Legal

POPIA Notice

Last updated: 17 June 2026

This notice describes how CloudPrime (Pty) Ltd("CloudPrime") processes personal information in compliance with the Protection of Personal Information Act 4 of 2013 (POPIA). It is issued under Section 18 of POPIA.

1. Information Officer

Our Information Officer is appointed under Section 17 of POPIA. Contact details:

  • Email: info@cloudprime.co.za (subject: "For the Attention of the Information Officer")
  • Phone: +27 (0)10 110 8466
  • Address: Johannesburg, South Africa

2. Categories of personal information we process

  • Contact details: Name, email, phone, firm name, role — collected from demo access requests, lead forms, and the chat widget.
  • Customer data: Client information, case details, documents, and communications that customers upload to LexPrime OS.
  • Technical data: IP addresses, browser type, server logs.
  • Special personal information: We do not process special personal information (as defined in Section 26 of POPIA) unless you voluntarily provide it through the chat widget or upload it as customer data.

3. Purposes of processing

  • Responding to demo access requests and sales enquiries.
  • Providing the LexPrime OS service to customers.
  • Security monitoring and fraud prevention.
  • Compliance with legal obligations.

4. Lawful basis

We process personal information under the following conditions in Section 11 of POPIA:

  • Consent (you provided it via a form)
  • Performance of a contract (you are a customer)
  • Compliance with a legal obligation
  • Legitimate interest (security, fraud prevention)

5. Data subjects' rights

Under Section 23 of POPIA, data subjects have the right to:

  • Be notified that their personal information is being processed
  • Request access to their personal information
  • Request correction or deletion of personal information
  • Object to processing
  • Withdraw consent
  • Lodge a complaint with the Information Regulator

6. Data residency and cross-border transfers

All personal information is stored on servers located in South Africa. We do not transfer personal information outside of South Africa without explicit consent. AI inference runs locally via Ollama — no client data is sent to external AI APIs.

7. Security measures

We implement the technical and organisational measures required by Section 19 of POPIA, including: encrypted password storage, two-factor authentication, role-based access control, audit logging, regular security updates, and SA-based hosting. See our Security & Compliance page for details.

8. Data retention

We retain personal information only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. See our Privacy Policy for specific retention periods.

9. Direct marketing

We do not send direct marketing communications without your consent. After a demo request, we send one follow-up email — you can opt out at any time. We do not sell or rent your personal information to third parties for marketing.

10. Data breach notification

In the event of a data breach as defined in Section 22 of POPIA, we will notify the Information Regulator and affected data subjects as soon as reasonably possible after the breach is discovered, in accordance with POPIA requirements.

11. Complaints

If you believe we have processed your personal information in violation of POPIA, you may lodge a complaint with the Information Regulator:

12. Our honest position

LexPrime OS has a POPIA-aware architecture— not formal POPIA certification. The technical measures POPIA requires are implemented, but full compliance also requires firm-level policies that are our customers' responsibility. Read more on our Security & Compliance page.