Last updated: 5 August 2026
This notice is issued in terms of section 18 of the Protection of Personal Information Act, 4 of 2013 ("POPIA"). It explains what personal information ElcoLynx (Pty) Ltd collects, why, who receives it, whether it leaves South Africa, and what rights you have.
We process personal information for the following purposes, and no others without telling you first:
The information involved is typically your name, company details, contact details, billing information, and correspondence with us. Where we administer your email or systems, we necessarily have access to those systems in order to support them.
Providing personal information is voluntary. However, we cannot register a domain without the registrant details a registry requires, and we cannot invoice or support you without contact and billing details. Where information is mandatory we will say so at the point we ask for it.
We do not sell personal information, and we do not share it for anyone else's marketing.
Some of the services we use process information outside the Republic, including Cloudflare, Google, Microsoft, Xero and our transactional email provider. These transfers are made in terms of section 72 of POPIA, on the basis that the recipient is subject to a law, binding corporate rules or a binding agreement providing an adequate level of protection, or with your consent, or because the transfer is necessary to perform our contract with you.
Where we process personal information on behalf of a client, for example when we administer their mailboxes or host their systems, we act as an operator under POPIA. In that role we process only on the client's instruction, we treat the information as confidential, and we do not use it for our own purposes. Clients may request a written operator agreement.
We keep personal information only as long as necessary for the purpose it was collected, or as long as legislation requires. Financial and tax records are kept for five years as required by the Tax Administration Act. Company records are kept for seven years under the Companies Act. Records we hold only to provide a service are deleted within a reasonable period after that service ends.
If personal information is accessed by an unauthorised person, we will notify the Information Regulator and the affected data subjects as required by section 22.
We do not knowingly collect personal information about children through this website. Where we provide services to an organisation that holds children's information, such as a school, we process that information only as that organisation's operator, on their instruction, and subject to the additional protections POPIA gives it.
You have the right to:
To exercise any of these, contact the Information Officer at corne@elcolynx.com. Access requests are handled under the Promotion of Access to Information Act; see our PAIA manual.
If you are not satisfied with how we have handled your personal information you may complain to the Information Regulator: JD House, 27 Stiemens Street, Braamfontein, Johannesburg; 010 023 5200; complaints.IR@justice.gov.za; inforegulator.org.za.
This website uses only the cookies necessary for it to function. We do not use advertising or cross-site tracking cookies.
We may update this notice. The date at the top reflects the current version, and material changes will be communicated to clients directly.
