The Protection of Personal Information Act (POPIA)  aims at relating the manner in which personal information may be collected, processed and to provide you with the rights and remedies to protect your personal information. 

The act involves three parties:

• Data subject: The person to whom the information relates

• Data controllers: The person who determines why and how to process the personal information

• The Processor: The person who processes personal information on behalf of the data controllers

Information we collect

As a processor, SudoTech stores the information on behalf of our customers (data controllers) who are responsible for maintaining the information of their own data subjects. The only personal data that SudoTech will collect directly is provided by you when you become a client or from odoo when you are a prospecting client as part of their partner program.

We will collect your information when:

• You contact us directly or complete the contact us form on our website

• Odoo assigned you to us as your prospecting partner

• Referred by one of our existing clients with your consent

This information collected will typically include your name, company name, email address, and if provided your phone number and address.

For more information on how we protect the information that we store on behalf of our clients, please refer to our Security Policy and Odoo Security Policy.

How we use your information

We use your contact information in order to provide quality service, to answer your requests, and for billing and account management reasons. We may also use this information for critical communication purposes such as important security updates or changes.

We will not sell, trade or otherwise transfer your personal data to any third parties.

Update or delete information

You have the right to update your personal data previously provided to us by you. If you would like to change or delete any of the information you can do so at any time by contacting us at privacy@sudotech.co.za and we will take all reasonable steps to do so except when we are required to retain it for legal reasons.

Data retention

SudoTech will only retain your personal information as long as necessary for the purpose for which it was collected as laid out in this policy, including any legal retention period. We will retain our clients’ database as long as necessary in order for us to provide the services you subscribed to. 

Clients hosting at Amazon Web Service: Upon cancellation of service, we will keep your database deactivated for a grace period as agreed upon before destroying it thereafter. If no agreement is in place, deletion will only take place after 3 months of cancellation.

Clients hosting at Odoo.sh: Upon cancellation of service, odoo will keep your database deactivated for a grace period before destroying it thereafter. A manual copy/backup of the database can still be stored directly with us as per agreement. 
For more information on the grace period of odoo, please see the data retention section on the Odoo Privacy Policy.

Please note that migration between hosting platforms constitutes as a service cancellation.

Service providers

Depending on our customers’ business requirements and in order to support our operations we rely on several third party Service Providers. They help us with services such as cloud hosting. 

Whenever we share data with these Service Providers, we make sure that they use it in compliance with Data Protection legislation, and that the processing they carry out for us is limited to our specific purpose and covered by a specific data processing contract.

Service Provider	Service Type	Shared Data
Odoo.sh	Infrastructure and hosting	Production data from odoo.com
Amazon Wes Service Inc.	Infrastructure and hosting	Production data from sudotech.co.za

Cookies

Cookies are small bits of text sent by our servers to your computer or device when you access our website. They are stored in your browser and later sent back to our servers so that we can provide contextual content. 

We don't have any cookies that store personal information of a person that visits our website unless you complete the contact form. The only cookies we store is a session and visitor ID to keep track of who visits our website and also timezone information to make sure time material is presented to you in the correct way.

Security

We realise how important and sensitive your personal data is, and we take a great number of measures to ensure that this information is securely processed, stored and preserved from data loss and unauthorized access. 

For more information on the security measures we have in place, please see our Security Policy. 

Contact us

If you have are any questions regarding this Privacy Policy please send an email to privacy@sudotech.co.za