Privacy Policy (POPIA)

Please note: this policy is provided as a clear, good-faith summary of how we handle personal information. It is not legal advice. Before publication, have it reviewed by your legal advisor and confirm it reflects your actual internal practices and your registered Information Officer’s details.

1. Who we are

iTRINITY (“we”, “us”, “our”) is an information technology services provider based at Clearwater Office Park, Building 5, Ground Floor, Millennium Blvd, Strubens Valley, Roodepoort, 1724, South Africa. We are the responsible party for the personal information described in this policy.

2. What information we collect

We collect only what we need to provide our services and to respond to you:

Contact details you give us — name, company, email address, telephone number — when you complete a form, request an assessment, or email us.
Service and support data — information about your IT environment, devices, systems, tickets and incidents, which is necessary for us to support and secure them.
Website usage data — basic technical information such as pages visited and approximate location, used to understand how the site is used and to keep it secure.
Employment applications — the CV and details you send us when applying for a role.

We do not knowingly collect personal information from children.

3. Why we process it (lawful basis)

To provide, support, monitor and secure the IT services you have engaged us for (performance of a contract).
To respond to enquiries, quotes and assessment requests you initiate (your consent / steps before a contract).
To meet legal, tax and regulatory obligations (legal obligation).
To protect our systems and our clients’ systems against security threats (legitimate interest).

4. Sharing your information

We do not sell personal information. We share it only where necessary: with trusted service providers and operators who help us deliver our services (for example Microsoft for cloud and email services, our monitoring and endpoint-security vendors, and our hosting providers), and where we are legally required to do so. Where an operator processes personal information on our behalf, we require them to keep it confidential and secure.

5. Cross-border transfers

Some of the platforms we use (such as Microsoft 365 and Azure) may store or process data outside South Africa. Where personal information is transferred across borders, we take reasonable steps to ensure it receives a comparable level of protection to that required under POPIA.

6. How long we keep it

We keep personal information only for as long as it is needed for the purpose it was collected, or for as long as the law requires us to keep it — for example, financial records that must be retained for statutory periods. When it is no longer needed, we delete or de-identify it.

7. How we protect it

Security is our core business. We apply appropriate technical and organisational measures — including access control, encryption in transit, endpoint protection, monitoring, patching and backups — to guard against loss, unauthorised access and misuse. No system is perfectly secure, but we take this seriously and continuously improve it.

8. Your rights under POPIA

You have the right to:

Ask what personal information we hold about you, and request access to it.
Ask us to correct, update or delete information that is inaccurate, irrelevant, excessive, out of date or obtained unlawfully.
Object to the processing of your personal information in certain circumstances.
Withdraw consent where we rely on it (this won’t affect processing already carried out).
Lodge a complaint with the Information Regulator.

To exercise any of these, email info@itrinity.co.za. We may need to verify your identity before we act on a request.

9. Marketing

We only send marketing communications where you have opted in or where we are otherwise permitted to do so. Every marketing email includes an unsubscribe link, and you can opt out at any time by emailing us.

10. Cookies

Our website uses only what is necessary to function and to understand basic usage. For detail, see our Website & Cookie Policy.

11. The Information Regulator

If you believe we have not handled your personal information lawfully, you may complain to the Information Regulator (South Africa) —inforegulator.org.za. We’d appreciate the chance to put it right first, so please contact us too.

12. Changes to this policy

We may update this policy from time to time. The “last updated” date at the top reflects the current version.

13. Contact us

Questions about this policy or about how we handle your information:
Email: info@itrinity.co.za
Phone: +27 11 664 6219
Post: Clearwater Office Park, Building 5, Ground Floor, Millennium Blvd, Strubens Valley, Roodepoort, 1724