Legal

Privacy Notice

In compliance with the Protection of Personal Information Act (POPIA).

Introduction

Sourceworx (Pty) Ltd ("Sourceworx", "we", "us" or "our") is committed to protecting the privacy and personal information of all individuals whose data we process. This Privacy Notice explains how we collect, use, store and protect personal information in compliance with the Protection of Personal Information Act 4 of 2013 (POPIA) and other applicable South African legislation.

Responsible Party

Sourceworx (Pty) Ltd is the responsible party as defined in POPIA. Our registered address is Block A, 1st Floor, Investment Place Office Park, 111 10th Road, Hyde Park, Johannesburg, 2196. For queries regarding this Privacy Notice or your personal information, contact our Information Officers: Masande Dyasi (communications@sourceworx.co.za) or Naledi Kgofelo (naledik@sourceworx.co.za).

Information We Collect

We may collect the following categories of personal information: contact details (name, email address, telephone number, physical address), employment and professional information, identification details required for B-BBEE verification purposes, technical information related to your use of our website and services, and any additional information you voluntarily provide to us.

Purpose of Processing

We process personal information for the following purposes: to provide and manage our IT managed services, network managed services, cybersecurity and software development offerings; to communicate with clients and prospective clients; to comply with legal and regulatory obligations including POPIA, B-BBEE and ISO certification requirements; to manage our workforce and talent development programmes; and to improve our services and website experience.

Lawful Basis for Processing

We process personal information on one or more of the following lawful grounds: your consent; the performance of a contract to which you are a party; compliance with a legal obligation; protection of your legitimate interests; and the pursuit of our legitimate business interests, provided this does not prejudice your rights.

Sharing of Information

We may share personal information with our technology partners (including Microsoft, Fortinet, Cisco and Huawei) to the extent necessary to deliver our services, with regulatory bodies and auditors as required by law, and with service providers who assist us in operating our business. We do not sell personal information to third parties.

Security Measures

We take appropriate technical and organisational measures to protect personal information against unauthorised access, alteration, disclosure or destruction. Our security practices are certified under ISO 27001 and include encryption, access controls, regular security assessments and staff training.

Retention

We retain personal information only for as long as is necessary to fulfil the purposes for which it was collected, or as required by law. When personal information is no longer needed, it is securely destroyed or de-identified.

Your Rights

Under POPIA, you have the right to: request access to your personal information; request correction of inaccurate or incomplete information; request deletion of your personal information where it is no longer necessary; object to the processing of your personal information; and lodge a complaint with the Information Regulator.

PAIA Manual

PAIA Manual

Promotion of Access to Information Act 2 of 2000

Sourceworx (Pty) Ltd — Section 51 Manual

1

Introduction

The Promotion of Access to Information Act 2 of 2000 ("PAIA") gives effect to the constitutional right of access to any information held by the State, and to any information held by a private body that is required for the exercise or protection of any rights. This manual is published in terms of Section 51 of PAIA and describes how members of the public may submit requests for access to records held by Sourceworx (Pty) Ltd ("Sourceworx").

2

Details of the Responsible Party

Company nameSourceworx (Pty) Ltd
Registration numberAvailable on request
Physical addressBlock A, 1st Floor, Investment Place Office Park, 111 10th Road, Hyde Park, Johannesburg, 2196
Postal addressBlock A, 1st Floor, Investment Place Office Park, 111 10th Road, Hyde Park, Johannesburg, 2196
Websitewww.sourceworx.co.za
3

Information Officers

Sourceworx has designated the following individuals as Information Officers for the purposes of PAIA and POPIA. All requests for access to information must be submitted to one of the Information Officers below.

Information Officer 1Masande Dyasi
TitleManaging Director
Emailcommunications@sourceworx.co.za
Information Officer 2Naledi Kgofelo
Emailnaledik@sourceworx.co.za
Physical addressBlock A, 1st Floor, Investment Place Office Park, 111 10th Road, Hyde Park, Johannesburg, 2196
4

SAHRC Guide

The South African Human Rights Commission (SAHRC) has compiled a guide to assist members of the public in exercising their rights under PAIA. This guide is available free of charge from the SAHRC at www.sahrc.org.za.

5

Description of the Business

Sourceworx (Pty) Ltd is a South African information technology company providing IT Managed Services, Managed Cybersecurity, and Software Development solutions to organisations across multiple sectors, including financial services, higher and basic education, mining and government. Sourceworx holds ISO 9001, ISO 27001 and ISO 20000 certifications and is a registered Microsoft partner.

6

Categories of Records Held

Sourceworx holds the following categories of records, subject to applicable grounds for refusal:

  • Client and prospective client records (contracts, correspondence, service records)
  • Employee and contractor records (employment contracts, payroll, HR documentation)
  • Financial records (invoices, bank statements, tax returns)
  • Supplier and vendor records (contracts, service level agreements)
  • Company statutory records (MOI, share register, board resolutions)
  • IT and cybersecurity records (system logs, security assessments, incident records)
  • Compliance records (ISO certifications, B-BBEE verification certificates, POPIA records)
  • Training and skills development records (SETA submissions, learner records)
7

How to Submit a Request for Access

Any person wishing to request access to records held by Sourceworx must complete the prescribed Form C (available from the SAHRC website or the Information Regulator's website) and submit it to one of the Information Officers listed in Section 3 of this manual. The request must include: full name and contact details of the requester; a description of the record(s) requested; the form in which access is requested; the right being exercised or protected and the reason the record is required; proof of identity of the requester.

8

Fees

A request fee is payable upon submission of a request. An access fee is payable before access is granted if the request is approved. Fees are prescribed by the Minister of Justice and are available from the SAHRC or the Information Regulator. Sourceworx will provide written confirmation of applicable fees upon receipt of a request. Persons who can demonstrate that they cannot afford the prescribed fees may apply for a waiver.

9

Grounds for Refusal

Sourceworx may refuse a request for access to records on grounds set out in PAIA, including but not limited to: mandatory protection of the privacy of a third party; mandatory protection of commercial information; mandatory protection of certain confidential information; protection of research information; protection of the commercial activities of a private body; and where disclosure would be an abuse of the PAIA process. Any refusal will be communicated in writing with reasons within 30 days of receipt of the request.

10

Availability of This Manual

This manual is available free of charge on the Sourceworx website at www.sourceworx.co.za/privacy. A copy may also be requested from the Information Officers listed in Section 3. This manual will be updated as required to reflect changes in legislation or company operations. Last updated: June 2026.

Cookies and Website Analytics

Our website uses cookies and similar technologies to improve your browsing experience and to analyse website traffic using tools such as Google Analytics. We only activate analytics cookies with your consent. You may withdraw consent at any time by clicking "Cookie Settings" in the footer. You may also control cookies through your browser settings; however, disabling certain cookies may affect the functionality of parts of the website.

Changes to This Notice

We may update this Privacy Notice from time to time to reflect changes in our practices or applicable law. Any material changes will be communicated through our website. This notice was last updated in April 2026.

Contact Us

If you have questions about this Privacy Notice or wish to exercise your rights under POPIA, please contact our Information Officers: Masande Dyasi at communications@sourceworx.co.za or Naledi Kgofelo at naledik@sourceworx.co.za. You may also write to us at Block A, 1st Floor, Investment Place Office Park, 111 10th Road, Hyde Park, Johannesburg, 2196.

We use cookies

We use analytics cookies to understand how visitors use our site. No personal data is sold or shared with advertisers. Learn more.