Legal
Privacy policy
What this site and our forms collect, why we need it, who else handles it, how long we keep it, and how to ask for it back.
01Who is responsible
This policy covers rizonetech.com and the forms on it. It is written for South Africa's Protection of Personal Information Act, 2013 (POPIA).
The responsible party is Rizonetech (Pty) Ltd, Company Registration No 2019/060336/07, with its registered office at 5 Mooisig, 50 Wellington Street, George, Western Cape, 6529, South Africa. Its founder, Derick Payne, is the information officer. When this policy says "we", it means the company.
We do not sell or rent personal information, and we do not use it for advertising.
02What the forms collect
The site has three forms. Each one stores what you send in a private database and emails us a copy. Only the people at Rizonetech given access to form submissions can see what is stored.
The contact form
Your name and email address, and, if you choose to give them, your phone number and company. It also asks which service you need and what the problem is. We use this only to answer you and to follow up on your enquiry.
The client intake form
When we agree to work together, we send you a link to this form. It asks for your business details, a main and a billing contact, the services you want, the systems and suppliers you use now, who holds admin access, and your preferred support hours. It never asks for a password. We use it to set up the work and to invoice it.
The Microsoft 365 agreement form
For a Microsoft 365 licence order, this form records the customer and company, the tenant domain, the licences and term, the billing contact, and your acceptance of the agreement. As proof of that acceptance it keeps:
- your typed full name, your "I accept" tick and the signature you draw on the screen, stored as an image;
- the version of the agreement you accepted and a fingerprint of its exact text, which shows whether the stored terms match what you signed;
- the date and time, and the IP address the form was sent from.
A PDF copy of the signed agreement is emailed to you and to us, and kept with the submission.
03How the forms stop spam
Every form checks that a person, not a program, sent it. You never solve a puzzle.
Built-in checks. A hidden field that only programs fill in, a signed token that proves the form came from this site, a minimum time to fill it in, and a limit of five submissions an hour from one IP address. A refused submission is logged without its contents and is not stored.
Cloudflare Turnstile. An invisible check from Cloudflare runs when a form loads. Your browser sends Cloudflare technical signals, such as your IP address and browser details, so it can tell people from bots. Cloudflare uses them for that check under its own privacy policy, and not for advertising. If Turnstile cannot be reached, your message is still stored and marked for us to review.
04The free tools
The free tools run in your browser. This site's server does no work for a check and receives nothing about it. The domain you type goes from your browser to public services that answer with that domain's public records:
- The email and domain checks ask Cloudflare's public DNS service (cloudflare-dns.com) for the domain's records, and open the address at that domain to see whether it answers securely.
- The domain health check also asks rdap.org, which passes the request to the domain's registry, for its public registration record.
- The Microsoft 365 setup check also asks Microsoft's sign-in service for the domain's public tenant details.
- The SPF record builder asks the same public DNS service for the records the draft refers to, including any you add yourself, to count their lookups.
- The email header analyser, the signature generator, the DMARC record builder and the IT health self-check send nothing anywhere, except that the signature generator loads any logo or banner from the image address you enter. What you paste, type or answer stays in your browser.
The tool pages show no ads.
05Visit statistics, cookies and advertising
We count visits to see which pages help people. The statistics are cookie-free: they record the page opened, the page that linked to it, and the browser and device type, and they place nothing on your device. We see totals, not individual visitors.
Pages without ads set no cookies for visitors. If you pick a light or dark theme, your browser remembers the choice in its own storage. It never leaves your device, and you can clear it with your browser's site data.
Like every website, the host keeps standard server logs, such as the IP address, the time and the page requested, to run and protect the site.
Advertising. Google ads appear only on our articles and whitepapers. No other page shows ads, the free tools included.
On those pages, third-party vendors, including Google, use cookies to serve ads based on your prior visits to this website or other websites. Google's advertising cookies let it and its partners serve you ads based on your visits to this site and other sites on the internet.
You can opt out of personalised advertising in Google's Ads Settings, and out of some other vendors' personalised advertising at www.aboutads.info.
Visitors from the European Economic Area, the United Kingdom and Switzerland first see Google's consent message on those pages. It names the advertising technology providers and lets you accept or refuse personalised ads.
07Information outside South Africa
The website and its form submissions are hosted by Pressable (Pressable, Inc., an Automattic company) in its Amsterdam data centre in the Netherlands. Pressable keeps backups with Amazon Web Services in the United States, and public pages are served from cached copies on Automattic's network, including in Johannesburg. The other providers above may also store or process information outside South Africa, including in the United States and Europe.
We treat each of these as a transfer of personal information across the border under section 72 of POPIA. The providers process it for us as operators, and Pressable states that it uses European Commission approved standard contractual arrangements for transfers outside the European Economic Area.
08How long we keep it
Enquiries and intake forms are kept for 24 months after they arrive, then deleted automatically, unless they have become part of a client record.
Signed agreements are kept for as long as the subscription runs and for five years after it ends, as part of our business records, then deleted.
On request. If you ask us to delete your information and we have no legal duty to keep it, we delete it and tell you when it is done.
09How we keep it safe
The site runs only over HTTPS. Stored submissions are visible only to the people at Rizonetech given access to form submissions, and the forms never ask for passwords. If a breach ever puts your information at risk, we will tell you and the Information Regulator, as POPIA requires.
10Your rights under POPIA
You may ask:
- whether we hold personal information about you, and for a copy of it;
- for it to be corrected, or deleted when we no longer need it;
- that we stop using it, where you object to how it is used.
Email legal@rizonetech.com from the address you used, and we will answer you. If you are not satisfied with our answer, you may complain to the Information Regulator.
11Changes to this policy
When this policy changes, we update the date and the version at the top of this page. A change to how the forms use your information applies only to what you send after the change.
A question about your information?Ask us directly, and we will answer in plain words.
Email legal@rizonetech.com