Your information, explained clearly

Nico Technologies cc is the responsible party for the processing described here (close corporation registration 2006/204327/23). We are based in Gauteng, South Africa.

Our registered Information Officer is Nicolaas Jacobus Burger de Nysschen. The Information Regulator registration number is 2026-052776, registered on 30 June 2026. The Information Officer can be contacted at hello@nicotechnologies.co.za.

• Enquiries: name, email address, organisation, service interest, and the message you choose to send.
• Privacy requests: name, email address, relationship to us, request type and details, and proportionate identity or authority evidence if later required.
• Technical and security data: IP address and ordinary server request information used by our hosting and security services. The contact and privacy-request APIs use an IP address temporarily to limit abusive submissions.
• Business records: correspondence and records created when we discuss, quote for, or provide services.
• Personnel and recruitment: employee administration records and applicant information, including contact details, CVs, qualifications, work history, interview records and employment-related information.
• SaaS products: account, organisation, contact, billing, support and security information, together with customer content needed to provide SHOVIQ, GolfDag and FirstInvoice. These product flows require product-specific notices and agreements.

We generally collect this information directly from you. Please do not put identity numbers, financial details, health information, or other unnecessary sensitive information into a free-text form.

• To receive and respond to enquiries and take steps you request before entering into a contract.
• To provide services, administer our relationship, keep business records, and meet contractual or legal obligations.
• To recruit personnel and manage employment, remuneration, workplace access, performance, safety and legal obligations.
• To create and secure SaaS accounts, deliver product features, provide support, administer subscriptions and prevent misuse.
• To receive, verify, investigate, and answer POPIA or PAIA requests and privacy concerns.
• To secure the website, prevent abuse, troubleshoot faults, and protect our legitimate interests and those of users.
• For direct electronic marketing only where POPIA permits it, including where valid consent has been obtained or an existing-customer exception applies. Every message will offer an opt-out.

Depending on the activity, processing is justified by your consent, a contract or steps connected to it, a legal obligation, or a legitimate interest allowed by section 11 of POPIA. You may withdraw consent without affecting earlier lawful processing.

Name, email address, and enough detail to understand an enquiry or privacy request are required for those forms. Other labelled fields are optional. If required information is not provided, we may be unable to respond or verify that we should disclose or change a record.

We share information only as needed with operators that support our business, such as website hosting, cloud infrastructure, email delivery, email hosting, security, and professional advisers, or where law requires disclosure. We currently use Microsoft Azure for hosting, Microsoft 365 for business email and productivity, QuickBooks Online for accounting, and Resend for website form email delivery.

Some providers or their infrastructure may be outside South Africa. Where personal information is transferred across borders, we apply section 72 of POPIA, including using recipients subject to applicable law, binding agreements, or corporate rules that provide an adequate level of protection, or another permitted ground.

We do not sell personal information.

We keep personal information only while it is needed for the stated purpose or a legal, contractual, dispute, or audit requirement. As an initial operating rule, unsuccessful website enquiries should be reviewed for deletion 24 months after the last meaningful interaction; privacy-request records should be reviewed after 3 years; client and statutory records follow the applicable contractual, tax, accounting, and legal retention periods.

When information is no longer authorised or required, we delete, destroy, or de-identify it so that it cannot reasonably be reconstructed. Backup copies may remain until their protected rotation expires.

We use reasonable technical and organisational safeguards appropriate to the information and risk. These include encrypted web transport, access controls, input validation, abuse throttling, security headers, limited collection, and controlled service providers. No online system can be guaranteed completely secure.

If there are reasonable grounds to believe personal information has been accessed or acquired by an unauthorised person, we will follow POPIA's security-compromise notification requirements.

Subject to POPIA and PAIA, you may ask whether we hold your personal information; request access; ask us to correct, delete, or destroy it; object to certain processing; withdraw consent; opt out of direct marketing; or complain to the Information Regulator.

Submit our online privacy request or email hello@nicotechnologies.co.za. Objections and correction/deletion requests are free. We aim to acknowledge requests promptly, verify identity proportionately, and communicate action on correction/deletion requests in writing within the period required by the current regulations. Access requests may be subject to the PAIA process, lawful refusal grounds, and prescribed fees.

We will never ask you to send more identity information than is reasonably needed for the request.

This website does not currently deploy advertising cookies or third-party analytics. Essential infrastructure may use technical storage or request data needed to deliver and protect the site. If we introduce optional analytics or marketing technologies, we will update this notice and introduce an appropriate consent choice before using them where required.

This business website and its enquiry form are not directed at children. Do not submit a child's personal information or information about another person unless you are authorised and it is necessary. Contact us if you believe such information was submitted inappropriately.

Please give our Information Officer an opportunity to address a concern at hello@nicotechnologies.co.za. You may also complain to the Information Regulator (South Africa): POPIAComplaints@inforegulator.org.za, telephone 010 023 5200, or visit inforegulator.org.za.

Official references: Protection of Personal Information Act 4 of 2013 and the 2025 amended POPIA Regulations.

We may update this notice when our processing or the law changes. The current version and update date will remain on this page. Material changes will be highlighted where appropriate.