Legal

Privacy policy

Last updated: 27 August 2026

Data controller

Workspace Cedarpoint (Pty) Ltd, operating from 1201 Masaka Street, Ekurhuleni, 1550, South Africa, is the responsible party for personal information collected through this website and related client work. Contact: hello@workspace-cedarpoint.click, 0113628812.

Information we collect

We collect enquiry details you submit (name, email, message, assessment interest), correspondence records, and engagement information needed to perform vulnerability scanning (technical contacts, asset lists, credentials shared through agreed channels). Server logs may record IP address, browser type, and pages visited.

Purposes

We use personal information to respond to enquiries, deliver assessments, invoice for services, improve site reliability, and meet legal obligations. We do not sell personal information.

Legal bases

Processing is based on steps prior to a contract, performance of a contract, legitimate interests in operating a professional practice, and compliance with South African law including the Protection of Personal Information Act (POPIA) where applicable.

Retention

Enquiry records are kept up to twenty-four months unless a client relationship continues. Engagement files, including reports and scope letters, are retained for at least five years for professional and legal reference, then securely deleted or anonymised unless a longer period is required.

Sharing

We may share information with infrastructure providers that host email or this website, professional advisers, and—when you instruct us—your MSP or other parties named in an engagement. Processors are expected to protect information appropriately.

International transfers

If a processor stores data outside South Africa, we take reasonable steps to ensure appropriate protection consistent with POPIA, such as contractual safeguards with the recipient.

Security

We apply access controls, encrypted transport where available, and need-to-know limits for credentials and findings. No method of transmission is perfectly secure; please use the channels we specify for sensitive materials.

Your rights

Subject to POPIA, you may request access to, correction of, or deletion of personal information we hold, or object to certain processing. Contact us using the details above. You may also lodge a complaint with the Information Regulator of South Africa.

Cookies

See our cookies policy for details on essential and analytics cookies and how to manage preferences.