Privacy Notice

1. Who is responsible

RSA AI Systems (Pty) Ltd, trading as RSA Business Systems, is the responsible party for personal information collected through this website and in the course of our business. References to “RSA”, “we”, “us” or “our” mean this entity.

2. Information we may collect

Depending on how you interact with us, this may include:

• name, business name, role and contact details;
• enquiries, correspondence and meeting or project information;
• billing, proposal and contractual information;
• technical information such as device, browser, IP address and website usage, where analytics are enabled with consent; and
• information a client lawfully provides for an agreed marketing, messaging or software service.

3. How information is collected

We may collect information directly from you by email, phone, messaging, forms, meetings or contracts; automatically through consented website technologies; from a client acting lawfully; or from legitimate public and business sources where permitted.

4. Why we process it

• responding to enquiries and preparing proposals;
• providing, supporting and improving agreed services;
• managing client relationships, payments and business records;
• protecting our systems and preventing misuse;
• meeting legal, regulatory and contractual duties; and
• sending relevant direct marketing where permitted, with a clear way to opt out.

5. Lawful and limited processing

We aim to process personal information lawfully and reasonably, for a specific purpose, and only to the extent that it is adequate, relevant and not excessive. Depending on the context, processing may be based on consent, a contract, a legal obligation or a legitimate interest recognised by law.

6. Service providers, operators and transfers

We may use trusted providers for hosting, communications, payments, productivity, analytics or project delivery. They may act as operators under appropriate arrangements and should process information only for the agreed service. Some providers may store information outside South Africa. Where applicable, we take reasonable steps to use recognised safeguards for cross-border processing. We do not sell personal information.

7. Security and retention

We use reasonable technical and organisational safeguards appropriate to the information and risk. No system can be guaranteed completely secure. We keep information only for as long as it is needed for the stated purpose, a contract, dispute resolution or a legal record-keeping requirement, after which it is deleted, destroyed or de-identified where reasonably practicable.

8. Your choices and rights

Subject to applicable law, you may ask whether we hold your personal information, request access or correction, object to certain processing, withdraw consent, ask for deletion where appropriate, or complain about how information is handled. We may need to verify your identity before completing a request. You can opt out of direct marketing at any time using the method in the message or by contacting us.

9. Cookies and analytics

The website may use essential storage needed for its operation. Optional analytics are disabled unless a measurement service is configured and you choose to accept it. If enabled, your preference is stored in your browser and can be cleared through your browser settings.

10. Children, changes and questions

Our services are intended for businesses and are not directed at children. We may update this notice when our practices or legal requirements change; the date below shows the latest revision. For privacy enquiries or Information Officer requests, contact us using the details below.