Privacy Policy
Last updated: 17 June 2026
1. Who we are
This Privacy Policy applies to Octarity (Pty) Ltd ("Octarity", "we", "us", or "our"), an operational technology cybersecurity consultancy based in South Africa. We operate the website at octarity.com.
We are committed to protecting your personal information and processing it in accordance with the Protection of Personal Information Act 4 of 2013 (POPIA). Questions about this policy can be directed to privacy@octarity.com.
2. What personal information we collect
We collect personal information only when you voluntarily provide it or when it is automatically generated by your use of our website.
Information you provide
When you submit our contact form, we collect:
- First name and role
- Business email address
- Company name and phone number (optional)
- Industry and area of interest
- Any additional context you choose to share in the message field
Information collected automatically
- Analytics data: we use analytics software to understand how visitors use our website (pages visited, time on site, referral source, general geographic region). This data is aggregated and does not identify you individually.
- Session and security data: our web application sets cookies necessary for its operation (CSRF protection, session management). These are technical cookies and are not used for tracking or advertising.
- IP address: logged when you submit the contact form for security purposes.
3. Why we collect it and our lawful basis
| Purpose | Lawful basis under POPIA |
|---|---|
| Responding to your enquiry and arranging a discovery call | Processing necessary to fulfil your request (s.11(1)(a)) |
| Understanding how our website is used so we can improve it | Legitimate interest (s.11(1)(f)) |
| Security (preventing fraud and protecting our systems) | Legitimate interest (s.11(1)(f)) |
4. How we use your information
We use the information you submit through the contact form solely to:
- Respond to your enquiry
- Schedule and conduct a discovery call
- Send you a proposal if requested
We do not sell, rent, or trade your personal information to any third party. We do not use your contact details for unsolicited marketing.
5. Who we share it with
We share your information only where necessary to operate our business:
- Email delivery providers: to send notification emails internally when you submit the contact form. These providers process data on our behalf and are bound by data processing agreements.
- Hosting infrastructure: our website runs on cloud infrastructure (Amazon Web Services). Data is stored and processed within AWS data centres.
- Analytics providers: aggregated, non-personally identifiable usage data is shared with our analytics provider.
- Legal obligations: we may disclose information where required by law, court order, or regulatory authority.
6. How long we keep your information
- Contact form submissions are retained for 3 years from the date of submission, after which they are deleted. This period allows us to maintain continuity on enquiries that develop into longer engagements.
- Session cookies expire when you close your browser or within 2 hours of inactivity.
- Analytics data is retained in aggregated form in accordance with our analytics provider's retention policy.
7. Your rights under POPIA
You have the right to:
- Access: request a copy of the personal information we hold about you
- Correction: request that inaccurate or incomplete information be corrected
- Deletion: request that we delete your personal information, subject to any legal retention obligations
- Objection: object to processing based on legitimate interest
- Complaint: lodge a complaint with the Information Regulator of South Africa if you believe your rights have been violated
To exercise any of these rights, email privacy@octarity.com. We will respond within 30 days.
8. Cookies
We use the following cookies:
| Cookie | Purpose | Type | Expiry |
|---|---|---|---|
XSRF-TOKEN |
Protects form submissions from cross-site request forgery | Strictly necessary | Session |
octarity_session |
Maintains your session state | Strictly necessary | 2 hours |
| Analytics cookies | Aggregate website usage statistics | Analytics | Up to 2 years |
9. Security
We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, loss, or disclosure. Our website is served over HTTPS. Access to contact form submissions is restricted to authorised personnel only.
10. Changes to this policy
We may update this Privacy Policy from time to time. The date at the top of this page reflects when it was last revised. Continued use of our website after changes are posted constitutes acceptance of the updated policy.
11. Contact
For any privacy-related questions or requests, contact our Information Officer at privacy@octarity.com.