Skip to main content

Mon – Fri: 08:00 – 16:00

info@novacloud.africa

NovaCloud Africa

Data protection

POPIA compliance

At NovaCloud, the protection of personal information is fundamental to our operations. We are committed to complying with the Protection of Personal Information Act, 4 of 2013 (POPIA).

How we handle personal information

We recognise that personal data is one of the most valuable assets in today's digital economy. NovaCloud has implemented policies, processes and technical safeguards so that client, employee and partner information is handled with care and confidentiality.

Lawful bases we rely on

Depending on the activity, we process personal information because it is necessary to conclude or perform a contract, because we have a legal obligation, because you consented, or because a legitimate interest of NovaCloud or a third party does not override your rights. Marketing to existing clients follows the Electronic Communications and Transactions Act and POPIA consent rules.

Operators and cross-border transfers

We use vetted operators for hosting, communications, backup and security tooling. Where information leaves South Africa, we require a contract that offers an adequate level of protection, or another POPIA-recognised transfer mechanism, before the transfer proceeds.

Our compliance principles

Accountability

NovaCloud takes responsibility for ensuring personal information under our control is managed in compliance with POPIA. An appointed Information Officer oversees data protection governance.

Lawful & purpose-specific processing

Personal information is only collected for legitimate, defined and explicitly stated business purposes — not for unrelated secondary use without consent.

Minimal collection

We follow data minimisation, collecting only what is necessary to deliver services and meet legal or contractual obligations.

Transparency

Individuals are informed about what personal information we collect, how it is used, how long it is retained, and when it may be shared.

Security safeguards

Technical, administrative and physical measures — including encryption, access control, monitoring and secure disposal — protect data against loss, misuse or unauthorised access.

Retention & disposal

Information is retained only as long as needed for its purpose or as required by law, then securely destroyed, erased or anonymised.

Data subject rights

In line with POPIA, individuals whose data we process may:

  • Request access to the personal information we hold about them
  • Request corrections or deletion of inaccurate, irrelevant or excessive information
  • Object to processing under certain circumstances
  • Withdraw consent where applicable
  • Lodge a complaint with the Information Regulator of South Africa

Information Officer contact

For POPIA-related enquiries, data access requests or to exercise your rights, contact our Information Officer.

Email: legal@novacloud.africa

Phone: +27 10 8800 789

General contact

Customised for your space.

Designed around your business.

Connect with us