Legal entity and service provider: Assist Pro (Pty) Ltd. Assist Pro is the product and trading brand used throughout these policies. Contact: support@assist-pro.co.za.
1. Roles
The customer remains responsible for deciding the purpose and lawful basis for processing its business, employee, client or engagement information. To the extent Assist Pro processes that information only on the customer’s documented instructions to provide the service, Assist Pro acts as an operator as contemplated in POPIA.
2. Customer instructions
Assist Pro will process customer-controlled personal information only as reasonably necessary to provide, secure, support or troubleshoot the requested service, or as otherwise required by law. The customer is responsible for ensuring that its instructions are lawful.
3. Confidentiality and security
Use reasonable technical and organisational safeguards appropriate to the information and risk.
Limit access to people or service providers who reasonably need it for the service.
Require confidentiality obligations where appropriate.
Take reasonable steps to prevent loss, unauthorised access, misuse or unlawful processing.
4. Sub-processors and service providers
Assist Pro may use appropriate service providers for functions such as hosting, cloud infrastructure, communications, security, support, payments, OCR or AI features. Assist Pro remains responsible for selecting providers appropriate to the role and for putting reasonable privacy and confidentiality terms in place where required.
5. Cross-border processing
Where customer-controlled personal information is processed outside South Africa, reasonable steps will be taken to meet POPIA requirements for cross-border processing. Customers should also assess any professional, contractual or client-specific restrictions that apply to their information.
6. Security incidents
If Assist Pro becomes aware of a material security compromise affecting customer-controlled personal information, it will take reasonable steps to contain and investigate the incident and provide information reasonably needed by the customer to meet applicable notification duties.
7. Requests from data subjects
Where a data-subject request relates to information controlled by a business customer, Assist Pro may direct the person to that customer or reasonably assist the customer in responding, subject to legal and technical limitations.
8. Return, deletion and retention
On termination or when information is no longer needed, customer-controlled personal information will be deleted, returned, de-identified or retained only where reasonably required by law, security, backups or legitimate records. Backup copies may be removed through normal retention cycles.
9. Customer responsibilities
Provide any privacy notices and obtain any authority or consent required for the customer’s own processing.
Do not submit information that the customer is not lawfully permitted to process or disclose.
Choose local, cloud and AI features that are appropriate for the sensitivity of the information.
Apply professional confidentiality, client engagement and information-security requirements that apply to the customer.
10. Contact
Privacy and data-processing questions can be sent to support@assist-pro.co.za.