This policy explains what personal information Knox Findata (Pty) Ltd ("Knox", "we", "us") collects through this website and in delivering our services, why we collect it, and what we do with it. We keep it in plain language on purpose.
What we collect
When you submit our assessment form we collect your name, company, email address, phone number, role, and the answers you give about your systems, data volumes and business. When you become a client we additionally collect the operational details needed to deliver the service, such as server details, backup schedules and authorised contact persons.
We do not collect special personal information such as health, religious or biometric data, and we ask you not to include any in free-text fields.
Why we collect it
- To assess whether Knox is the right fit for your business and respond to your enquiry
- To deliver, support and bill the services you engage us for
- To meet our own legal and accounting obligations
We do not sell personal information. We do not use it for third-party advertising.
Who processes it with us
Form processing. Assessment submissions are transmitted via Formspree, a form-processing service whose servers are located in the United States. This means your submission is transferred outside South Africa to a jurisdiction with different data protection laws. Formspree is contractually bound to process the data only for delivery to us.
Backup infrastructure. Client backup data is stored encrypted in South African data centres operated by our infrastructure partner. Backup contents are encrypted before transmission and cannot be read by Knox or the infrastructure partner.
Support delivery. Remote support is delivered through TeamViewer sessions by Knox or by specialist consultants operating under Knox's instruction and confidentiality obligations.
Website fonts. This site loads fonts from Google Fonts, which involves your browser sharing your IP address with Google.
How long we keep it
Assessment submissions that do not become clients are deleted within 12 months. Client records are retained for the duration of the engagement and thereafter as required by South African tax and company law, generally five years.
Your rights
Under the Protection of Personal Information Act, 4 of 2013 (POPIA) you may ask us to confirm what personal information we hold about you, ask for it to be corrected or deleted, object to processing, and complain to the Information Regulator. To exercise any of these rights, email info@knoxfindata.co.za. See our POPIA Notice for the Regulator's contact details.
Security
Backup data is encrypted in transit and at rest. Access to client information is limited to Knox and to consultants bound by confidentiality. No method of transmission or storage is perfectly secure, but protecting data is literally our business, and we treat yours accordingly.
Changes
If this policy changes materially we will update this page and revise the date above.