Legal
Privacy Policy
Effective date: 10 March 2026. This Privacy Policy explains how TIQET collects, uses, stores, secures, and discloses personal information.
1. POPIA Position
TIQET is committed to processing personal information in a manner intended to align with the Protection of Personal Information Act, 4 of 2013 (POPIA). Depending on the context, TIQET may act either as a responsible party for information relating to website visitors, prospects, and account administration, or as an operator processing information on behalf of a customer inside the TIQET platform.
2. Information We Collect
- identity and contact data, including names, email addresses, usernames, and phone numbers;
- company and billing data, including company names, subscription details, invoices, and payment metadata;
- platform usage data, including tickets, tasks, logs, comments, assignments, approvals, timestamps, and audit trails;
- technical data, including device, browser, IP address, session, and security-related records;
- support and communications data sent to TIQET.
3. How We Use Personal Information
- to provide, secure, and support the TIQET service;
- to manage accounts, authentication, and permissions;
- to send notifications, reports, invoices, and billing communications;
- to maintain records, logs, audit trails, and service analytics;
- to investigate misuse, fraud, abuse, or security issues;
- to comply with legal obligations and lawful requests.
4. Lawful Bases and Processing Limitation
TIQET processes personal information only where there is an appropriate justification, including performance of a contract, legitimate operational interests, consent where required, compliance with law, protection of a legitimate interest of the data subject, or another lawful basis recognised by POPIA.
We aim to collect only information that is adequate, relevant, and not excessive for the purpose for which it is processed.
5. Customer Content
Where a customer uploads or manages personal information in TIQET, that customer generally acts as the responsible party and TIQET acts as operator. In that role, TIQET processes such information to host, transmit, secure, back up, and support the service in accordance with the customer’s instructions and applicable law.
6. Disclosure of Personal Information
TIQET may disclose personal information to:
- hosting, infrastructure, communication, support, and analytics service providers;
- payment providers and invoicing or billing partners;
- professional advisers, auditors, insurers, or lawful authorities where reasonably required;
- a purchaser or successor if TIQET undergoes a merger, sale, or restructuring, subject to confidentiality safeguards.
7. Cross-Border Processing
TIQET may use cloud or communication providers that process or store data outside South Africa. Where cross-border transfers occur, TIQET will take reasonable steps to ensure that the recipient is subject to laws, binding agreements, or safeguards that provide an adequate level of protection consistent with POPIA.
8. Security Safeguards
TIQET maintains reasonable technical and organisational measures designed to prevent loss, damage, unauthorised destruction, unlawful access, and unlawful processing. These may include access controls, password protections, separation of privileges, logging, transport security, backups, and provider-level infrastructure security.
9. Retention
Personal information is retained only for as long as reasonably necessary for the purpose for which it was collected, to meet contractual obligations, for support and audit purposes, to resolve disputes, to enforce rights, or to comply with legal, tax, regulatory, and anti-fraud requirements. For cancelled customer accounts, TIQET may retain operational data for up to one year after cancellation before deletion, anonymisation, or archival lockout.
10. Data Subject Rights
Subject to applicable law, data subjects may request access to their personal information, correction of inaccurate records, deletion where appropriate, objection to certain processing, and withdrawal of consent where consent is the basis of processing. Where TIQET acts as operator for a customer, requests relating to customer-held data may need to be directed to the relevant customer as responsible party.
11. Cookies and Similar Technologies
TIQET may use session, security, or functionality-related technologies necessary to deliver the website and platform. If marketing or analytics cookies are later introduced, this policy should be updated and a cookie notice added.
12. FICA-Related Workflows
TIQET may support customers that operate in regulated sectors and may store records connected to customer compliance workflows. TIQET does not replace the customer’s legal obligations under the FIC Act. Customers remain responsible for their own registration, due diligence, reporting, and statutory record-keeping duties.
13. Complaints and Regulator Details
Privacy queries may be sent to admin@tiqet.co.za. If unresolved, a complaint may be lodged with the South African Information Regulator.
Information Regulator contact details published by the Regulator include: 010 023 5200, enquiries@inforegulator.org.za, and POPIAComplaints@inforegulator.org.za.
14. Changes to This Policy
TIQET may update this Privacy Policy from time to time. Material changes will be published on this page or communicated through the platform.