POPIA Section 18 Mandatory Disclosure
What Personal Information We Collect & Why We Process It
In accordance with Section 18 of POPIA, Wistech discloses the specific categories of personal information collected, the purpose of processing, and the statutory or contractual basis for each category.
1. Client Identity, RICA & Service Onboarding
Under the Regulation of Interception of Communications and Provision of Communication-Related Information Act (RICA, Act 70 of 2002) and POPIA Section 11(1)(b)-(c), we collect full names, SA ID or passport numbers, company registration documents, physical installation coordinates, proof of residence, and contact details required to provision Wireless, Fibre, LTE, and ICT services.
2. Billing, Financial & Credit Vetting Data
To administer monthly recurring billing (processed on the 25th of each month), quotations, and SARS tax compliance, we process VAT/tax numbers, billing addresses, EFT/debit order banking details, invoice histories, and statement balances. Credit bureau vetting is conducted strictly with the Data Subject's prior written consent.
3. CCTV Surveillance, ANPR & NOC Telemetry
Where Wistech deploys or monitors commercial Hikvision CCTV, AcuSense human/vehicle analytics, or ANPR boom-gate cameras, video footage and license plate captures are processed strictly for physical perimeter security, crime prevention, and asset protection (POPIA Section 11(1)(f)). Visible CCTV warning signage is required at all monitored entry points.
4. Network Logs, Operators & Cloud Transfers
To maintain 99.9% network uptime and diagnose faults, our UISP and Zabbix NOC processes IP addresses, CPE signal metrics, and connection logs. Where third-party Operators (such as Fibre Network Operators, South African VPS data centers, ESET, or Microsoft 365) process data on our behalf, they are bound by POPIA Section 20-21 security and Section 72 cross-border safeguards.
5. Employee, Contractor & Supplier Records
For human resources, occupational health and safety (tower climbing & field engineering), and payroll administration, we process staff identity documents, qualifications, emergency contacts, banking details, and signed confidentiality and POPIA compliance agreements in access-controlled HR records.
6. Website Visitors, Portal Sessions & Cookies
When you access wistech.co.za or log into our ERPNext Client Portal, we use essential session cookies, TLS encryption, and server security logs to authenticate your session, remember theme preferences, and protect against automated cyberattacks. We do not use invasive third-party advertising trackers.
