Object to processing where POPIA permits, or withdraw consent where processing relies on it.
- Object to direct marketing.
- Complain to the Information Regulator.
Withdrawal of consent does not invalidate earlier lawful processing. It may affect our ability to fulfil a request. Processing may continue only where another lawful basis applies.
Send requests to info@cyberxperts.co.za with the subject “Privacy request”. We may require reasonable proof of identity or authority to prevent unauthorised disclosure. Applicable legal procedures, forms and access fees may apply. We explain any lawful refusal or limitation and the available remedies.
Where we act on a client's behalf, requests about that client's information may need to be handled with the client. This does not remove our own legal obligations.
7. Sharing Information
We may share relevant information with authorised staff, service providers, professional advisers and authorities where needed for a lawful purpose. Providers may support communications, website operation, recruitment, assessment reports and agreed services. Operators acting on our behalf must meet POPIA's written security requirements. We do not sell personal information.
Information may be processed outside South Africa. Any transfer must comply with section 72 of POPIA. This includes adequate protection under applicable law, binding rules or an agreement, or another ground expressly permitted by the Act. Required notices must explain the intended transfer and the protection afforded. Using the website is not blanket consent to international transfers.
Optional analytics uses cookies and usage information to measure visits and help us understand how the website is used. It loads only after you accept analytics. You may decline or withdraw that choice through Cookie settings in the footer. Your saved choice is kept for up to six months before we ask again.
Restricted website areas use cookies to manage access. Website operation also involves usage and security records. External links and embedded content may connect you to services governed by their own privacy notices. We remain responsible for information we receive and process.
8. Changes to This Policy
We may update this policy and publish the revised date. We provide further notice or obtain consent where required before changing how information is processed. An update does not retrospectively authorise unlawful processing.
9. Contact Us
Cyberxperts Email: info@cyberxperts.co.za Telephone: 011 568 6725 Address: Honeywood Office Park, 2 Humber Street, Woodmead, Sandton, 2191, South Africa.
For a privacy complaint, use the subject “Privacy complaint”. Requests are referred to the person responsible for handling them.
You may also lodge a POPIA complaint with the Information Regulator through its complaints procedure or call 010 023 5200.