1. Introduction
SACS Services (“SACS”, “we”, “us” or “our”) respects your privacy and is committed to processing personal information lawfully, reasonably and securely in accordance with the Protection of Personal Information Act 4 of 2013 (POPIA).
This policy explains how we handle personal information collected through sacs.co.za, our contact form, email communications and enquiries about our cybersecurity services or training.
2. Information we collect
We may collect your name, email address, telephone number, organisation, enquiry details, correspondence and any information you choose to provide. Our website and security tools may also record technical information such as IP address, browser type, device information, referring page, pages visited and date and time of access.
3. How we collect information
We collect information directly from you when you contact us, submit a form, request services or training, or communicate with us. Limited technical information may be collected automatically through cookies, server logs, analytics and website security tools.
4. Why we process information
We process personal information to respond to enquiries; provide and improve services and training; prepare proposals and manage client relationships; operate, secure and troubleshoot the website; meet contractual, legal and regulatory obligations; and protect our legitimate business and security interests.
Where required, processing is based on consent. In other cases it may be necessary to take steps at your request, perform a contract, comply with law or pursue a legitimate interest that does not unjustifiably infringe your rights.
5. Sharing information
We do not sell personal information. We may share it only where reasonably necessary with authorised employees, professional advisers, website hosting, email, analytics, security or other service providers, or with regulators and law-enforcement authorities where required by law. Providers are expected to protect the information and use it only for the agreed purpose.
6. International processing
Some technology providers may process information outside South Africa. Where this occurs, we take reasonable steps to ensure that appropriate contractual or legal safeguards apply as required by POPIA.
7. Retention and security
We retain personal information only for as long as reasonably necessary for the purpose for which it was collected, including applicable contractual, legal, tax, dispute-resolution and security requirements. We use reasonable technical and organisational safeguards, but no internet transmission or storage system is completely secure.
8. Your rights
Subject to applicable law, you may ask whether we hold your personal information; request access, correction or deletion; object to certain processing; withdraw consent where processing relies on consent; or complain about our handling of your information. We may need to verify your identity before acting on a request, and legal exceptions may apply.
9. Cookies
Our website may use cookies and similar technologies for essential operation, security, preferences and audience measurement. Please read our Cookie Policy for more information.
10. Children
This website is not directed at children and we do not knowingly collect children’s personal information through it without appropriate authorisation.
11. Changes to this policy
We may update this policy when our practices, services or legal obligations change. The current version will be published on this page.
12. Contact and complaints
For privacy questions or requests, contact SACS at info@sacs.co.za.
You may also lodge a complaint with the South African Information Regulator. Current contact details and complaint procedures are available at inforegulator.org.za.
Last updated: 28 September 2026