Privacy Policy

THE COMPANY, its subsidiaries and affiliates (collectively “THE COMPANY”, “us”, “we”) understand the value of your personal information and the importance of protecting any and all personal information gathered by THE COMPANY.

This document describes how THE COMPANY collects and uses your personal information, who we share it with, and your choices and rights with regard to your personal information.

It applies to any information we collect from you in person or in a digital environment during any interaction, including our website, social media sites, mobile services and the SENTINEL platform, in writing or orally, and for any valid or lawful reason.

Collection of information

THE COMPANY is subject to the Protection of Personal Information Act, No. 4 of 2013 (“POPIA”), the provisions of which came into effect on 1 July 2020 and became fully enforceable on 1 July 2021.

According to POPIA, personal information is any information relating to an identifiable, living, natural person and, where applicable, an identifiable, existing juristic person, including but not limited to:

• information relating to the race, gender, sex, pregnancy, marital status, national, ethnic or social origin, colour, sexual orientation, age, physical or mental health, well-being, disability, religion, conscience, belief, culture, language and birth of the person;
• information relating to the education or the medical, financial, criminal or employment history of the person;
• any identifying number, symbol, e-mail address, physical address, telephone number, location information, online identifier or other particular assignment to the person;
• the biometric information of the person;
• the personal opinions, views or preferences of the person;
• correspondence sent by the person that is implicitly or explicitly of a private or confidential nature, or further correspondence that would reveal the contents of the original correspondence;
• the views or opinions of another individual about the person; and
• the name of the person if it appears with other personal information relating to the person, or if the disclosure of the name itself would reveal information about the person.

Depending on how you interact with us, the personal information we collect may include but is not limited to:

• your name;
• e-mail address;
• postal address;
• residential or business address;
• telephone number (fixed or mobile);
• identity number.

We may also collect other information that does not identify you personally but that we might require in order to deliver the security service, including but not limited to geographic location and home language. Should we link this information to your personal information, all of it will be treated as personal information.

Information collection process

Information is gathered with the completion of a quotation or proposal and the service agreement in respect of the services delivered by THE COMPANY, by our marketing team, risk consultants, technicians, control centre operators and security staff.

All of the above information is used to enable us to deliver the security service, and in particular it is used in our control centre and/or our armed response services and/or our technical department and/or our administration staff.

CCTV footage, monitoring and the SENTINEL platform

Our core service is the installation and 24-hour monitoring of CCTV cameras. Camera footage, snapshots and alerts may contain the personal information of identifiable people. In most cases THE COMPANY processes this footage as an operator on behalf of the camera owner (for example a neighbourhood watch, city improvement district, estate or business), who is the responsible party for it. Where we install cameras on our own premises, we are the responsible party.

Where a camera owner, or a person authorised by a camera owner, is given a login to view footage through the SENTINEL platform (including SENTINEL Live and the live wall), the following applies:

• every sign-in, camera view and snapshot is logged (who, which camera, when and from where) and kept as an audit record;
• the live picture and any snapshot or recording are watermarked with the account holder’s unique identifier, so that any image that is captured or shared can be traced to the account it came from;
• these audit records are kept to protect the people who appear in footage and the camera owners, and may be disclosed to the camera owner, the Information Regulator or a law enforcement agency where lawfully required;
• use of SENTINEL is subject to the SENTINEL Live Terms of Use, which every user accepts at first sign-in.

Footage is retained on the camera, recorder or platform for a limited rolling period that depends on the installation and the camera owner’s instructions, and is overwritten thereafter unless it has been preserved for an incident, an investigation or a lawful request.

Legal basis for processing your personal information

When we process your personal information for any purpose mentioned in this Privacy Policy, we may rely on one or more of the following legal bases, depending on the purpose for which the processing is undertaken:

• where this is necessary to comply with a legal obligation on us (the Private Security Industry Regulation Act, the Criminal Procedure Act, the Consumer Protection Act, SAIDSA by-laws and others), whether contractually or otherwise;
• to protect the vital interests of any individual;
• where you have consented to such processing.

Use of your personal information

We may use your personal information for any and all of the following:

• to perform administrative and business functions and internal reporting;
• to send administrative information to you;
• to respond to your inquiries and fulfil your requests;
• to inform you about and provide you with necessary communication;
• to update our records and keep your contact details up to date;
• to deliver the contracted service, including sharing information with a law enforcement agency if and when required;
• to maintain an electronic database in our control centre and accounting department for the purpose of delivering the contracted service.

We engage in these activities to manage our contractual relationship with you, to comply with our legal obligations or for our legitimate business purposes. We may also use your personal information to:

• send marketing communications to you;
• establish, manage and maintain our business relationship with you;
• compile usage, crime and other statistics;
• process and respond to questions, concerns and complaints;
• fulfil legal and contractual obligations.

Your rights as a data subject

As a data subject you have the right to have your personal information processed in accordance with the conditions for the lawful processing of personal information in Chapter 3 of POPIA, including the right:

• to be notified that personal information about you is being collected (section 18), or that your personal information has been accessed or acquired by an unauthorised person (section 22);
• to establish whether a responsible party holds personal information about you, and to request access to it (section 23);
• to request, where necessary, the correction, destruction or deletion of your personal information (section 24);
• to object, on reasonable grounds relating to your particular situation, to the processing of your personal information (section 11(3)(a));
• to object to the processing of your personal information at any time for purposes of direct marketing (section 11(3)(b)), or in terms of section 69(3)(c);
• not to have your personal information processed for purposes of direct marketing by means of unsolicited electronic communications, except as referred to in section 69(1);
• not to be subject, under certain circumstances, to a decision based solely on the automated processing of your personal information intended to provide a profile of you (section 71);
• to submit a complaint to the Information Regulator regarding the alleged interference with the protection of your personal information, or in respect of a determination of an adjudicator (section 74); and
• to institute civil proceedings regarding the alleged interference with the protection of your personal information (section 99).

All section references above are to sections of POPIA.

Sharing your personal information

We may share your personal information for the purposes set out in this Privacy Policy, as applicable:

• where you consent to the sharing of your personal information;
• as a direct result of our contractual obligations;
• with debt collection agencies or other debt recovery organisations;
• in response to a request for information by a competent authority in accordance with, or as required by, any applicable law, regulation or legal process;
• where necessary to comply with judicial proceedings, court orders or government orders; or
• to protect the rights, property or safety of THE COMPANY, its staff, business partners, you or others, or as otherwise required by applicable law.

Security of your personal information

THE COMPANY is committed to protecting all personal information in its possession from accidental or unlawful destruction, damage, loss or unauthorised access.

THE COMPANY will ensure reasonable and appropriate physical, administrative and technical preventative measures to ensure the safety and security of any and all personal information.

Direct marketing

THE COMPANY may send you communications about news, events and accolades. Should you no longer wish to receive marketing communications from THE COMPANY by e-mail, SMS or phone, you may opt out at any time and manage your communication preferences by contacting us at the address below. If you unsubscribe from marketing material, we may still send you administrative communications as part of our ongoing agreement and as needed.

Retaining your personal information

THE COMPANY will retain your personal information for as long as needed to fulfil the purpose for which it was originally collected, unless a longer retention period is required to comply with legal obligations, resolve disputes, protect our assets or enforce agreements.

The criteria we use to determine retention periods include whether:

• we are under a legal, contractual or other obligation to retain the information;
• the information forms part of an ongoing investigation or is needed for litigation;
• the information is needed to maintain accurate business and financial records;
• you have consented to us retaining your personal information for a longer period.

Updates to this privacy policy

THE COMPANY reserves the right to update this Privacy Policy at any time. Should we do so, we will ensure that the updated version is communicated to the relevant parties and individuals, and the date below will change.

Information Officer

Should you have any queries or complaints regarding this Privacy Policy or its application, or wish to exercise any of the rights above, you can contact:

• The Information Officer: Martin Field
• E-mail: admin@senixa.tech
• Post: SENIXA, Units 26 to 27, Lekkerwater Industrial Park, Lekkerwater Road, Sunnydale, Cape Town, 7975

You may also lodge a complaint with the Information Regulator (South Africa) at inforegulator.org.za.

Version 05/10/2026. SENIXA (Pty) Ltd and SENIXA Operations (Pty) Ltd. We never sell your data, and we never use it outside our organisation except as set out above.