POPIA
Privacy policy
Last updated: 15 October 2026
This policy explains how 10th Horizon Consulting ("10th Horizon", "we", "us") collects and uses personal information through this website and when you contact us. We follow the Protection of Personal Information Act, 2013 (POPIA).
Who we are
10th Horizon Consulting is based in Johannesburg, South Africa, and works with clients remotely worldwide. We are the responsible party for personal information collected through this website.
- Information Officer
- Thashen, 10th Horizon Consulting
- Thashen@10thhorizon.co.za
- +27 78 486 4308
What we collect
- Enquiry form: your name and surname, company, work email, phone number, the service you're interested in, your message, and your consent to be contacted.
- Patch health check: the figures you enter (number of endpoints, patch level, platform and so on) are calculated in your browser and are not sent to us unless you choose "Send these results to us", which copies them into the enquiry form.
- Email and WhatsApp: your contact details and anything you send us when you write to us directly.
- Technical information: our hosting provider records standard server logs, such as IP address, browser type and the pages requested, to deliver and protect the site.
We do not use advertising or analytics cookies. The site remembers your light or dark theme choice in your own browser's storage; this never leaves your device.
Why we use it
- To reply to your enquiry and prepare a proposal or health check.
- To deliver and manage services if you become a client.
- To keep the website secure and working.
We process your information with your consent, to take steps you've asked for before entering into a contract, or for our legitimate interest in running a secure website. We will not add you to marketing communications unless you opt in separately, and you can opt out at any time.
Who we share it with
We do not sell or rent your personal information. We use a small number of service providers (operators) who process it on our behalf:
- Netlify, Inc. hosts this website and stores enquiry form submissions.
- Google Fonts supplies the website's typefaces, which means your browser shares your IP address with Google when the page loads.
- Domains.co.za provides our email service.
- WhatsApp (Meta) carries any messages you choose to send us on WhatsApp.
We may also disclose information where the law requires it.
Information sent outside South Africa
Netlify and Google process data in the United States and other countries. We only use providers that are bound by data protection terms offering protection comparable to POPIA, as section 72 requires. By submitting the enquiry form you also consent to this transfer.
How we protect it
Security is our trade. We use encrypted connections (HTTPS), multi-factor authentication on the accounts that hold your information, encrypted devices, and access limited to the people who need it. If a security compromise affects your personal information, we will notify you and the Information Regulator as POPIA requires.
How long we keep it
- Enquiries that don't lead to work: deleted within 12 months.
- Client records: kept for the length of the engagement and afterwards for as long as tax and other laws require, usually five years.
Client data we handle during engagements
When we manage a client's endpoints, patching or systems, we may have access to personal information belonging to the client's staff or customers. In that work we act as an operator on the client's behalf: we process that information only on the client's documented instructions, keep it confidential and secure, and report any security compromise to the client without undue delay. The client's own privacy notice governs that information.
Your rights
Under POPIA you may:
- ask whether we hold personal information about you and request a copy of it;
- ask us to correct, update or delete it;
- object to us processing it, or withdraw your consent;
- opt out of any direct marketing; and
- lodge a complaint with the Information Regulator (South Africa) at inforegulator.org.za.
To make a request, email Thashen@10thhorizon.co.za. We may need to confirm your identity first, and we will respond within a reasonable time.
Children
This website is intended for businesses and is not directed at anyone under 18. We do not knowingly collect children's personal information.
Changes to this policy
We may update this policy from time to time. The date at the top shows when it last changed.