Privacy Policy
Last Updated: 15 May 2025
1. Introduction
This Privacy Policy outlines how Abakhisa Group (Pty) Ltd T/A Abakhisa Nova ("Abakhisa", "we", "our", or "us") collects, uses, discloses, and safeguards personal information in accordance with the Protection of Personal Information Act (POPIA), and where applicable, the General Data Protection Regulation (GDPR).
2. Information We Collect
- Identification Information (e.g. full name, ID number)
- Contact Information (email, phone, physical address)
- Service & Subscription Records (Nova plan details, compliance documents)
- Payment Information (invoices, billing history)
- Technical Data (IP address, device/browser info)
- Usage Data (portal access logs, support interactions)
3. Methods of Collection
We collect data through service bookings, customer portals, WhatsApp, CRM integrations, cookies, and direct communication with our team.
4. Purpose of Processing
- To manage subscriptions and deliver fire protection services
- To issue compliance documents (e.g. COCs, audits)
- To communicate with clients and respond to inquiries
- To maintain accurate billing and service records
- To fulfil regulatory, legal, and safety obligations
5. Legal Basis for Processing
| Purpose | Legal Basis |
|---|---|
| Contract fulfillment | POPIA 11(1)(b) / GDPR 6(1)(b) |
| Legal obligation | POPIA 11(1)(c) / GDPR 6(1)(c) |
| Consent-based marketing | POPIA 11(1)(a) / GDPR 6(1)(a) |
| Legitimate interest | POPIA 11(1)(f) / GDPR 6(1)(f) |
6. Data Sharing and Disclosure
We may share personal data with selected CRM/service providers, payment processors (including Paystack for subscriptions), trusted technicians under NDA, regulatory bodies, and secure IT service providers. We never sell your data.
7. International Transfers
Where data is transferred outside South Africa or the EEA, we implement safeguards such as data processing agreements and standard contractual clauses.
8. Data Security
We use HTTPS encryption, MFA, role-based access control, secure API tokens, and regular audits to protect data integrity and confidentiality.
9. Data Retention
Financial and compliance data is retained for 7 years. Dormant portal accounts are flagged for removal after 18 months. Support interactions are archived for reference and audit.
10. Your Rights
You have the right to access, correct, delete, or object to your data. Email privacy@abnova.com to exercise these rights.
11. Cookies
We use cookies to manage sessions, enhance UX, and track usage (Google Analytics). You can control cookie settings via your browser.
12. Children’s Privacy
Our services are not intended for persons under 18. We do not knowingly collect children's data.
13. Policy Updates
This policy may change. Major updates will be communicated on our site.
14. Contact
Information Officer
Abakhisa Group (Pty) Ltd T/A Abakhisa Nova
Email: info@abnova.co.za
Phone: 066 270 0293
Address: [Insert Address Here]