Senior-led cybersecurity and IT practice, Pretoria Call 012 012 5072 WhatsApp We respond within one business day

Legal

Privacy policy

Last updated: October 2026

1. Who we are

This website is operated by Rhentech Pty Ltd, registered in the Republic of South Africa. When we refer to "we", "us", or "our" in this policy, we mean Rhentech Pty Ltd.

We provide cybersecurity audits, managed cybersecurity services, and strategic IT consulting to organisations across South Africa.

2. What data we collect

Through the contact form on our website, we collect the personal data you choose to provide. This may include:

  • Your name
  • Company name
  • Email address
  • Phone number (optional)
  • The content of your message
  • Your area of interest (e.g. Audit, Managed Services, Consulting)

When present, we also collect the advertising click ID (gclid), campaign tags (utm_*), and the landing page you arrived on. These are sent with your enquiry so we know which advert or page led to it.

Analytics and advertising

We also use analytics and advertising tools. They run through Cloudflare Zaraz, a service of Cloudflare, our hosting provider, which loads them from Cloudflare's servers rather than from scripts supplied by each platform.

These tools collect the pages you view, the page that referred you, the time of your visit, your browser and device type, your IP address and the approximate location derived from it, identifiers stored in cookies on this site, and the following actions when they happen: submitting the contact form, selecting a telephone, WhatsApp or booking link, selecting a call-to-action button, scrolling through most of a page, reading an article, and following a link to another website. They do not receive the content of your enquiry, your name, your email address or your telephone number.

  • Google Analytics: shows us how the site is used, so we can see which pages are useful and which are not.
  • Google Ads: records the advertising click ID when you arrive from a Google advert, tells Google Ads when an enquiry or contact follows, and lets us show our adverts to people who have visited this site (remarketing).
  • Meta (Facebook and Instagram): Cloudflare's servers send Meta a record of the pages you view and of enquiries and contact actions, with your IP address, browser details and an identifier created for your browser. Meta uses this to measure our adverts and to build audiences of visitors to show our adverts to.
  • LinkedIn: your browser sends LinkedIn a record of the pages you view and of enquiries and contact actions. If you have LinkedIn cookies in your browser, LinkedIn can link this to your LinkedIn account. LinkedIn uses it to measure our adverts and to build audiences of visitors to show our adverts to.
  • X: your browser sends X a record of the pages you view and of enquiries and contact actions. If you have X cookies in your browser, X can link this to your X account. X uses it to measure our adverts and to build audiences of visitors to show our adverts to.

Google, Meta, LinkedIn and X can combine this information with what they already hold about you from their own services and from other websites. That is how remarketing works: it lets us show our adverts on those platforms to people who have visited this site. We do not make decisions about you on the basis of this information.

3. How we use your data

We use the personal data you provide to:

  • Respond to your enquiry or request
  • Provide the services you have asked about
  • Send relevant follow-up information related to your enquiry
  • Improve our services and communications

We do not use the details you give in the contact form for marketing, and we do not pass them to advertising platforms. If we wish to send you updates beyond the scope of your original enquiry, we will ask for your consent first. Separately, the advertising tools described in section 2 are used to show our adverts to people who have visited this site; you can stop this at any time, as section 8 explains.

4. Legal basis for processing

Under the Protection of Personal Information Act, 2013 (POPIA), we process your personal information in accordance with the eight conditions for lawful processing. The conditions most directly relevant to our handling of your enquiry are:

  • Accountability (s.8): we, as the responsible party, take responsibility for compliance with the conditions for lawful processing in relation to the information you provide.
  • Processing limitation (s.9 to 12): we process only the personal information that is adequate, relevant and not excessive for the purpose of responding to your enquiry, and only with a lawful justification - typically your consent in submitting the form, or our legitimate interest in responding to a business enquiry you have initiated.
  • Purpose specification (s.13 to 14): we collect your personal information for the specific, explicitly defined and lawful purpose of replying to your enquiry and providing information about our services, and we do not retain it for longer than necessary.
  • Further processing limitation (s.15): we will not process your personal information for any purpose that is incompatible with the purpose for which it was originally collected.
  • Information quality (s.16): we take reasonably practicable steps to ensure that the personal information we hold is complete, accurate, not misleading and kept up to date.
  • Openness (s.17 to 18): this policy is part of how we discharge our openness obligations under POPIA. We will tell you what we hold, why we hold it and who else we share it with, on request.
  • Security safeguards (s.19 to 22): we maintain appropriate technical and organisational measures to secure the integrity and confidentiality of your personal information, and will notify the Information Regulator and affected data subjects under section 22 if there are reasonable grounds to believe your personal information has been accessed or acquired by an unauthorised person.
  • Data subject participation (s.23 to 25): you have the right to ask whether we hold personal information about you, to request access to it, and to request its correction or deletion in line with section 24.
  • Legitimate interest (s.11(1)(f)): for the analytics and advertising tools described in section 2: understanding how this site is used and advertising our services to people who have shown an interest in them. These tools start when a page first loads, before you make a choice, and stop when you select "Do not accept". You can object at any time through "Cookie settings" (s.11(3)), and we will stop.

5. Data sharing

We do not sell, rent, or trade your personal data to any third party.

Form submissions are processed by Formspree (Formspree, Inc.), which acts as a data processor on our behalf. Formspree receives and transmits your form data so that we can respond to your enquiry. You can review Formspree's privacy policy at formspree.io/legal/privacy-policy.

Our website is hosted on Cloudflare Pages. Cloudflare may process limited technical data (such as IP addresses) as part of delivering the website. Cloudflare acts as a data processor in this context. You can review Cloudflare's privacy policy at cloudflare.com/privacypolicy.

Through Cloudflare Zaraz, Google, Meta, LinkedIn and X receive the information described in section 2. Each of them also uses it for its own purposes, under its own privacy policy:

Some of these providers process information outside South Africa, including in the United States. You can ask us for details of the safeguards that apply.

6. Data retention

We retain enquiry data (form submissions) for a maximum of 2 years from the date of submission. After this period, your data is securely deleted.

If your enquiry leads to a service engagement, data related to that engagement will be retained in accordance with our contractual obligations and applicable legal requirements.

Information collected by the analytics and advertising tools is held by Google, Meta, LinkedIn and X under their own retention rules. The cookies on this site expire as listed in section 8.

7. Your rights

Under POPIA, you have the following rights regarding your personal information:

  • Right of access (s.23): request confirmation of whether we hold personal information about you, and request a copy of that information.
  • Right to correction or deletion (s.24): request that we correct or delete personal information that is inaccurate, irrelevant, excessive, out of date, incomplete, misleading or obtained unlawfully.
  • Right to object (s.11(3)): object, on reasonable grounds relating to your particular situation, to the processing of your personal information.
  • Right to withdraw consent (s.11(2)): withdraw any consent you have given, at any time, where consent was the legal basis for processing.
  • Right not to be subject to automated decision-making (s.71): not be subject to a decision based solely on automated processing of your personal information that has legal or similarly significant effects, save for the limited exceptions set out in section 71.
  • Right to complain (s.74): submit a complaint to the Information Regulator if you believe we have not handled your personal information in line with POPIA.

In addition to your POPIA rights, the Promotion of Access to Information Act, 2000 (PAIA) gives you a separate statutory route to request access to records we hold. PAIA requests are handled in line with our PAIA manual, available on request via our contact page.

To exercise any of these rights, please contact us via our contact page.

If you are not satisfied with our response, you have the right to lodge a complaint with the Information Regulator of South Africa:

  • Website: inforegulator.org.za
  • Address: 33 Hoofd Street, JD House, Forum 3, Braampark, Braamfontein, 2017
  • Complaints email: complaints.IR@justice.gov.za
  • General email: enquiries@inforegulator.org.za
  • Telephone: +27 (0) 10 023 5207

8. Cookies and your choice

When you first visit, a bar at the bottom of the page offers "Accept" and "Do not accept". The analytics and advertising tools start when the page loads, before you choose, and keep running if you select "Accept" or make no choice.

If you select "Do not accept", the tools stop and are not used again on your later visits, and we keep a record of your choice so we do not ask again.

You can change your choice at any time through "Cookie settings" at the bottom of every page, or with the button below. Deleting this site's cookies in your browser also clears it, and the bar will appear again.

Cookies on this site

  • rt_consent: records whether you selected "Accept" or "Do not accept" (also kept in your browser's local storage) (12 months).
  • cf_consent: Cloudflare Zaraz's record of the same choice, which switches the tools on or off (set by Cloudflare Zaraz).
  • cf_zaraz_client: identifies your browser to Cloudflare Zaraz (1 year).
  • cfz_google-analytics_v4: lets Google Analytics count repeat visits (1 year).
  • cfzs_google-analytics_v4: groups the pages of one visit (deleted when you close your browser).
  • cfz_google-ads: holds the advertising click ID when you arrive from a Google advert (up to 1 year).
  • cfz_facebook-pixel: holds the browser identifier sent to Meta, and the click ID when you arrive from a Facebook or Instagram advert (up to 1 year).
  • Other cfz_ cookies: hold the click ID when you arrive from a LinkedIn or X advert, so an enquiry can be matched to the advert (about 1 month).

Cookies on the platforms' own domains

Google Ads requests from your browser may read or set Google's own cookies on Google domains. Google states that its "IDE" advertising cookie lasts 24 months in South Africa.

LinkedIn requests from your browser may read or set LinkedIn's own cookies on LinkedIn domains, including bcookie (1 year), li_sugr (90 days), UserMatchHistory, AnalyticsSyncHistory, lms_ads and lms_analytics (30 days each) and lidc (24 hours), as listed in LinkedIn's cookie table.

X requests from your browser may read or set X's own cookies on X domains, as described in X's cookie notice.

Meta receives information from Cloudflare's servers only. No Meta script runs in your browser and Meta sets no cookies through this site.

Cloudflare, our hosting and CDN provider, may set functional cookies (such as __cflb or __cf_bm) to manage load balancing and bot protection. These are strictly necessary cookies and do not track your activity across other websites. You can learn more about Cloudflare's cookies at Cloudflare's cookie documentation.

9. Contact

If you have any questions about this privacy policy or how we handle your data, please get in touch via our contact page.

Rhentech Pty Ltd
Registered in South Africa