Privacy notice
This notice explains how Savi Dome (Pty) Ltd ("Savi Dome", "we") collects, uses, stores and shares personal information, and the rights you have under the Protection of Personal Information Act 4 of 2013 (POPIA). It applies to visitors to savidome.com, to people who contact us, and to the client staff and customers whose information we process while delivering our services.
Who is responsible
Savi Dome is the responsible party for personal information collected through this website and in our own business dealings. When we build or run systems for a client, the client is the responsible party and Savi Dome acts as an operator under a written data-processing agreement.
Information Officer: Francois van der Merwe, francois@savidome.com, 079 495 0171, 5 Joubert Street, Protea Heights, Cape Town, 7560.
What we collect and why
- Contact details you send us by email, phone or WhatsApp (name, company, email address, phone number, the content of your message) so that we can respond, quote and deliver work.
- Engagement records (contracts, invoices, correspondence, project documentation) to perform our contract with you and to meet tax and company-law record-keeping duties.
- Website technical data that our hosting provider logs automatically (IP address, browser type, pages requested, time of request) for security and to keep the site running. This website does not set analytics or advertising cookies.
We do not sell personal information and we do not send marketing you have not asked for.
Lawful basis
We process personal information to conclude and perform a contract with you, to comply with legal obligations (including the Companies Act, the Tax Administration Act and POPIA itself), and where we have a legitimate interest that does not override your rights, such as keeping our systems secure. Where we rely on your consent, you may withdraw it at any time.
Who we share it with
Only with service providers we need to run the business, each under contract and only for the stated purpose: our email and document hosting (Microsoft 365 and Google Workspace), our accounting software and accountant, our website host, and, for client systems, the cloud and AI providers named in that client's data-processing agreement. Some of these providers store information outside South Africa; where they do, we rely on contractual protections that meet the standard required by section 72 of POPIA.
How long we keep it
Contact enquiries that do not lead to an engagement are deleted within 12 months. Contract, invoice and accounting records are kept for the periods required by South African tax and company law (generally five to seven years). Client-system data is retained only for as long as the client instructs and is returned or deleted at the end of the engagement.
How we protect it
Access to personal information is limited to the people who need it, protected by multi-factor authentication, and recorded. Sensitive actions in the systems we build require a human approval and leave an audit trail. If a security compromise affects your personal information we will notify the Information Regulator and you as required by section 22 of POPIA.
Your rights
You may ask us what personal information we hold about you, ask us to correct or delete it, object to processing, or complain to the Information Regulator of South Africa (inforegulator.org.za). Requests go to the Information Officer above; we respond within 30 days. Our PAIA manual is available on request.
Changes
We will update this notice when our practices change and show the date of the latest version at the top of the page.