Website Privacy Policy

1. Introduction

Maisrs (Pty) Ltd, a private company duly registered in the Republic of South Africa under registration number 2025/101375/07 (“Maisrs”, “we”, “us” or “our”), is committed to protecting Personal Information and processing it lawfully, reasonably and in a manner that does not infringe the privacy of a data subject.

Office: Gauteng, South Africa. Service area: South Africa. Telephone: 010 825 5306. Email: info@maisrs.co.za.

By providing Personal Information to us, you acknowledge this Privacy Policy and authorize Maisrs and its contracted Operators to process Personal Information for the purposes described below, subject to applicable law.

2. Contact Details

Email: info@maisrs.co.za

Physical address: Gauteng, South Africa

Further access to information details must be recorded in the Maisrs PAIA Manual.

3. Our Services

Maisrs provides outsourced IT leadership, Virtual CISO and cybersecurity services, managed IT operations and support, Microsoft 365 and cloud services, infrastructure and connectivity management, backup and disaster-recovery services, and technology procurement and vendor management.

We may collect Personal Information when you contract with us, use our website or services, contact us, request a consultation, submit a support request, interact with us as a supplier, or apply for employment.

4. Personal Information We May Collect

• Identity and business information, including names, titles, company details and identification or registration information where needed
• Contact information, including email addresses, telephone numbers, service addresses and business addresses
• Financial and transactional information required for quotations, invoicing, payment and account administration
• Employment and recruitment information where applicable
• Technical information, including IP address, browser, device, operating-system and security-log information
• Service and support information, including instructions, tickets, correspondence, system details and authorized administrative credentials
• Website usage, cookie and analytics information
• Marketing and communication preferences

We may use aggregated or de-identified information that does not identify a person. If such information is combined with Personal Information so that a person can be identified, we will treat it as Personal Information.

5. How We Collect Personal Information

• Directly from you through forms, quotations, contracts, emails, calls, meetings and support interactions
• Automatically through cookies, server logs and security or website analytics
• From your organization where it authorizes us to support users or systems
• From suppliers, technology partners, credit bureau, professional advisers, regulators or public sources where lawful and relevant

6. Purpose and Lawful Basis of Processing

• To respond to enquiries and prepare quotations or proposals
• To conclude and perform contracts and deliver support, advisory and managed services
• To administer accounts, invoices, payments, renewals and supplier arrangements
• To manage identity, access, security, incidents, backups and service performance
• To comply with legal, regulatory, tax, accounting and record-keeping duties
• To prevent fraud, misuse, security incidents and unlawful activity
• To improve our services, website, operations and customer experience
• To communicate about similar services where permitted, and to send other direct marketing only where a lawful basis exists

We do not use Personal Information to make solely automated decisions that produce legal or similarly significant effects, unless disclosed and permitted by law.

7. Disclosure of Personal Information

We may disclose Personal Information only where relevant and lawful to contracted Operators and service providers, cloud and hosting providers, connectivity and technology suppliers, professional advisers, payment and accounting providers, regulators, law-enforcement authorities, courts, or a legitimate business successor. Operators acting on our behalf must be subject to appropriate confidentiality, security, and processing obligations.

8. Cross-Border Processing and Storage

Maisrs may use local or international cloud and technology suppliers. Where Personal Information is transferred outside South Africa, Maisrs will take reasonably practicable steps to ensure that the transfer is permitted under applicable data-protection law and is subject to appropriate safeguards. We do not state that all information is stored only in South Africa because the location depends on the applicable service and supplier.

9. Security

We take appropriate and reasonable technical and organizational measures designed to protect Personal Information against loss, damage, unauthorized destruction, unlawful access or unlawful processing. Measures may include access controls, multi-factor authentication, encryption where appropriate, secure configuration, backups, logging, monitoring, staff confidentiality, supplier controls and secure disposal. No internet transmission or storage method can be guaranteed to be completely secure.

10. Security Compromises

Where there are reasonable grounds to believe that Personal Information has been accessed or acquired by an unauthorized person, Maisrs will assess and manage the incident and provide notifications required by applicable law. Customers remain responsible for notifications and decisions falling within their role as Responsible Party unless the parties agree otherwise in writing.

11. Retention

We retain Personal Information only for as long as reasonably necessary for the purpose for which it was collected, to perform contractual obligations, establish or defend legal claims, or comply with legal and record-retention requirements. Information that is no longer required will be deleted, destroyed, or de-identified using appropriate methods.

12. Your Rights

• Request confirmation of whether we hold Personal Information about you
• Request access to Personal Information, subject to applicable law and the PAIA process
• Request correction or deletion of inaccurate, irrelevant, excessive, outdated, incomplete, misleading or unlawfully obtained information
• Object to processing in circumstances permitted by law
• Withdraw consent where processing relies on consent
• Lodge a complaint with the Information Regulator

Requests may be sent to info@maisrs.co.za. We may request information necessary to verify identity and authority before acting on a request.

13. Direct Marketing

Maisrs may communicate with existing customers about similar services where permitted by law. Other electronic direct marketing will be sent only where a lawful basis exists. Every marketing message will provide a reasonable opportunity to opt out, and an opt-out request will be honored.

14. Children

Our website and services are intended for businesses and are not directed at children. We do not knowingly process the Personal Information of children without the authorization or other lawful basis required by law.

15. Cookies and Third-Party Links

Our website may use essential, functional, and analytics cookies. Browser settings may be used to control cookies, although disabling essential cookies may affect website functionality. Our website may link to third-party sites. Maisrs is not responsible for the privacy practices of third-party sites.

16. Governing Law and Changes

This Privacy Policy is governed by the laws of the Republic of South Africa. We may update this policy from time to time and publish the updated version with its effective date.

17. Queries and Complaints

Contact Maisrs at info@maisrs.co.za. If a matter is not resolved, a complaint may be lodged with the Information Regulator through its official channels and eServices portal.

Annexure A: Definitions

Operator

A person who processes Personal Information for a Responsible Party in terms of a contract or mandate, without coming under the direct authority of that party.

Personal Information

Information relating to an identifiable, living natural person and, where applicable, an identifiable existing juristic person, as contemplated by POPIA.

Processing

Any operation or activity concerning Personal Information, whether automated or not, including collection, receipt, storage, use, dissemination, updating, restriction, deletion or destruction.

Responsible Party

The public or private body or other person which, alone or with others, determines the purpose of and means for processing Personal Information.

Special Personal Information

Personal Information concerning matters afforded additional protection under POPIA, including certain religious, philosophical, political, trade-union, health, biometric, criminal-behaviour and related information.