Privacy Policy

Last updated: 28 October 2026

1. Who we are

Drexopoint (Pty) Ltd t/a EFS Digital, registration number 2024/273748/07, 39 Boyle Street, Pierre van Ryneveld, Centurion, 0157. Directors: Marc du Toit, Geoffrey Edward Greyling. Email [email protected], phone +27 61 514 4294. Not registered for VAT. We are the responsible party for website, marketing and account data. Information officer: Marc du Toit, [email protected].

2. Our two roles

• Responsible party: website visitors, enquiries, prospects, customer account and billing contacts.
• Operator: data our customers load into EFS CRM (their clients, emails logged to deals). Our customers decide how it is used; we process it on their instructions under a Data Processing Agreement (POPIA s20-21). Contact the relevant customer about that data.

3. What we collect, and whether it is required (s18(1)(a), (c), (d))

• Enquiries: name, business, phone, email, town, message. Name and one contact detail are required to reply; without them we cannot respond.
• Customers: account users, billing contact, PayFast payment references (no full card details).
• Prospects: business contact details published by the business, used only as described in section 6.
• Technical: pages viewed, device and approximate location from server logs, for security and operations.

4. Purposes and lawful basis (s11, s13)

Replying and providing services (contract, s11(1)(b)); billing and tax records (legal obligation, s11(1)(c), Tax Administration Act s29); security (legitimate interest, s11(1)(f)); marketing (section 6).

5. Sharing and providers

We do not sell personal information. We use: hosting and storage (Cloudflare), email (Zoho), payments (PayFast). Each is bound to confidentiality and security (s19-21).

6. Direct marketing (s69, ECT Act s45)

We send electronic marketing only to (a) existing customers about similar services, or (b) businesses we approach once to ask for consent. Every message has a free opt-out (reply STOP or email us), and we stop within 5 business days and keep a do-not-contact list.

7. Cross-border transfers (s72)

Some providers store or process data outside South Africa (for example cloud infrastructure regions outside South Africa). We use only providers bound by law, binding corporate rules or contract to protection substantially similar to POPIA.

8. Retention (s14)

Enquiries: 12 months if no business follows. Customer and billing records: 5 years (Tax Administration Act, Companies Act s24). Customer Data in EFS CRM: per the DPA and our Terms.

9. Security and breaches (s19, s22)

Encryption in transit, access controls, PIN-per-user, 2FA for staff, backups and logging. If there are reasonable grounds to believe your information was accessed without authority, we notify the Information Regulator and you as soon as reasonably possible.

10. Your rights (s23-25, s11(3), s69)

Access, correction, deletion, objection and opt-out. Email [email protected]; access requests via our PAIA manual. You may complain to the Information Regulator: Information Regulator (South Africa), Woodmead North Office Park, 54 Maxwell Drive, Woodmead, Johannesburg, 2191; complaints (Form 5) to [email protected] (POPIA) or [email protected] (PAIA); [email protected]; 010 023 5200; inforegulator.org.za.

11. Cookies

See our cookie notice. No advertising or tracking cookies are used.

12. Children

Our services are for businesses; we do not knowingly collect children's information.

13. Information Regulator contact

Information Regulator (South Africa): inforegulator.org.za. Woodmead North Office Park, 54 Maxwell Drive, Woodmead, Johannesburg, 2191. POPIA complaints: [email protected]. PAIA complaints: [email protected]. Enquiries: [email protected], 010 023 5200.

14. Changes

We post updates here with the date.