Privacy Policy
This Privacy Policy explains how Strategix Application Solutions (Pty) Ltd collects, uses, stores, and protects personal information through its website, sales processes, and platform-related interactions.
1. Scope
This policy applies to personal information collected through the XGRC® website, enquiry and proposal processes, and any platform-related interactions with prospects, customers, and other individuals who interact with Strategix. It does not cover personal information processed by Strategix as an Operator / Processor on behalf of its customers in connection with the XGRC® platform — that processing is governed by the Data Processing Addendum.
2. Information We Collect
We may collect: contact details (name, email, telephone, job title); company and organisation information; communications and correspondence; website usage data; support and service records; and any personal information submitted through our forms or business processes.
3. Why We Use Personal Information
We use personal information to manage enquiries, proposals, contracts, onboarding, support, billing, compliance, platform administration, and other lawful business purposes.
4. Legal Basis
We process personal information in accordance with POPIA and, where applicable, equivalent data protection legislation. Where consent is required, we will request it separately.
5. Sharing and Disclosure
We do not sell personal information. We may share personal information with service providers and subprocessors who support our business operations, subject to appropriate contractual safeguards. We may also disclose personal information where required by law.
6. Security
We apply reasonable technical and organisational safeguards aligned to ISO 27001:2022 to protect personal information against loss, unauthorised access, disclosure, or misuse.
7. Retention
We retain personal information only for as long as reasonably necessary for the purpose for which it was collected, subject to lawful retention obligations.
8. Data Subject Rights
You may request access to, correction of, or deletion of your personal information, or raise a privacy concern, using the process described on our Privacy Requests page.
9. Changes
We may update this Privacy Policy from time to time. Material changes will be posted on this page with an updated effective date.
Questions about this document, or need a signed copy for procurement? Contact us.
Contact us