Privacy Policy

Amidel (Pty) Ltd  |  Registration No. 2013 / 081609 / 07

Version 1.0  |  Effective date: April 2026

 

  1. Introduction

Amidel (Pty) Ltd (“Amidel”, “we”, “us”, or “our”) is a Technology and Business Consulting firm headquartered in Woodmead, Johannesburg. We are committed to protecting the personal information of everyone who interacts with us — including visitors to our website, clients, job applicants, and store customers.

This Privacy Policy explains how we collect, use, share, store, and protect personal information in accordance with the Protection of Personal Information Act 4 of 2013 (`POPIA`) and any regulations made under it.

This policy applies to:

  • The amidel.co.za website and all pages within it
  • The Amidel Store at store.amidel.co.za
  • Any personal information collected in the course of providing consulting services
  • Job applications and career-related interactions

By interacting with our website or services, you acknowledge that you have read and understood this Privacy Policy.

  1. Who We Are — Information Officer

Amidel (Pty) Ltd is the Responsible Party under POPIA. Our Information Officer is responsible for ensuring compliance with POPIA and can be contacted as follows:

Information Officer

Amidel (Pty) Ltd

Woodlands Office Park, Building 16, 2nd Floor

20 Woodlands Drive, Woodmead, Johannesburg, 2191

Email: connect@amidel.co.za

Tel: 011 258 8579

If you have any questions about how we handle your personal information, or wish to exercise any of your rights under POPIA, please contact our Information Officer using the details above.

 

 

  1. Personal Information We Collect and Why

We collect only the minimum personal information necessary for the specific purpose for which it is collected. The table below sets out what we collect, why, and on what legal basis under POPIA.

 

Purpose Personal information collected Lawful basis (POPIA) Retention
Contact / enquiry form

•     Name

•     Email address

•     Phone number (optional)

•     Message content

 Consent (s11(1)(a)) 3 years from last contact, or until withdrawn
Careers / job applications

•     Name

•     Email address

•     CV / résumé

•     Employment history

•     Qualifications

 Consent (s11(1)(a)) 12 months if unsuccessful; duration of employment if hired
Amidel Store (store.amidel.co.za)

•     Name

•     Email address

•     Billing / delivery address

•     Payment details (processed by payment gateway)

•     Order history

 Contractual necessity (s11(1)(b)) 5 years (financial record-keeping obligations)
Client service delivery

•     Business contact details

•     Project-related information

•     Communications

 Contractual necessity (s11(1)(b)) Duration of contract plus 5 years
Website analytics

•     IP address

•     Browser type and version

•     Pages visited

•     Time and date of visit

 Legitimate interest (s11(1)(f)) — website security and improvement 26 months (standard analytics retention)
Marketing communications

•     Name

•     Email address

•     Communication preferences

 Consent (s11(1)(a)) — opt-in only Until consent withdrawn

We do not collect special personal information (such as race, health, biometric data, religious beliefs, or criminal records) unless you voluntarily provide it — for example, in an employment equity context during recruitment — and only with your explicit consent.

  1. How We Use Your Personal Information

We will only use your personal information for the purpose for which it was collected, or for a compatible purpose that you would reasonably expect. Specifically, we use your information to:

  • Respond to enquiries and provide requested services or quotations
  • Process and fulfil orders placed through the Amidel Store
  • Manage the recruitment and onboarding process for job applicants
  • Deliver consulting, technology, and advisory services to clients
  • Communicate important updates about our services or our relationship with you
  • Send marketing communications, but only where you have opted in
  • Maintain the security and functionality of our website
  • Meet our legal and regulatory obligations

We will not use your personal information for automated decision-making that produces legal or similarly significant effects without your consent.

  1. When and With Whom We Share Personal Information

We do not sell, rent, or trade your personal information. We share it only in the following circumstances:

5.1  Service providers (operators)

We use third-party service providers who process personal information on our behalf, strictly under our instruction and subject to data processing agreements. Our key service providers include:

 

Third party Purpose Privacy information
Microsoft 365 Email, file storage, collaboration, and business productivity microsoft.com/en-us/trust-center/privacy
Payment gateway (store.amidel.co.za) Processing payments for store purchases. Card details are not stored by Amidel. Refer to payment provider’s published privacy policy
Website hosting / WordPress Hosting and serving the amidel.co.za website Hosting provider’s data processing terms apply
Analytics (if active) Aggregated, anonymised website usage statistics No personally identifiable information shared with analytics providers

5.2  Client engagements

In the course of providing consulting services, we may process personal information on behalf of our clients. In such cases, the client is the Responsible Party and Amidel acts as an Operator. Separate data processing agreements govern these arrangements.

5.3  Legal obligations

We may disclose personal information where required to do so by law, court order, or a lawful request from a regulatory or law enforcement authority.

5.4  Cross-border transfers

Some of our service providers (such as Microsoft) may process or store data outside South Africa. We only transfer personal information outside South Africa where adequate safeguards exist as required by section 72 of POPIA. Microsoft’s data centres are subject to Standard Contractual Clauses and Microsoft’s EU-US Data Privacy Framework commitments.

 

 

  1. How We Store and Protect Your Information

We take the security of personal information seriously and implement appropriate technical and organisational measures to protect it from unauthorised access, loss, disclosure, or destruction. Our security measures include:

  • All files stored on Microsoft OneDrive and SharePoint, encrypted at rest using AES-256
  • All data in transit protected by TLS 1.2 or higher
  • Full-disk BitLocker encryption on all corporate devices
  • Multi-factor authentication (MFA) enforced for all staff accessing company systems
  • Role-based access controls (RBAC) limiting access to personal information on a need-to-know basis
  • Continuous security monitoring via Microsoft Defender XDR
  • Documented onboarding and offboarding procedures ensuring timely removal of access when staff leave

Despite these measures, no system is completely secure. If you believe your personal information has been compromised, please contact us immediately at connect@amidel.co.za.

In the event of a data breach that poses a risk to your rights and freedoms, we will notify the Information Regulator and affected data subjects as required by section 22 of POPIA.

  1. How Long We Keep Your Information

We retain personal information only for as long as is necessary to fulfil the purpose for which it was collected, or as required by law. Specific retention periods are set out in the table in Section 3.

At the end of the applicable retention period, personal information is securely deleted or anonymised. Where deletion is not immediately possible (for example, in backup systems), the information is isolated and protected until deletion is feasible.

  1. Your Rights Under POPIA

As a data subject under POPIA, you have the following rights in respect of your personal information:

 

Your right What this means
Right of access (s23) You may request a copy of the personal information we hold about you.
Right to correction (s24) You may request that inaccurate, irrelevant, excessive, or outdated information be corrected or deleted.
Right to object (s11(3)) Where processing is based on legitimate interest, you may object at any time. We will assess whether our legitimate interest overrides your objection.
Right to withdraw consent Where processing is based on consent, you may withdraw it at any time. Withdrawal does not affect the lawfulness of processing prior to withdrawal.
Right to complain (s74) You may lodge a complaint with the Information Regulator of South Africa at inforegulator.org.za if you believe your rights have been infringed.

To exercise any of these rights, please contact our Information Officer at connect@amidel.co.za. We will respond within a reasonable time and no later than 30 days from receipt of your request. We may need to verify your identity before processing your request.

You may also submit a complaint directly to the Information Regulator:

  • Website: www.inforegulator.org.za
  • Email: inforeg@justice.gov.za
  • Address: JD House, 27 Stiemens Street, Braamfontein, Johannesburg, 2001

 

 

  1. Cookies and Website Analytics

Our website may use cookies and similar tracking technologies to improve your browsing experience and gather anonymised usage statistics. Cookies are small text files stored on your device when you visit a website.

9.1  Types of cookies we may use

  • Essential cookies — required for the website to function correctly (e.g. session management, security)
  • Analytical cookies — used to understand how visitors use our website in aggregate, anonymised form

We do not use advertising or targeting cookies.

9.2  Managing cookies

You can control and delete cookies through your browser settings. Disabling essential cookies may affect the functionality of the website. Please note that third-party services embedded in our website (such as contact forms or video content) may set their own cookies subject to those parties’ privacy policies.

  1. Children’s Personal Information

Our website and services are directed at businesses and professionals. We do not knowingly collect personal information from children under the age of 18. If you believe we have inadvertently collected such information, please contact us immediately and we will delete it.

  1. Marketing Communications

We will only send you marketing communications about our services, events, and insights if you have explicitly opted in to receive them. Each marketing email we send will include a clear and easy unsubscribe mechanism.

You may withdraw your consent to marketing communications at any time by clicking “Unsubscribe” in any email we send, or by contacting us at connect@amidel.co.za. Withdrawal of consent does not affect your ability to receive service-related communications.

  1. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, services, or legal obligations. When we make material changes, we will:

  • Update the “Effective date” at the top of this policy
  • Post the updated policy on amidel.co.za
  • Where the changes significantly affect your rights, notify you directly by email if we hold your contact details

We encourage you to review this policy periodically. Continued use of our website or services after changes have been posted constitutes acceptance of the updated policy.

  1. Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal information, please contact:

Information Officer — Amidel (Pty) Ltd

Woodlands Office Park, Building 16, 2nd Floor, 20 Woodlands Drive, Woodmead, Johannesburg, 2191

Email: connect@amidel.co.za

Tel: 011 258 8579

Operating hours: Monday to Friday, 08:00 – 17:00

This Privacy Policy was drafted in accordance with the Protection of Personal Information Act 4 of 2013 (POPIA) and is effective from April 2026.