1. Who is responsible
Cybr Physical Solutions (Pty) Ltd is the responsible party for personal information processed through this Website.
2. What we collect and why
- When you contact us by email or WhatsApp: we receive the contact details, profile information and message content you choose to send. We use it to understand and respond to your enquiry, prepare a proposal where requested, and keep a record of the business conversation.
- Analytics, only with your consent: if you allow analytics, Google Analytics 4 collects pseudonymous information such as pages viewed, device and browser type, approximate location derived from your IP address, referral information and a randomly generated identifier. We use it to understand website use and improve the Website. We do not use Google advertising features.
- Your privacy choice: we store your analytics or essentials-only choice in your browser's local storage so the Website can remember it. This is essential preference storage and does not require analytics consent.
- Hosting and security data: our hosting and content delivery providers may process technical request data such as IP address, requested URL, browser information and timestamps to deliver and secure the Website.
3. Cookies and similar technologies
| Category | Purpose | Default |
|---|---|---|
| Essential preference storage | Stores your cookie choice under cybr-cookie-consent-v1 in local storage. | Active |
| Google Analytics 4 | Measures Website use. The analytics script is not loaded and analytics cookies are not set unless you allow analytics. | Off |
Google Consent Mode defaults analytics and advertising storage to denied. If you select “Allow analytics”, analytics storage changes to granted and the GA4 script loads. Advertising storage and personalisation remain denied.
You can change or withdraw consent at any time using Cookie settings in the footer. Withdrawing consent returns analytics storage to denied, removes known Google Analytics cookies for this domain and reloads the Website without the analytics script.
4. Lawful basis under POPIA
- We process contact and enquiry information to take steps at your request and for our legitimate interest in responding to and managing genuine business enquiries.
- We process analytics information only with your consent. You may refuse or withdraw that consent without losing access to the Website.
- We process essential technical and security data where necessary to operate, protect and deliver the Website.
5. Who we share information with
We do not sell personal information. Limited information may be processed by providers that help us operate the Website and communicate with you:
- Google: Google Analytics 4, only if you consent.
- Meta Platforms / WhatsApp: when you choose to contact us through WhatsApp.
- Vercel: Website hosting, content delivery, operational logging and security.
- Oracle Cloud Infrastructure: delivery of the Buddy demonstration video.
Each provider processes information under its own terms, privacy notice and security controls.
6. Processing outside South Africa
Google, Meta, Vercel and Oracle may process information on infrastructure outside South Africa. Where personal information is transferred across borders, we rely on appropriate contractual, legal or consent-based safeguards and the conditions in section 72 of POPIA.
7. How long we keep information
- We keep enquiry and business contact information only while it is reasonably needed to respond, provide requested services, meet legal or accounting requirements, or manage the business relationship. Enquiry records that do not lead to an ongoing relationship are deleted or anonymised no later than 24 months after our last contact, unless a longer period is legally required.
- Analytics information is retained according to the retention period configured in our Google Analytics property and is reviewed periodically.
- Your cookie choice remains in local storage until you clear site data or change your preference.
8. Your rights under POPIA
You may:
- ask whether we hold personal information about you and request access to it;
- ask us to correct, update or delete inaccurate or unnecessary personal information;
- object to certain processing and withdraw analytics consent at any time;
- ask us to explain how your personal information has been used or shared; and
- complain if you believe your information has been processed unlawfully.
To exercise a right, email herman@cybr-physical.com. We may need to verify your identity before disclosing or changing personal information.
9. Complaints to the Information Regulator
You may lodge a POPIA complaint with the Information Regulator (South Africa) if you believe your personal information has been processed unlawfully.
Address: Woodmead North Office Park, 54 Maxwell Drive, Woodmead, Johannesburg, 2191
Email: POPIAComplaints@inforegulator.org.za
Telephone: 010 023 5200
Complaint guidance10. Security
We use reasonable technical and organisational safeguards designed to protect the limited personal information we process against loss, misuse, unauthorised access, alteration and disclosure. No internet service can be guaranteed completely secure.
11. Children
The Website is directed at businesses and their owners or staff, not children. We do not knowingly collect personal information directly from children through the Website.
12. Links and third-party services
The Website links to products and services with their own websites and privacy practices, including Penny, LodgeOS, WhatsApp and the AI readiness assessment. This policy applies only to cybr-physical.com. Review the privacy information on a third-party service before providing information there.
13. Changes to this policy
We may update this policy when our Website, providers or legal obligations change. The “last updated” date shows the latest version. Material changes will be highlighted where reasonably practical.