Privacy Policy

1. Who we are

CloudFlow (Pty) Ltd ("CloudFlow", "we", "us") is a managed IT, cybersecurity and Microsoft 365 services provider headquartered in Somerset West, South Africa, serving clients worldwide. This policy explains how we handle personal information when you visit our website, request a service, register for training, or otherwise interact with us.

2. Information we collect

• Contact details you submit through our forms: name, email, phone, company.
• Account data for the client portal: authentication identifiers and session metadata.
• Service data required to deliver managed IT and security services under a signed agreement.
• Usage data: IP address, device, browser, pages viewed, and referrer, collected via cookies and analytics.

3. How we use your information

• To respond to enquiries and deliver requested services.
• To send transactional emails such as confirmations, invoices and security notifications.
• To improve our website, products and customer experience.
• To comply with legal, tax and regulatory obligations.

4. Lawful basis

We process personal information on the basis of your consent, the performance of a contract, our legitimate interests in operating and securing our services, and compliance with applicable law — including the Protection of Personal Information Act (POPIA) in South Africa, the GDPR in the European Union and United Kingdom, and equivalent privacy laws elsewhere.

5. International transfers

We use trusted infrastructure providers (including Microsoft Azure and Cloudflare) that may process data in regions outside your country. Where required, we rely on Standard Contractual Clauses or equivalent safeguards.

6. Retention

We keep personal information only for as long as needed for the purpose it was collected, or as required by law. Marketing contacts can opt out at any time via the unsubscribe link in our emails.

7. Your rights

You have the right to access, correct, delete, restrict, port or object to the processing of your personal information, and to lodge a complaint with your data protection authority. To exercise any of these rights, email privacy@cloudflow.co.za.

8. Security

We apply technical and organisational measures aligned with ISO 27001 and CIS Controls, including encryption in transit and at rest, role-based access, MFA, logging, and continuous monitoring.

9. Cookies

We use essential cookies to operate this site and optional analytics cookies to understand usage. You can control cookies through your browser settings.

10. Contact

CloudFlow (Pty) Ltd, Paardevlei Lifestyle Estate, Unit 617, Somerset West, Western Cape 7130, South Africa. Email: privacy@cloudflow.co.za.