POPIA Compliance

TYFREX Client Acquisition Systems™ ("TYFREX") is committed to full compliance with the Protection of Personal Information Act, 2013 ("POPIA") of South Africa. This page outlines our approach to protecting personal information in accordance with POPIA requirements.

In accordance with Section 17 of POPIA, TYFREX has designated an Information Officer who is responsible for ensuring compliance with POPIA. The Information Officer serves as the primary point of contact for all data protection enquiries.

Information Officer: Fred Titus

Email: fred@tyfrex.com

Phone: +27 73 232 3404

TYFREX processes personal information in accordance with the eight conditions for lawful processing as set out in POPIA:

• Accountability: TYFREX takes responsibility for ensuring compliance with POPIA.

• Processing Limitation: Personal information is processed lawfully and in a reasonable manner.

• Purpose Specification: Personal information is collected for a specific, explicitly defined purpose.

• Further Processing Limitation: Further processing of personal information is compatible with the original purpose of collection.

• Information Quality: We take reasonable steps to ensure personal information is complete, accurate, and up to date.

• Openness: We take reasonable steps to ensure that data subjects are aware of the collection and processing of their personal information.

• Security Safeguards: We implement appropriate technical and organisational measures to secure personal information.

• Data Subject Participation: Data subjects have the right to access, correct, or delete their personal information.

TYFREX processes the following categories of personal information:

• Identity and contact information (name, email, phone, company).

• Assessment responses and Digital Maturity Scores.

• Communication records (emails, WhatsApp messages, chat transcripts).

• Booking and appointment details.

• Website usage and analytics data.

In accordance with POPIA, data subjects have the following rights:

• The right to be notified when their personal information is collected.

• The right to access their personal information held by TYFREX.

• The right to request correction or deletion of their personal information.

• The right to object to the processing of their personal information.

• The right to withdraw consent at any time.

To exercise any of these rights, please contact our Information Officer at fred@tyfrex.com.

TYFREX implements appropriate technical and organisational measures to safeguard personal information against loss, damage, unauthorised access, and unlawful processing. These measures include secure data storage within the TYFREX Client Acquisition Systems™ infrastructure, access controls, and regular security reviews.

TYFREX retains personal information only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. Once personal information is no longer needed, it is securely deleted or anonymised.

If you believe that TYFREX has processed your personal information in a manner that does not comply with POPIA, you may lodge a complaint with the Information Regulator:

Information Regulator (South Africa)

Email: complaints@inforegulator.org.za

Website: www.inforegulator.org.za

This POPIA Compliance statement contains general provisions and should be reviewed by a qualified legal professional to ensure full compliance with the Protection of Personal Information Act and any other applicable South African data protection legislation.