Website Privacy Statement

This statement explains how IoT.nxt collects, uses, shares and protects your personal information when you use our products, services and Website. Our privacy and cookies policy is updated from time to time; whenever we make a material change, we post it here and let you know.

Who we are

We are IoT.nxt (Pty) Ltd ("IoT.nxt", "we", "us"). Our registered office is Irene Link, Building C, Third Floor, 5 Impala Avenue, Doringkloof, Centurion, 0157. We are registered in the Republic of South Africa under company number 2015/305236/07.

When you engage with us, you acknowledge that we require your personal information, as defined in the Protection of Personal Information Act ("PoPIA"), to provide products or services to you, including to confirm, update and enhance our records and to confirm your identity. Providing this information is mandatory, and you may not be able to continue using our products and services if you object to providing it.

What we process, and on what basis

The information we collect varies with the products and services you use, how you have used them, and how you have interacted with us. We process your personal information based on:

• Performance of your contract: entering into and acting on your requests, providing connectivity and generating billing, and conducting credit checks when you apply for a product or service.
• Our legitimate business interests: fraud prevention, tax-evasion and financial-crime prevention, network and service security, and improving our services. We assess these interests so they do not override your rights.
• Protecting your legitimate interests: for example, notifications on network availability and performance, emergency-service notifications, and fraud prevention.
• Compliance with a legal obligation: including accounting and tax requirements, and legislation such as FICA, RICA, ECTA, ECA, CPA, PAIA and the Cybercrimes Act, 2020.
• Consent you provide: where we do not rely on another lawful basis. Consent may be withdrawn at any time.

Information we may process includes your name, contact details, date of birth, account and credential information, correspondence, product preferences, data-session history, event photographs, and information obtained from credit and fraud-prevention agencies. We take reasonably practicable steps to keep it complete, accurate and up to date, and endeavour to obtain it from you directly.

How we share your information

Where applicable, we share information with companies in the IoT.nxt and Vodafone Group across the globe; partners, suppliers and agents delivering products or services; companies engaged to perform services on our behalf; and law-enforcement, government or regulatory bodies where required or authorised by law. We may release information to protect against fraud or to comply with lawful demands, and we may disclose information in connection with a merger, acquisition or sale of assets.

International data transfers

We may transfer your information to Vodafone or Vodacom group companies or service providers outside South Africa, including the United Kingdom, EEA or India, complying with applicable data-protection legislation. Where we transfer information outside South Africa, we ensure the recipient is subject to a law, binding corporate rules or a binding agreement providing protection substantially similar to South African law.

How long we keep it

We do not retain your personal information longer than necessary for the purpose it was collected or processed, unless retention is required or authorised by law, reasonably required for a lawful purpose related to our activities, or required by a contract with you.

Keeping your information secure

Our security teams implement appropriate technical and organisational measures to protect your information from unauthorised access, loss, disclosure or destruction. Under PoPIA we will notify you and the Information Regulator if your personal information is compromised. We will never ask for your secure personal or account information through unsolicited communication.

Contact

For any questions about this statement or your privacy settings, contact our Information Officer / Deputy Information Officer at dpo@iotnxt.com.