1. Who we are
Optiact (Pty) Ltd (“Optiact”, “we”, “us” or “our”) is a South African web technology company that designs, builds, hosts and supports websites, web applications and related digital infrastructure.
- Legal name
- Optiact (Pty) Ltd
- Registration number
- 2026/029666/07
- Country
- South Africa
- General email
- info@optiact.co.za
- Website
- www.optiact.co.za
2. Our POPIA roles
When Optiact decides why and how personal information is processed for its own business activities—for example enquiries, client administration, billing, support and marketing—Optiact acts as the responsible party.
Where an Optiact client determines why information about its customers, staff, learners, patients or other users is processed and Optiact processes that information only to provide the agreed service, Optiact ordinarily acts as an operator on that client's instructions.
3. Personal information we may process
4. Why we process personal information
- respond to enquiries and prepare quotations or proposals;
- enter into and perform contracts;
- create, secure and administer accounts;
- build, host, maintain and support websites and web applications;
- issue invoices and maintain business records;
- provide service, support, security and administrative communications;
- prevent abuse, fraud and unauthorised access;
- diagnose errors and improve service reliability;
- comply with legal, tax, accounting and record-keeping obligations; and
- send direct marketing where permitted by POPIA.
5. How we collect information
We may collect personal information directly from you when you submit a form, contact us, request a quotation, sign an agreement, create an account, make a payment or request support. We may also receive information from a client that instructs us to provide a service, from service providers used to deliver that service, or automatically through system and security logs.
6. Sharing, operators and service providers
We do not sell personal information. We may make information available to service providers where reasonably necessary to deliver, secure or administer our services, including cloud infrastructure, authentication, email, communications, payment and professional-service providers. Where POPIA requires it, contractual and security measures are used to govern operator processing.
Information may also be disclosed where required by law or reasonably necessary to establish, exercise or defend legal rights.
7. Processing outside South Africa
Some technology and cloud providers may process or store information outside South Africa. Where a transborder transfer occurs, Optiact takes reasonable steps to ensure the transfer is permitted under POPIA and appropriately safeguarded.
8. Retention
Personal information is retained only for as long as reasonably required for the purpose for which it was collected, to perform a contract, meet legitimate operational needs, comply with legal record-keeping requirements, resolve disputes or manage security matters. Where Optiact acts as an operator, retention and deletion generally follow the client's lawful instructions and the applicable service agreement.
9. Security safeguards
Optiact uses reasonable technical and organisational measures designed to protect personal information against loss, damage, unauthorised destruction, unlawful access and unauthorised processing. Depending on the service, safeguards may include authentication, least-privilege access, encryption in transit, managed cloud controls, logging, backups and incident-management procedures.
10. Your rights
Subject to POPIA and applicable exceptions, you may request access to personal information about you, request correction or deletion in appropriate circumstances, object to certain processing, withdraw consent where consent is the basis of processing, object to direct marketing and lodge a complaint with the Information Regulator.
Requests concerning information controlled by an Optiact client may need to be directed to that client as the responsible party.
For formal access to Optiact records under PAIA, see the PAIA Manual.
11. Direct marketing
Electronic direct marketing is carried out only where permitted by applicable law, including POPIA's requirements concerning consent, existing customers and the right to object. You may opt out of future direct marketing using the method provided in the communication or by contacting info@optiact.co.za.
12. Children and special personal information
Some client applications may involve information about children or special personal information, including healthcare information. Where Optiact is the responsible party, such processing will only occur where legally authorised and appropriately safeguarded. Where Optiact acts as an operator, processing is limited to the client's lawful instructions and the applicable agreement.
13. Cookies, local storage and analytics
Optiact websites and applications may use cookies, local storage or similar technologies for security, session management, preferences and core functionality. Where non-essential analytics or marketing technologies are enabled, appropriate information and controls will be provided where required.
14. Changes to this notice
We may update this Privacy Notice when our services, suppliers, technology or legal obligations change. The current version will be published on this page with an updated effective date.
15. Privacy contact
Optiact (Pty) Ltd
info@optiact.co.za
+27 76 197 6484
Information Regulator guidance and complaint processes are available at inforegulator.org.za.