We design and deliver secure, scalable digital solutions — from websites and intranets to custom platforms — helping businesses of all sizes achieve service excellence and sustainable growth.
Seventynine Digital is a trusted partner in building secure websites, enterprise platforms, and digital solutions that drive measurable growth. With a proven track record across corporates, SOEs, government departments, and ambitious startups, we create technology that matters for South Africa’s digital future.
With over a decade of experience in the ICT industry, Seventynine Digital is confident in delivering top-tier digital solutions that meet the highest standards of quality, innovation, and performance.
Privacy is an important part of the digital
solutions we design, develop, host and support.
We recognise the responsibility that comes
with handling personal information.
This page explains our approach to personal
information, your rights under South Africa's
Protection of Personal Information Act
(POPIA), and relevant international
data protection requirements.
South Africa's framework for lawful
personal information processing.
Privacy by Design
Considering data protection when
designing digital solutions.
Your Privacy Rights
Access, correction, objection
and applicable deletion rights.
International Protection
Considering cross-border privacy
requirements where applicable.
01 / PRIVACY OVERVIEW
Our commitment to protecting
personal information
Seventynine Digital (Pty) Ltd is a
South African digital solutions company
providing website development, custom
software development, hosting,
maintenance, creative services and
digital technology solutions.
This Privacy Notice explains how personal
information may be collected, used,
stored, shared, protected and retained
when individuals interact with
Seventynine Digital.
It covers relevant processing through our
website, business enquiries, recruitment
activities, employment administration,
supplier relationships, client services
and other business operations.
Our role as a responsible party or operator
Seventynine Digital may act as a responsible
party when determining why and how
information is processed.
When handling information on behalf of
clients, we may act as an operator,
processing information in accordance
with the client's lawful instructions
and applicable agreements.
02 / LEGISLATION
Understanding POPIA
The Protection of Personal Information
Act 4 of 2013 establishes the conditions
for lawful processing of personal
information in South Africa.
The Act seeks to protect personal information
while recognising the need for lawful
information processing.
Personal Information
Information relating to an identifiable,
living natural person and, where
applicable, an identifiable
existing juristic person.
Data Subject
The person or entity to whom
personal information relates.
Responsible Party
The party determining the purpose
and means of processing personal
information.
Operator
A party processing personal
information for a responsible party
under a contract or mandate.
Processing may include collecting,
recording, storing, organising, using,
sharing, updating and deleting
personal information.
03 / LAWFUL PROCESSING
The eight conditions of POPIA
POPIA establishes eight conditions
for the lawful processing of personal
information.
01
Accountability
The responsible party must ensure
compliance with the conditions
for lawful processing.
02
Processing Limitation
Information must be processed lawfully,
reasonably and only to the extent
necessary for legitimate purposes.
03
Purpose Specification
Information must be collected for
specific, explicitly defined
and lawful purposes.
04
Further Processing Limitation
Further processing must be compatible
with the original purpose or otherwise
permitted by law.
05
Information Quality
Reasonably practicable steps must
be taken to ensure information
is accurate, complete and
updated where necessary.
06
Openness
Appropriate information should be
made available about how personal
information is collected and processed.
07
Security Safeguards
Appropriate technical and organisational
measures must protect information
against loss, unauthorised access
and unlawful processing.
08
Data Subject Participation
Data subjects have rights to request
access, correction, deletion
and other applicable remedies.
04 / PERSONAL INFORMATION
What information may we process?
The information processed depends on
your relationship with Seventynine Digital
and the services involved.
Category
Examples
Identity Information
Names, positions, employers and
identity information where
lawfully required.
Contact Information
Email addresses, telephone numbers,
postal and physical addresses.
Business Information
Supplier records, company details,
contractual information and
authorised representatives.
Recruitment Information
CVs, qualifications, work experience,
references and recruitment documents.
Technical Information
IP addresses, browser details,
device information and
technical or security logs
where collected.
Client Platform Information
Information processed within client
websites, portals and software
platforms under applicable agreements.
Special personal information and
information relating to children
are subject to additional legal
requirements and safeguards.
05 / PROCESSING PURPOSES
Why we process personal information
Depending on the relevant relationship,
personal information may be processed to:
Respond to enquiries and correspondence.
Prepare proposals, quotations and contracts.
Provide website development and maintenance services.
Develop and support custom software platforms.
Manage hosting and technical support arrangements.
Administer recruitment and employment processes.
Manage supplier and customer relationships.
Maintain relevant business records.
Meet applicable regulatory and legal requirements.
Investigate security incidents or misuse.
Conduct lawful business communications and marketing.
Lawful grounds for processing
Processing may rely on consent,
contractual necessity, legal obligations,
protection of legitimate interests
of data subjects, public law duties
or legitimate interests pursued
by a responsible party or third party,
where permitted by section 11 of POPIA.
Consent is not the only lawful ground
for processing. Where consent is relied
upon, applicable withdrawal rights
will be respected.
Information sharing
Information may be shared with
authorised employees, clients,
service providers, hosting providers,
professional advisers and regulatory
authorities where permitted
or required by law.
06 / SECURITY
Protecting personal information
Seventynine Digital recognises
the importance of protecting
personal information across
software platforms, websites,
infrastructure and business operations.
Depending on the relevant risks,
systems and contractual responsibilities,
safeguards may include:
Access Management
Authentication, restricted access
and role-based permissions.
Secure Communications
Encryption in transit and
secure connection management.
System Maintenance
Updates, vulnerability remediation
and applicable maintenance activities.
Backup & Recovery
Backup arrangements, recovery
planning and retention controls.
Monitoring
Security-relevant logging,
monitoring and investigation.
Incident Response
Procedures for assessing
and responding to suspected
information security incidents.
Security compromise notification
Where there are reasonable grounds
to believe that personal information
has been accessed or acquired by an
unauthorised person, the responsible party
must assess its notification obligations
under section 22 of POPIA.
Where Seventynine Digital acts
as an operator, applicable notification
obligations to the responsible party
arise under section 21.
07 / YOUR RIGHTS
Your personal information.
Your rights.
POPIA gives data subjects rights
relating to the processing of
personal information, subject to
applicable requirements and exceptions.
Right to Access
Request confirmation and access
to personal information held,
where permitted by law.
Right to Correction
Request correction of inaccurate,
incomplete, misleading or
outdated information.
Right to Deletion
Request deletion or destruction
where the requirements of
applicable law are satisfied.
Right to Object
Object to certain processing
activities on reasonable grounds
relating to your situation.
Direct Marketing Choices
Object to direct marketing
and exercise applicable consent
and unsubscribe rights.
Right to Complain
Lodge a complaint with the
Information Regulator regarding
alleged interference with privacy rights.
POPIA also regulates certain decisions
based solely on automated processing
that produce legal consequences or
substantially affect a data subject.
International data protection
and cross-border transfers
Digital services may involve
hosting infrastructure, cloud
platforms and service providers
operating outside South Africa.
Section 72 of POPIA regulates
international transfers of
personal information.
Such transfers must satisfy
a lawful ground under section 72,
including appropriate legal or
contractual safeguards, consent
or other permitted circumstances.
European Union GDPR
The General Data Protection Regulation
may apply to certain processing
activities when its territorial
requirements are met.
Where applicable, additional
obligations and rights may involve
enhanced transparency, data portability,
restricted processing and
international transfer safeguards.
Important distinction
POPIA is South Africa's principal
privacy law. International privacy
legislation applies where its own
legal requirements are satisfied.
09 / INFORMATION LIFECYCLE
Data retention and disposal
Personal information should not be
retained longer than necessary
for the purpose for which it was
collected, unless further retention
is permitted or required by law.
Retention periods may depend on:
Statutory recordkeeping obligations.
Contractual requirements.
Legitimate business purposes.
Recruitment and employment relationships.
Legal claims and dispute resolution.
Client instructions and service agreements.
Where information is no longer
required and no lawful grounds
justify further retention, appropriate
deletion, destruction or
de-identification should be applied.
Client-controlled platforms
For systems developed, hosted or
supported on behalf of clients,
retention and deletion decisions
may be determined by the client's
lawful instructions and agreements.
10 / WEBSITE TECHNOLOGIES
Cookie and tracking preferences
Cookies and similar technologies
may be used to support essential
functionality, security, analytics
and optional marketing.
Choose your preferences below.
Essential Cookies
Necessary for core website
functionality and security.
Analytics Cookies
Optional website usage measurement.
Marketing Cookies
Optional marketing and
advertising measurement.
Preferences are stored in this browser.
The website administrator must connect
optional scripts and WordPress plugins
to these preferences before they can
control website tracking.
11 / PRIVACY REQUEST CENTRE
Exercise your privacy rights
Use the form below to prepare
a request for access, correction,
deletion, objection or another
privacy-related matter.
This form prepares an email in
your email application.
It does not submit information
directly to a website database.
The request is sent only after
you send the email.
Identity verification
Reasonable identity verification
may be required before certain
requests can be processed.
Do not include identity documents,
passwords or sensitive records
in this request builder.
12 / FREQUENTLY ASKED QUESTIONS
Privacy questions answered
What is POPIA?
POPIA is South Africa's
Protection of Personal Information Act.
It regulates the lawful processing
of personal information.
Does POPIA apply to Seventynine Digital?
POPIA applies to relevant processing
activities within its legal scope.
Responsibilities depend on the company's
role as a responsible party or operator.
Can I request deletion of my information?
Yes, where applicable legal requirements
are met. Certain records may need
to be retained for lawful reasons.
Does Seventynine Digital have access
to client information?
Access depends on the relevant
agreements, system permissions
and authorised support activities.
Can data be hosted outside South Africa?
POPIA permits certain international
transfers where the requirements
of section 72 are met.
What happens after a security incident?
Relevant incident response,
investigation and notification
obligations must be assessed
under POPIA.
Can I object to direct marketing?
Yes. Applicable objection and
consent rights must be respected.
How do I lodge a complaint?
You may contact Seventynine Digital
or the South African
Information Regulator.
13 / CONTACT AND COMPLAINTS
Contact us about privacy
For matters relating to personal
information processed by
Seventynine Digital, please
contact our team.
Seventynine Digital (Pty) Ltd
Suite 9A, 1 Larch Nook
Benchmark Office Park
Zwartkop, Centurion, 0157
South Africa
Requests concerning personal information
processed by Seventynine Digital
should be directed to its
designated Information Officer.
The officer's registered details
and appropriate privacy contact
channel should be confirmed
before publication.
Information Regulator
Data subjects may lodge complaints
with the South African Information
Regulator concerning alleged
interference with privacy rights.
This notice may be updated
to reflect changes in legislation,
services, suppliers and processing
activities. Material changes should
be communicated where required.
Your privacy matters.
Choose whether to allow optional analytics
and marketing cookies.
Essential functionality remains active.
Seventynine Digital — over a decade of bold, results-driven ICT and creative solutions, built for Mzansi. From startups to national brands, we deliver smart, secure, and purpose-driven digital that works.