Privacy Notice

Last updated: 17 September 2026

Who we are

MMX IT Services CC (registration number 2009/005732/23) is a South African close corporation based in Durbanville, Cape Town. We provide IT support, repairs, network installation and related services to businesses and individuals. In this notice, “we”, “us” and “our” mean MMX IT Services CC.

We are responsible for the personal information described here. In the wording of the Protection of Personal Information Act 4 of 2013 (POPIA), we are the responsible party.

This website

This website does not use cookies. We run no analytics, advertising or tracking software on it, there is no contact form, and nothing you do on the site is recorded by us.

Like any website, it is served by a hosting provider that keeps standard server logs. Those logs normally record the internet address (IP address) of the visitor, the browser used, the pages requested, and the date and time. They exist for security and fault-finding, they are produced by the hosting provider rather than by us, and we do not use them to identify or build a profile of anyone.

When you contact us

When you reach us by WhatsApp, telephone, SMS or email, we receive whatever you choose to tell us. That is usually your name, your contact details, the name of your business and a description of the problem. We use it to answer you, to prepare a quotation, and to keep a record of what was discussed.

When we do work for you

To carry out the work and keep proper records, we hold:

• contact and account details for you or your business
• details of the equipment, networks and systems we support
• records of work carried out, quotations and invoices

Information on equipment we service

This one matters, so we set it out plainly. When you bring us a computer, laptop, server or storage device, or when we work on your systems remotely, we may have access to information stored on them. That can include personal and confidential information belonging to you, to your staff, or to your own customers.

We treat that information as confidential. We look at it only as far as the work you asked for requires. We do not copy it, keep it or pass it on — the exception being a backup or data-recovery job, where handling your data is the work itself.

Where equipment is sold on or disposed of, storage devices are securely erased or destroyed first.

Why we may process your information

Under section 11 of POPIA, we process personal information where:

• it is necessary to carry out work under an agreement with you
• it is necessary to take steps you have asked for before an agreement is concluded, such as preparing a quotation
• the law requires it, such as keeping tax and accounting records
• it serves our legitimate interests or yours, and does not override your rights
• you have given your consent

What we do not do

• We do not sell, rent or trade personal information.
• We do not share it for anyone else’s marketing.
• We do not add you to a mailing list without asking you first.

Who we share information with

We share personal information only where the work requires it:

• our website and email hosting provider, which stores the correspondence we exchange with you
• suppliers, where an order or a warranty claim has to be placed in your name
• our accountant, and SARS, where the law requires it
• anyone you have asked us to deal with on your behalf

We require anyone acting for us to keep the information confidential and to use it only for the purpose we gave it to them.

Information processed outside South Africa

Our website and our email are hosted in South Africa.

Where you choose to reach us through a third-party platform such as WhatsApp, that platform may process your information outside South Africa under its own terms. POPIA requires comparable protection where personal information is sent across a border, and you are welcome to read that platform’s own privacy terms. If you would rather not use it, an email or a telephone call reaches us just as well.

How long we keep information

We keep information for as long as it is needed for the purpose it was given, and after that only for as long as the law requires. Quotations and correspondence that do not lead to work are cleared out once they are plainly no longer needed. Invoices and the records supporting them are kept for five years, as tax legislation requires.

Security

We take reasonable technical and organisational steps to protect personal information against loss, damage and unauthorised access. These include controlled access to our own systems, encryption where it is appropriate, and secure erasure of storage devices before any equipment leaves our hands.

No system is ever completely secure. If a breach occurs that creates a risk to you, we will notify you and the Information Regulator, as POPIA requires.

Your rights

Under POPIA you may:

• ask what personal information we hold about you
• ask us to correct or delete information that is wrong, misleading, out of date, or that we no longer have the right to keep
• object to our processing of it, on reasonable grounds
• withdraw your consent, where consent is what we relied on
• complain to the Information Regulator

To exercise any of these, contact us using the details below. We do not charge for a reasonable request. We may first ask you to confirm who you are.

Our Information Officer

Jacques Laubscher is the Information Officer for MMX IT Services CC.
Email: info@mmxits.co.za
Telephone or WhatsApp: +27 83 608 9199
Durbanville, Cape Town, South Africa

The Information Regulator

If you are not satisfied with how we have handled your information, you may complain to the Information Regulator:

Governing law

This notice, and any matter arising from it, is governed by the laws of the Republic of South Africa.

Changes to this notice

We may update this notice from time to time. The current version is always the one on this page, and the date it was last changed is shown at the top.