Privacy Notice

1. Who we are

Eagles Unchained (Pty) Ltd ("we", "us", "the Company") is a South African technology and business consultancy. We respect your privacy and handle personal information lawfully, transparently and securely.

This notice explains what personal information we collect, why we process it, who we share it with, and the rights you have. It applies to our website, our services, and our dealings with clients, suppliers, employees and enquirers.

2. Information we collect

POPIA requires a lawful justification for every use of personal information.

We do not seek special personal information — such as race, health, religious or political beliefs, or biometric data — unless it is necessary for a specific lawful purpose and we have the authorisation POPIA requires.

3. How we collect it

We collect information directly from you wherever it is practicable to do so.

• Directly from you— when you contact us, request a quotation, sign an agreement, or work with us.
• Through our website— when you complete the contact form or email us.
• From your organisation— where a colleague or employer provides your work contact details.
• From public sources— such as company registers, where we need to verify a business.

4. Why we process it, and our lawful basis

POPIA requires a lawful justification for every use of personal information. Ours are set out below.

5. Providing your information

Supplying your personal information is voluntary. However, some information is necessary for us to act — for example, we cannot prepare a quotation, conclude an agreement or invoice you without your contact and billing details. If you choose not to provide it, we may be unable to provide the service you have asked for.

Certain information is required by law, such as the records we must keep for tax purposes.

6. Who we share it with

We do not sell your personal information. We share it only where necessary, and every operator who processes information on our behalf is bound by a written agreement in terms of section 21 of POPIA requiring confidentiality and appropriate security.

7. Cross-border transfers

Some of the cloud services we rely on — including email, storage and application hosting — store or process information on servers outside South Africa.

Where that happens, we transfer information in terms of section 72 of POPIA, relying on data-processing agreements and standard contractual terms with those providers that give your information a level of protection substantially similar to POPIA, or on your consent where that is required. We tell clients where their data will be hosted.

8. How long we keep it

We keep personal information only as long as necessary for the purpose it was collected for, unless the law requires longer or we need it to establish or defend a legal claim. When a retention period ends, we securely destroy or de-identify the records.

9. How we protect it

We apply appropriate, reasonable technical and organisational measures to keep personal information secure, and we review them periodically. These include:

• Access controls and multi-factor authentication on business accounts, granted on a least-privilege basis.
• Encryption of devices and disks, and encrypted transmission (SSL/TLS) on our websites and client systems.
• Credentials and API keys stored in an encrypted vault, never in plain text.
• Regular backups with periodic restore testing.
• Written agreements with every operator, and secure disposal of paper records.

10. Your rights

Under POPIA you have the right:

• To be told when we collect your personal information, and when it has been accessed without authorisation.
• To ask us to confirm, free of charge, whether we hold personal information about you, and to request a copy of it (a fee may apply to the copy).
• To ask us to correct or delete information that is inaccurate, irrelevant, excessive, out of date, incomplete, misleading or unlawfully obtained.
• To object, on reasonable grounds, to our processing of your information.
• To withdraw your consent at any time, where processing is based on consent. This does not affect processing that already happened.
• To object to direct marketing and unsubscribe at any time.
• To complain to the Information Regulator, and to institute civil proceedings.

To exercise any of these rights, contact our Information Officer at info@eaglesunchained.co.za. We will verify your identity and respond within 30 days. Formal access requests follow the procedure in our PAIA Manual.

11. Direct marketing

We may send you information about our services by email or electronic message if you have consented, or if you are an existing customer and we obtained your details in the course of a sale of similar services. You were given the chance to object when we collected your details, and every message we send includes a way to opt out.

If you are not an existing customer, we may approach you only once to ask for your consent, and we will not approach you again if you decline. To stop marketing at any time, reply to any message or email us.

12. Cookies and our website

Our website is deliberately simple. It does not set advertising or tracking cookies and does not profile visitors. Your browser may store basic technical information needed for the site to display correctly and securely.

If we add analytics or other cookies in future, we will update this notice and, where the law requires it, ask for your consent first.

13. Children's information

Our services are aimed at businesses, and we do not knowingly collect the personal information of children. Where processing children's information is genuinely necessary for a client project, we do so only with the consent of a competent person or under another authorisation permitted by POPIA. If you believe we hold a child's information without proper authorisation, please contact us and we will address it.

14. Changes to this notice, and how to complain

We review this notice at least annually and whenever our services, systems or the law change materially. The current version is always published on this page.

If you have a concern, please contact our Information Officer at info@eaglesunchained.co.za first — we would like the chance to put it right. You also have the right to complain directly to the Information Regulator: