Legal
Privacy & POPIA notice
How Prospra IQ Enterprises collects, uses, stores and protects personal information, and what your rights are under the Protection of Personal Information Act, 4 of 2013.
Last updated: 18 August 2026
Responsible party: Prospra IQ Enterprises (Pty) Ltd, registration number 2026/606251/07, Limpopo, South Africa.
Information Officer: Istvan Schuch — privacy@prospraenterprises.com
1. Scope
This notice applies to personal information we process as the responsible party — principally information about visitors to this website, prospective clients and clients.
Where we build or host systems for a client, that client is the responsible party for the personal information inside their system and we act as an operator on their written instruction. Our obligations in that role are set out in the operator agreement with that client, not in this notice.
2. What we collect
- Information you give us. Name, company name, email address, telephone number and the content of your enquiry, submitted through the contact form or by email.
- Information collected automatically. Standard server and edge-network logs — IP address, user agent, requested page, timestamp and referrer — retained for security, abuse prevention and aggregate traffic statistics.
We do not use advertising trackers, and we do not sell or rent personal information to anyone.
3. Why we process it, and on what basis
- To respond to your enquiry — processed on the basis of the consent you give when submitting the form.
- To provide services under a contract — processed because it is necessary to conclude or perform a contract with you.
- To keep the site secure and available — processed on the basis of our legitimate interest in protecting the service.
- To meet legal obligations — for example retaining tax and accounting records for the periods required by South African law.
4. Who we share it with
We share personal information only with service providers who process it on our behalf, under contract, and only to the extent needed to deliver the service:
- Website hosting and content delivery, including web application firewall and DDoS protection.
- Email delivery and mailbox providers.
- Accounting and business administration providers.
Some of these providers process information outside South Africa. Where that happens, we rely on section 72 of POPIA and use providers subject to laws or binding agreements that give substantially similar protection.
5. How long we keep it
- Enquiries that do not become clients — 24 months from last contact, then deleted.
- Client records — for the duration of the relationship and then as required by tax and company law.
- Server and security logs — no longer than 12 months.
6. How we protect it
We apply reasonable technical and organisational measures appropriate to the risk, including encryption in transit, access control on a least-privilege basis, secrets held in a managed vault, audit logging of access to personal information, and tested backups. No system is perfectly secure, and we do not claim otherwise. If a security compromise affects your personal information, we will notify you and the Information Regulator as required by section 22 of POPIA.
7. Your rights
Under POPIA you have the right to:
- ask what personal information we hold about you, and receive a copy of it;
- ask us to correct or delete information that is inaccurate, irrelevant, excessive, out of date, incomplete, misleading or unlawfully obtained;
- object to processing based on legitimate interest;
- withdraw consent at any time, without affecting processing already carried out;
- complain to the Information Regulator.
To exercise any of these, email privacy@prospraenterprises.com. We will respond within a reasonable period and may ask you to verify your identity first.
8. Complaints to the Regulator
Information Regulator (South Africa)
JD House, 27 Stiemens Street, Braamfontein, Johannesburg, 2001
Email: complaints.IR@justice.gov.za
Website: inforegulator.org.za
9. Access to records — PAIA
Requests for access to records held by us are dealt with under the Promotion of Access to Information Act, 2 of 2000. The procedure, the categories of records we hold, the prescribed forms and the applicable fees are set out in our PAIA manual.
10. Cookies
This website sets no advertising or analytics cookies. Our hosting and security provider may set a strictly necessary cookie to distinguish legitimate traffic from automated abuse. If we later add analytics, this notice will be updated first and consent will be requested where required.
11. Changes
We may update this notice. The version in force is the one published on this page, and the date at the top reflects when it last changed. Material changes affecting how we use information you have already given us will be communicated directly.