Privacy Policy

1. Introduction

iNetho (Pty) Ltd ("iNetho", "we", "us", or "our"), Enterprise Number 2025/566710/07, is committed to protecting your personal information in accordance with the Protection of Personal Information Act, 2013 (POPIA) and other applicable South African legislation.

This Privacy Policy explains how we collect, use, store, and protect your personal information when you visit our website (inetho.co.za) or use our services.

2. Information Officer

Our designated Information Officer is:

• Name: Mziyanda Siboto
• Title: Managing Director
• Email: sales@inetho.co.za
• Phone: +27 51 285 0507
• Address: 13 Martin Street, Lady Grey, Eastern Cape, 9755

3. Information We Collect

We collect the following types of personal information:

3.1 Information You Provide

• Contact details (name, email address, phone number)
• Company information (company name, CIPC registration number)
• Location information (province)
• Service requirements and enquiry details
• Reseller application details (estimated spend, client base size)

3.2 Information Collected Automatically

• IP address and browser type
• Pages visited and time spent on our website
• Referring website or search terms
• Device type and screen resolution

Automatic data collection only occurs if you have given consent via our cookie consent banner.

4. How We Use Your Information

We process your personal information for the following purposes:

• Responding to enquiries: To reply to your contact form submissions and quote requests
• Lead management: To manage sales leads in our CRM system (ERPNext)
• Reseller applications: To process and evaluate reseller partner applications
• Website analytics: To understand how visitors use our website and improve our services (Google Analytics 4, only with your consent)
• Email communications: To send you auto-reply confirmations and follow-up correspondence related to your enquiry
• Legal compliance: To comply with applicable laws and regulations

5. Legal Basis for Processing

Under POPIA, we process your personal information based on:

• Consent: You provide explicit consent when submitting forms or accepting cookies
• Contractual necessity: Processing is necessary to respond to your enquiry or provide requested services
• Legitimate interest: Improving our website and services based on aggregated, anonymised data
• Legal obligation: Complying with South African laws and regulations

6. Third Parties

We may share your personal information with the following third parties:

• Google Analytics: Website usage data (anonymised, only with consent)
• Google reCAPTCHA: Spam protection on forms
• ERPNext: Lead and customer relationship management (self-hosted)
• Email service provider: Transactional email delivery

We do not sell, rent, or trade your personal information to any third parties for marketing purposes.

7. Data Retention

We retain your personal information for the following periods:

• Contact form submissions: 12 months from submission date
• Reseller applications: Duration of the reseller relationship plus 24 months
• Website analytics data: 14 months (Google Analytics default)
• Cookie consent records: 12 months

After the retention period, your personal information is securely deleted or anonymised.

8. Cookies

Our website uses the following cookies:

Analytics cookies are only set after you give explicit consent via our cookie consent banner. You can change your preference at any time by clearing your browser cookies.

9. Your Rights Under POPIA

You have the following rights regarding your personal information:

• Right of access: Request a copy of the personal information we hold about you
• Right to correction: Request correction of inaccurate or incomplete information
• Right to deletion: Request deletion of your personal information (subject to legal obligations)
• Right to object: Object to the processing of your personal information
• Right to withdraw consent: Withdraw your consent at any time

To exercise any of these rights, contact our Information Officer at sales@inetho.co.za. We will respond within 30 days.

10. Data Security

We implement appropriate technical and organisational measures to protect your personal information, including:

• HTTPS encryption on all pages
• Security headers (HSTS, CSP, X-Frame-Options)
• Server-side API key management (never exposed to browsers)
• Access controls on our CRM and hosting infrastructure
• Regular security reviews and updates

11. Data Breaches

In the event of a data breach that compromises your personal information, we will notify the Information Regulator and affected individuals as soon as reasonably possible, in accordance with Section 22 of POPIA.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated "Last updated" date. We encourage you to review this policy periodically.

13. Complaints

If you believe your personal information has been processed in violation of POPIA, you have the right to lodge a complaint with the Information Regulator:

• Website: inforegulator.org.za
• Email: complaints.IR@justice.gov.za
• Phone: 012 406 4818