Skip to content
doenIT Start a conversation

Privacy at DoenIT

Privacy,
made clear.

This notice explains what personal information DoenIT collects through its public website and business enquiries, why we use it, who may receive it and how you can exercise your rights.

Effective: 25 August 2026South AfricaPlain-language edition

01 — Responsible party

Who is responsible for your information?

DoenIT is responsible for the personal information described in this website notice.

Information Officer:

General website enquiries: web@doenit.com

The responsible party determines why and how personal information is processed. Service providers acting only on our instructions are operators.

02 — Information collected

What we collect.

Information you give us

When the website contact form is available, it asks only for:

  • Name and surname.
  • Contact number.
  • Email address.
  • A message about your enquiry.

An email to DoenIT may also contain information that you choose to include. The public website is not used as an employee-record or client-company personnel database. Contact-form submissions are intended to be delivered to the web@doenit.com mailbox rather than retained as website records.

Information generated when you use the site

  • IP address, device and browser information, referring page and timestamps contained in ordinary hosting or security logs.
  • Pages requested and diagnostic information needed to operate and secure the website.
  • Cookie identifiers used for authorised WordPress administration; the public website does not currently deploy analytics or advertising cookies.
Please do not send health or patient information through the public website.The contact form and ordinary email channel are not designed for patient records, clinical information, identity documents, payment-card data, passwords, confidential datasets or other special personal information. Contact us first to arrange an appropriate secure channel.

We generally collect information directly from you. Technical information may be supplied by your browser, hosting provider or security service.

03 — Purpose & justification

Why we process it.

PurposeTypical POPIA justification
Respond to an enquiry and consider possible workSteps requested by you before a possible agreement and our legitimate interest in responding to business enquiries.
Contact you using the details suppliedYour request that we respond to the enquiry.
Operate, diagnose and secure the websiteOur legitimate interest in maintaining a safe and reliable website.
Meet legal obligations or establish, exercise or defend legal rightsApplicable legal duties and lawful interests.

Supplying information in a website enquiry is voluntary, but we cannot respond without enough contact and message information. We do not use a general enquiry as consent for unrelated electronic marketing.

04 — Recipients

Sharing and international transfers.

Contact-form submissions and emails are received through Microsoft-hosted Exchange. Microsoft acts as an email and technology service provider and may process information through its infrastructure and approved subprocessors. Website hosting or security providers may process limited technical information needed to deliver and protect the site.

We disclose personal information only where reasonably necessary to respond to an enquiry, operate or secure the service, obtain professional advice, comply with law, or protect legal rights. Where an operator processes information outside South Africa, we take reasonable steps to use a transfer mechanism permitted by section 72 of POPIA.

We do not sell personal information.

05 — Lifecycle

Retention and security.

The contact form is intended to transmit an enquiry to Microsoft-hosted Exchange and not to create a separate website database of enquiries. Email enquiries may remain in the relevant mailbox for as long as reasonably needed to respond, follow up, maintain an appropriate business record, meet a legal duty or deal with a dispute. Hosting and security logs are retained according to operational and security needs.

We use reasonable technical and organisational safeguards designed for the nature of the information and foreseeable risks. No internet transmission or storage system can be guaranteed completely secure. If a reportable security compromise occurs, we will follow section 22 of POPIA and applicable Information Regulator procedures.

06 — Your choices

Your POPIA rights.

Subject to applicable law and proof of identity, you may ask whether we hold personal information about you; request access; ask us to correct, update, delete or destroy qualifying information; object to certain processing; withdraw consent for future processing; and complain to the Information Regulator.

07 — Contact

Questions, requests and complaints.

Use the revealed email address with the subject “POPIA request”. Please do not send identity-document copies until we explain the secure verification method required for your request. General enquiries should go to web@doenit.com.

If we cannot resolve a concern, you may contact the Information Regulator at POPIAComplaints@inforegulator.org.za, telephone 010 023 5200 or use the Regulator’s official complaints service.

We may update this notice when our services, suppliers or legal obligations change. The effective date above identifies the current version.