
Privacy Policy
Prepared for: TAUSPACE
Document Version: 1.0
Document Date: 01 October 2025
Approved by: ISMS Steering Committee
Owner: Data Protection Officer (Nadia Vadachia)
Next Review Date: 1 October 2026
Distribution: Public – Website; Internal – ISMS Repository
1. Introduction
TAUSPACE (“we”, “our”, “us”) is committed to protecting the privacy and confidentiality of personal information in accordance with the Protection of Personal Information Act (POPIA), ISO 27001 Annex A.5.34, and international data-protection principles. This policy explains how we collect, use, store, and protect personal information obtained through our websites, platforms, and services.
2. Scope
This policy applies to all personal information processed by TAUSPACE, including that of clients, suppliers, business partners, employees, contractors, applicants, and website visitors.
3. Information We Collect
| Category | Examples |
|---|---|
| Identification details | Name, ID/passport number, company details |
| Contact information | Email, phone, address |
| Employment details | Job title, department, work history |
| Financial data | Billing or payment information |
| Technical information | Device IDs, IP address, browser type, usage analytics |
| Communications | Records of enquiries, support requests, correspondence |
4. Purpose of Processing
We process personal information to:
- Provide and improve our services
- Communicate with clients and respond to enquiries
- Manage billing, contracts, and legal obligations
- Maintain network and information security
- Fulfil compliance requirements under ISO 27001 and POPIA
- Recruit and administer staff and consultants
5. Lawful Basis for Processing
We process personal information only when we have a lawful basis, such as consent, contractual necessity, legal obligation, or legitimate interests.
6. Data Sharing and Disclosure
We may share your information with trusted third-party service providers who help us operate our business. These providers are contractually bound to keep your data secure. We may also share information to comply with legal obligations or protect our rights.
7. International Transfers
We operate globally, and your information may be transferred to countries with different data protection laws. We implement safeguards to ensure your data remains protected in accordance with applicable laws.
8. Data Retention
We retain personal information only for as long as necessary to fulfill the purposes for which it was collected, or as required by law. Once the retention period expires, we securely delete or anonymize the data.
9. Data Security
We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, loss, or misuse, aligned with ISO 27001 standards.
10. Data Subject Rights
You have rights regarding your personal information, including the right to access, correct, delete, or object to processing. To exercise these rights, please contact our Data Protection Officer.
12. Policy Updates
We may update this policy periodically. The latest version will always be available on our website.
13. Contact Information
| Company | TSDigital (Pty) Ltd |
| Data Protection Officer | Nadia Vadachia |
| [email protected] | |
| Telephone | +27 10 140 6574 |
| Website | www.tauspace.com |
14. Compliance Reference
| Standard/Law | Reference |
|---|---|
| POPIA | Act 4 of 2013 |
| ISO 27001:2022 | Annex A.5.34 (Privacy and PII Protection) |
| GDPR | Articles 5–13 |
| SOC 2 | Trust Services Criteria – Confidentiality & Privacy |
