Privacy Policy

Last updated: 31 July 2026

SyrkIT values privacy and handles personal information in line with applicable South African law, including the Protection of Personal Information Act, 2013 (POPIA), and with applicable United States privacy, consumer protection, and Virginia law where those laws apply to a specific customer, service, or processing activity.

1. Who We Are

SyrkIT provides digital services (including web hosting, email hosting, websites, support, and related services). For this website and our service delivery, SyrkIT is the responsible party where we decide why and how personal information is processed.

2. Personal Information We Collect

• Contact details (for example name, email address, telephone number, and business details).
• Service and account details needed to set up and support hosting, domains, email, and projects.
• Billing information necessary for invoicing and payment reconciliation.
• Technical data (for example IP address, device/browser info, logs, and security events).
• Messages and materials you send to us (support queries, attachments, project content).

3. Why We Use Personal Information

• To deliver, maintain, and support the services you request.
• To communicate with you about enquiries, projects, incidents, and service updates.
• To administer accounts, billing, fraud prevention, and security.
• To meet legal and regulatory requirements and respond to lawful requests.
• To improve our website, processes, and customer experience.

4. Lawful Grounds

We process personal information only when a lawful ground applies, such as where processing is necessary to perform a contract, to comply with law, based on consent, or for legitimate interests that do not override your rights. We also aim to ensure that our privacy notices and actual practices match, and that we maintain reasonable safeguards appropriate to the data we hold.

5. Service Providers (Operators) and Sharing

We may share personal information with carefully selected operators and service providers (for example hosting infrastructure, domain registrars, email platforms, payment services, and security tooling) only where required to provide services or comply with law, and subject to confidentiality and appropriate safeguards.

6. Cross-Border Processing

If an operator processes information outside South Africa, we take reasonable steps to ensure POPIA transfer requirements are met, including using suitable contractual protections where appropriate. Where personal information is processed in or from the United States, SyrkIT also seeks to apply appropriate contractual, organisational, and security controls for that transfer and processing activity.

7. Security

We use reasonable technical and organisational measures intended to protect the confidentiality, integrity, and availability of personal information. While no system can be guaranteed 100% secure, we continually improve our controls and incident handling.

8. Retention

We keep personal information only for as long as needed for the purpose it was collected, to fulfil contracts, to manage disputes, for backups, and to meet legal or regulatory requirements. Thereafter, we delete or de-identify information where feasible.

9. Your Rights

• Ask for access to personal information we hold about you.
• Request correction or deletion of information that is inaccurate, out of date, or not required (where applicable).
• Object to certain processing where POPIA allows.
• Withdraw consent where processing is based on consent.
• Lodge a complaint with the Information Regulator (South Africa).

10. Additional Virginia Rights Where Applicable

The Virginia Consumer Data Protection Act only applies in certain circumstances. If it applies to SyrkIT and to your request, Virginia residents may have rights to access, correct, delete, and obtain a copy of personal data they previously provided, and to opt out of targeted advertising, the sale of personal data, or certain profiling decisions.

Where those Virginia rights apply, SyrkIT will generally respond within 45 days, may extend once by a further 45 days where permitted, and will provide an appeal route if a request is declined. If an appeal is denied, we will provide a way to contact the Virginia Attorney General where the law requires it.

11. Sale of Data and Targeted Advertising

SyrkIT does not sell personal data in the ordinary course of its business. If that changes for any in-scope activity, or if we engage in targeted advertising in a way that triggers a legal opt-out right, we will update this policy and provide any notices and opt-out methods required by law.

12. Children

SyrkIT’s services are generally intended for businesses and adults. We do not knowingly collect personal information from children in a manner that would trigger children’s privacy obligations without the required consent and safeguards.

13. Contact

To exercise your rights or ask privacy-related questions, contact info@syrkit.net. South African complaints may also be directed to the Information Regulator. Where Virginia law applies and a required appeal is denied, you may also contact the Virginia Attorney General using the process we provide with that decision.

14. Updates

We may update this policy from time to time. The latest version and date will appear on this page.

This policy is provided for transparency and general information and does not constitute legal advice.