1. Information Collection: We collect personal information including but not limited to: contact details (name, email, phone), company information, project requirements, technical specifications, and communication records. Collection occurs through direct communication, project consultations, service agreements, and website interactions. All data collection is limited to what is necessary for delivering our cloud solutions, software development, AI implementations, and DevOps services.
2. Data Usage: Your information is utilized exclusively for service delivery, project management, technical support, invoicing, and maintaining ongoing client relationships. We use collected data to: design and implement cloud infrastructure solutions, develop custom software applications, provide AI/ML consulting, deliver DevOps automation, conduct technical assessments, provide customer support, and fulfill contractual obligations. No data is used for marketing without explicit consent.
3. Security Measures: We implement enterprise-grade security protocols including: AES-256 encryption for data at rest, TLS 1.3 for data in transit, multi-factor authentication for system access, regular security audits and penetration testing, ISO 27001 compliant data handling procedures, secure cloud storage with AWS/Azure enterprise security features, access controls with role-based permissions, and 24/7 security monitoring. Our team undergoes regular security training and follows strict data handling protocols.
4. Data Retention: Client data is retained for the duration of active projects plus seven (7) years for compliance purposes, or as required by applicable regulations. Project deliverables and technical documentation may be retained longer to support ongoing maintenance and support services. Upon request and completion of legal retention requirements, all client data will be securely deleted from our systems.
5. Third-Party Disclosure: We do not sell, trade, or transfer personal information to third parties without explicit written consent, except when required by law or necessary for service delivery (e.g., cloud service providers, specialized technical partners). Any third-party partners are bound by strict confidentiality agreements and security requirements equivalent to our own standards.
6. Your Rights: You have the right to access, correct, update, or delete your personal information. You may request data portability, restrict processing, or object to certain uses of your data. To exercise these rights, contact our data protection officer at info@quintessential-is.co.za with your specific request and verification of identity.
7. Compliance: This policy complies with GDPR, POPIA (Protection of Personal Information Act), and other applicable data protection regulations. We regularly review and update our practices to maintain compliance with evolving privacy legislation.
Contact for Privacy Concerns: For any privacy-related questions, concerns, or to exercise your rights, contact our Data Protection Officer at info@quintessential-is.co.za or call 083 397 3341. We will respond to all privacy inquiries within 72 hours and resolve concerns within 30 days.
Last updated: January 2025. This policy may be updated periodically to reflect changes in our practices or applicable laws. Clients will be notified of significant changes.
