Privacy Policy
Last updated: 3 August 2026
WMP IT WorkX (Pty) Ltd ("we", "us", "our") is committed to protecting your personal information in accordance with the Protection of Personal Information Act 4 of 2013 (POPIA) and all applicable South African privacy legislation. This policy explains what information we collect, why we collect it, how we use it and your rights as a data subject.
1. Who We Are
WMP IT WorkX (Pty) Ltd is a registered IT services provider operating in South Africa. We are the Responsible Party in terms of POPIA.
- Registered address: Pretoria, Gauteng, South Africa
- Email: info@wmpit.co.za
- Phone: +27 (0)12 000 0000
2. Information We Collect
We collect personal information only where necessary for a specific, lawful purpose. This may include:
| Category | Examples | How collected |
|---|---|---|
| Identity information | First name, last name, company name | Registration, checkout, contact forms |
| Contact information | Email address, phone number, postal address | Registration, checkout, support tickets |
| Transaction information | Order history, payment references, amounts | Online shop checkout |
| Technical information | IP address, browser type, pages visited | Server logs, cookies |
| Communications | Support ticket messages, contact form enquiries | Support portal, contact form |
| Marketing preferences | Newsletter subscription status | Newsletter sign-up form |
We do not collect special personal information (race, religion, health, political views, biometrics) unless you voluntarily provide it in a support message, and we will not use it for any other purpose.
3. Why We Process Your Information (Lawful Basis)
- Contract performance — to process your orders, provide IT services and manage your account.
- Legitimate interest — to respond to enquiries, manage support tickets and prevent fraud.
- Consent — to send you our newsletter. You may withdraw consent at any time by clicking "Unsubscribe" in any email.
- Legal obligation — to comply with South African tax laws, FICA and other statutory requirements.
4. How We Use Your Information
- Processing and fulfilling your product orders
- Providing and managing IT support services
- Sending invoices, quotes and transaction confirmations
- Responding to your enquiries and support tickets
- Sending our newsletter (only with your explicit consent)
- Improving our website and services
- Detecting and preventing fraud or security breaches
- Complying with legal and regulatory obligations
5. Sharing Your Information
We do not sell, rent or trade your personal information. We may share it with:
- Payment processors (PayFast) — to process online payments securely. PayFast's own privacy policy applies to their processing.
- Courier/delivery partners — your delivery address for order fulfilment.
- IT service sub-processors — cloud hosting providers bound by equivalent data protection agreements.
- Law enforcement or regulators — where required by South African law or court order.
All third parties are required to keep your information secure and use it only for the specified purpose.
6. Cookies
Our website uses cookies to provide essential functionality and to remember your preferences. For full details please read our Cookie Policy.
7. Data Retention
| Data type | Retention period |
|---|---|
| Account & order records | 5 years from last transaction (SARS requirement) |
| Support tickets | 3 years from ticket closure |
| Contact enquiries | 2 years |
| Newsletter subscriber data | Until you unsubscribe, then deleted within 30 days |
| Server/access logs | 90 days |
8. Your Rights as a Data Subject
Under POPIA you have the right to:
- Access — request a copy of the personal information we hold about you
- Correction — request that inaccurate information be corrected
- Deletion — request deletion of your information (subject to legal retention obligations)
- Objection — object to processing based on legitimate interest
- Withdraw consent — at any time for marketing communications
- Lodge a complaint — with the Information Regulator (see below)
To exercise any of these rights, email info@wmpit.co.za with the subject line "Data Subject Request". We will respond within 30 days.
9. Security
We implement appropriate technical and organisational measures to protect your personal information including encrypted connections (HTTPS), hashed passwords, rate-limited access, and regular security reviews. While we take every precaution, no internet transmission is 100% secure.
10. Changes to this Policy
We may update this policy from time to time. The "Last updated" date at the top of this page will reflect any changes. Continued use of our website after changes constitutes acceptance of the revised policy.
11. Contact & Complaints
For any privacy-related questions contact us at info@wmpit.co.za.
If you believe we have not adequately addressed your complaint you have the right to lodge a complaint with the Information Regulator of South Africa:
- Website: www.justice.gov.za/inforeg/
- Email: inforeg@justice.gov.za