Who We Are and What This Policy Covers
iTouch 360 is based in Midrand, Gauteng and supplies interactive touchscreen kiosks and 360-degree product display stands to retailers across South Africa. For purposes of POPIA, the responsible party is Astros Marketing (Pty) Ltd, acting through the iTouch 360 business. This policy applies to personal information collected from clients, prospects, suppliers, contractors and website visitors who contact us through our enquiry form or engage us for services.
We collect and use personal information only where it is needed to run our business, provide a quote, manage a project, or support an installed solution. We do not collect information for unrelated purposes, and we keep it only for as long as required by law or legitimate business needs. The information may be stored on secure systems used for administration, support and compliance, including records of project work and client communication.
Information We Collect From Clients and Enquiries
The information we collect depends on the service requested. This may include details needed to assess a retail site, arrange delivery, configure software, or provide after-sales support. In some cases, technical information about a connected device or network setting may also be recorded so we can assist correctly.
- Names, company names and job titles
- Contact details and preferred communication method
- Site addresses, delivery details and branch information
- Payment and billing records
- Project notes, service histories and support requests
- Technical information relating to equipment setup or fault reports
We may also receive information from a client authorising us to liaise with staff, installers or third-party service providers on their behalf. Where a person provides information about another individual, they should only do so with the necessary consent or lawful authority.
How We Use Personal Information
We use personal information to respond to enquiries, prepare quotations, plan installations, load content, configure systems, arrange service calls and provide support retainers. It may also be used for invoicing, account management, warranty or fault tracking, and training where a client has asked for staff training at a retail site. Occasionally we may need to contact a client about part replacement or preventative servicing, especially where a site in Durban or another coastal area may need attention due to humidity and wear.
- To assess requirements and design a suitable solution
- To fulfil orders, install equipment and manage support
- To keep records for contracts, tax and compliance
- To improve our service planning and fault response times
- To communicate important updates about a project or service visit
We may use aggregated or de-identified information for internal reporting. This does not identify any person and is used to monitor service demand across regions such as Johannesburg, Pretoria, Cape Town, Durban and Bloemfontein.
Sharing Information With Service Providers
We only share personal information where it is necessary to carry out our work, meet legal obligations or protect our business and clients. Information may be shared with trusted service providers who assist with delivery, installation, software configuration, network integration, maintenance or secure hosting of records. These parties are required to keep information confidential and use it only for the agreed purpose.
- Installers and technical specialists working on site
- Logistics providers handling transport and delivery
- Software or systems support providers
- Professional advisers such as accountants or legal consultants
- Authorities where disclosure is required by law
We do not sell personal information. If a project involves an external contractor or supplier, only the information needed for that task is shared. Access is limited to staff members who need it for their role, including operations, technical support and client service.
Security, Storage and Retention of Records
We take reasonable technical and organisational measures to protect personal information from loss, unauthorised access, alteration or disclosure. These measures include access controls, secure storage, restricted user permissions and the careful handling of records used for installations and support. While no system is completely risk free, we work to keep information as secure as practical.
Records may be stored electronically or in hard copy form, depending on the service. We retain information for as long as needed for the purpose it was collected, for business records, or for periods required by law. When information is no longer needed, we delete, destroy or de-identify it in a safe manner.
- Project and invoice records are kept for lawful accounting purposes
- Support records may be retained to assist with future faults or upgrades
- Access is reviewed where staff roles change or a contract ends
- Physical records are stored and disposed of with care
Your Rights Under POPIA
You have rights in relation to your personal information, subject to legal limits and verification of identity. You may ask what information we hold about you, request correction of inaccurate details, object to certain processing, or withdraw consent where consent was the basis for processing. If you believe information has been handled improperly, you may raise a concern with us in the first instance.
Requests should be made through the enquiry process on our contact page so we can verify the request and respond appropriately. We may need reasonable detail to locate the relevant record and confirm your identity before action is taken. If your request cannot be fulfilled, we will explain the reason where the law requires us to do so.
- Request access to your personal information
- Ask for correction or deletion where lawful
- Object to direct marketing where applicable
- Withdraw consent, if consent was used
Cross-Border Processing and Policy Updates
Some service providers or systems used for administration or support may store information outside South Africa. Where this happens, we take steps to ensure the information is protected in a way that is consistent with POPIA. We will only transfer personal information where it is lawful and where appropriate safeguards are in place.
This policy may be updated from time to time to reflect changes in law, business operations or service arrangements. The latest version will apply from the date it is published. Please check the policy periodically, especially if you are a returning client or have an active project with our team. We aim to keep this policy plain and practical, without unnecessary wording or hidden terms.