Skip to content
Sys-Ki

Legal

Privacy Notice.

Last updated 9 November 2026. This notice explains what personal information this website collects, why, and what you can do about it.

1. Who we are

Sys-Ki is a one-person IT, security and AI practice based in Johannesburg, South Africa. Sys-Ki is the responsible party for personal information collected through this website. Karim is the Information Officer. Send any privacy request through the contact form.

2. What this notice covers

It covers this website, the enquiry form on the contact page, and the emails we exchange with you about our services. The free Health Check is a separate tool that is linked from this site. It is not part of this website.

3. What we collect

When you send an enquiry, we collect:

  • your name and email address (required, so we can reply);
  • your company name and the service you are interested in (optional);
  • your message, which may contain any details you choose to give us;
  • your consent, recorded with the time you gave it;
  • the browser type you used (its user-agent string), to help us spot abuse.

Our hosting provider also keeps standard technical logs to keep the site running and secure. These can include your IP address and the pages you requested.

Please do not send passwords, banking details, or copies of identity documents through this site.

4. Why we use it

  • To reply to your enquiry and take steps towards a possible agreement, at your request.
  • To deliver services under a written agreement, if we go ahead.
  • To keep this site secure and stop abuse of the enquiry form, which is our legitimate interest, balanced against your rights.

We do not send marketing messages to you unless you opt in separately, and every message includes a clear way to opt out. We do not sell personal information.

5. Who we share it with

We use service providers to run this site. They process information only on our instructions, under written terms:

  • Supabase, which stores enquiries in the database for this site.
  • Vercel, which hosts the website and its technical logs.

Some providers may process information outside South Africa. Where they do, we rely on their written terms, which require protection comparable to POPIA, as section 72 requires.

6. How long we keep it

  • Enquiries and related correspondence: for 12 months after our last contact, unless you ask us to delete them sooner, or the law requires us to keep them longer.
  • Client records, if we work together: for the term of the agreement and any period the law requires.
  • Technical logs: for the short period our hosting provider keeps them by default.

7. Cookies and storage

This site sets no tracking or advertising cookies. It stores one preference in your browser, your light or dark theme choice, in local storage. That never leaves your device.

8. Your rights

Under POPIA you may:

  • ask whether we hold your personal information, and ask for a copy;
  • ask us to correct it, or to delete it;
  • object to our processing, including direct marketing;
  • withdraw your consent at any time, without affecting anything done before you withdrew it;
  • complain to the Information Regulator of South Africa, at inforeg.org.za (opens in a new tab).

9. How to make a request

Use the contact form and start your message with “Privacy request”. Say what you want: a copy, a correction, deletion, or withdrawing consent. We may ask you to confirm it is you, usually by replying to the email address you gave. We will respond as soon as reasonably possible, and within the time POPIA requires.

Deleting your enquiry removes it from our database. We cannot delete copies that you have kept in your own email.

10. Security

We use reasonable technical and organisational measures. The public database accepts new enquiries only, and cannot be read, changed or deleted through the website. Only Karim reads enquiries, through the database's administrative dashboard. No system is completely secure, so if a breach affects your information, we will tell you and the Information Regulator, as POPIA requires.

11. Children

This site is aimed at businesses. We do not knowingly collect personal information from children.

12. Changes

We may update this notice. The date at the top shows the latest version. For significant changes, we will say so on this page.

Working draft. Sys-Ki will have this notice reviewed by a South African attorney before launch, and will update it if anything changes.