Privacy Notice

Effective 27 September 2026

1. Who is responsible for this notice

MDPC Systems is responsible for personal information collected through this public website. This notice is intended to explain our website processing in clear language and should be read together with any more specific notice or agreement provided when you use an MDPC service.

2. Personal information we collect

When you complete the Get Started form, we collect the details you enter, which may include your full name, business name, business email, phone number, business type, province, staff range and additional information. Our hosting and security providers may also process technical request information such as IP address, browser or device information, timestamps and security logs.

3. Why we process it

We use this information to respond to your enquiry, understand your business requirements, provide onboarding information, maintain appropriate business records, prevent abuse, troubleshoot problems and protect our website and services. Sending an enquiry does not start a paid subscription.

4. Whether providing information is required

Submitting the Get Started form is voluntary. Some fields are required because we need enough information to understand and respond to the enquiry. If required information is not provided, we may not be able to respond or progress the enquiry.

5. Sharing and service providers

Access is limited to authorised MDPC personnel and service providers that help us operate the website and business, for example cloud hosting, security and communication providers. We do not sell personal information. Service providers are expected to handle information only for authorised purposes and with appropriate safeguards.

6. Cross-border processing

Some technology providers may process or store information outside South Africa. Where cross-border processing occurs, we take reasonable steps to use providers and safeguards appropriate to the information and applicable law.

7. Retention

We retain personal information only as long as reasonably necessary for the purpose for which it was collected, legitimate business or security needs, dispute handling and applicable legal obligations. Where appropriate, information is then deleted, de-identified or securely disposed of.

8. Security

We use reasonable technical and organisational measures designed to protect the confidentiality and integrity of personal information and to reduce the risk of loss, misuse, unauthorised access or unlawful processing. No internet system can provide an absolute security guarantee.

9. Your rights

Subject to applicable law, you may request access to or correction of personal information we hold about you, object to certain processing, or request deletion of information we no longer need to retain. We may need to verify your identity before acting on a request.

10. Direct marketing

The Get Started consent is used to respond to your enquiry and communicate about the requested MDPC service. We will not use that enquiry consent as a blanket permission for unrelated electronic marketing. Where separate marketing consent is required, we will request it separately.

11. Complaints and contact

Privacy questions or requests may be sent to privacy@mdpcsystems.co.za. You may also contact the Information Regulator (South Africa), including through inforegulator.org.za. The Regulator’s eServices contact information currently lists 010 023 5200 and enquiries@inforegulator.org.za.

12. Updates

We may update this notice when our processing, services or legal obligations change. The effective date at the top identifies the current version.