Privacy Notice

---

Welcome to FlowBit42.
We value your privacy and are committed to protecting your personal information. This Privacy Notice explains how we collect, use, and protect your data when you visit our website, engage with our services, or communicate with us.

As both an enterprise IT and Governance, Risk & Compliance (GRC) company, we take privacy and information security seriously — not only as a legal obligation under the Protection of Personal Information Act (POPIA),  but also through alignment with EU General Data Protection Regulation (GDPR) best practices.
Data protection is a cornerstone of our compliance-driven business model and reflects the same principles as our Terms of Use and Cookies Policy. 

FlowBit42 is a Cape Town–based enterprise IT and GRC company specialising in:

• Regulatory and ISO Readiness Audits (including POPIA, ISO 27001, and NIST frameworks)
• Cloud Infrastructure and Security (Microsoft 365, Google Workspace, and hybrid environments)
• Comprehensive Risk Assessments and Compliance Consulting
• Strategic IT Roadmaps and Modernisation Projects 

Our work combines technical expertise with regulatory insight — helping organisations build secure, compliant, and future-ready digital ecosystems.

We collect and process information in a responsible and transparent manner.

a) Information You Provide To Us
This includes details you share directly with us via correspondence or meetings, such as:

• Your name and contact information (email, phone number, etc.)
• Company name and address
• Any information you submit through forms, emails, or service inquiries 

b) Information Collected Automatically
When you visit our website, certain information may be collected automatically, such as:

• Pages visited, time spent on pages, and referring URLs
• Cookies or similar technologies used for analytics, performance, and functionality

c) Cookies and Similar Technologies
We use cookies to enhance your experience, analyse traffic, and improve our services.

We use your personal information for legitimate business, technical, and compliance purposes, including to:

• Respond to inquiries and provide IT or audit-related services
• Conduct regulatory or ISO readiness assessments
• Improve website performance, usability, and security
• Perform internal audits and risk reviews
• Comply with legal  contractual requirements

We will only process your data where it is necessary and proportionate to the purpose.

We apply rigorous data protection and cybersecurity measures aligned with leading international standards such as ISO-27000/1, NIST Cybersecurity Framework, POPIA, and GDPR best practices.

Your information is never stored, accessed, or transferred without appropriate security, access control, and confidentiality safeguards.
We continuously review and strengthen our technical and organisational controls to ensure the ongoing integrity, availability, and confidentiality of your data.

We only share personal information where necessary and with trusted partners or authorities, including:

• Technical or Compliance Specialists assisting with audits, implementations, or assessments
• Legal and Regulatory Authorities where disclosure is required by law or regulation

We do not share your personal information under any circumstances.

We retain personal information only for as long as it is needed to:

• Fulfil the purposes outlined in this notice
• Meet legal and contractual retention requirements
• Maintain audit trails or compliance documentation
• Resolve disputes or enforce agreements

When no longer required, your data is securely deleted, anonymised, or archived according to our data retention policy.

You have the right to:

• Access a copy of your personal data
• Correct or update inaccurate information
• Request deletion or restriction of processing
• Object to certain forms of processing
• Request a portable version of your data
• Withdraw consent at any time (for consent-based processing)

To exercise these rights or raise any privacy concerns, please contact our Data Protection Officer (DPO):
Email: compliance@flowbit42.co.za

We may update this Privacy Notice from time to time to reflect changes in our services, legal obligations, or privacy practices. The most current version will always be available on this page.