Privacy Policy

1. Introduction

FEB Consulting CC ("we", "us", "our") operates Logable, an industrial IoT monitoring and automation platform. We are committed to protecting and respecting your privacy in accordance with the Protection of Personal Information Act 4 of 2013 (POPIA) and other applicable data protection laws in the Republic of South Africa.

This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our platform, website, and services. By using our services, you consent to the data practices described in this policy.

2. Information We Collect

2.1 Personal Information

We collect personal information that you voluntarily provide to us when you:

• Register for an account: Name, email address, phone number, company name, job title
• Use our services: Device data, sensor readings, operational parameters, system configurations
• Contact us: Communication preferences, support inquiries, feedback
• Subscribe to services: Billing information, payment details, subscription preferences

2.2 Automatically Collected Information

When you access our platform, we automatically collect certain information, including:

• Usage Data: Log files, access times, pages viewed, time spent on pages
• Device Information: IP address, browser type, operating system, device identifiers
• IoT Device Data: Sensor readings, device status, performance metrics, operational data
• Location Data: General geographic location (country/city level) for service optimization

2.3 Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience. You can manage your cookie preferences through your browser settings or our cookie consent manager.

3. How We Use Your Information

3.1 Primary Purposes

We process your personal information for the following purposes:

• Service Provision: To provide, operate, and maintain our IoT monitoring platform
• Account Management: To create and manage your user account and subscription
• Communication: To send you service-related notifications, updates, and support responses
• Analytics: To analyze device performance, system optimization, and service improvement
• Security: To detect, prevent, and address technical issues and security threats
• Compliance: To comply with legal obligations and regulatory requirements

3.2 Legal Basis for Processing (POPIA Compliance)

We process your personal information based on the following lawful grounds:

• Consent: Where you have given clear consent for specific processing activities
• Contract Performance: To fulfill our contractual obligations to provide services
• Legal Obligation: To comply with South African laws and regulations
• Legitimate Interest: For business operations, security, and service improvement

4. Information Sharing and Disclosure

4.1 Third-Party Service Providers

We may share your information with trusted third-party service providers who assist us in operating our platform:

• Cloud Infrastructure: Secure hosting and data storage providers
• Payment Processing: PCI-compliant payment processors for billing
• Analytics Services: Performance monitoring and analytics tools
• Communication Services: Email and SMS service providers

4.2 Legal Requirements

We may disclose your information when required by South African law or when we believe disclosure is necessary to:

• Comply with legal process or government requests
• Protect our rights, property, or safety
• Protect the rights, property, or safety of our users or others
• Investigate fraud or security issues

4.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your personal information may be transferred as part of the transaction, subject to the same privacy protections outlined in this policy.

5. Data Security and Protection

5.1 Security Measures

We implement appropriate technical and organizational measures to protect your personal information:

• Encryption: Data encryption in transit and at rest using industry-standard protocols
• Access Controls: Role-based access controls and multi-factor authentication
• Network Security: Firewalls, intrusion detection, and secure network architecture
• Regular Audits: Security assessments and vulnerability testing
• Employee Training: Regular security awareness training for all staff

5.2 Data Breach Response

In the unlikely event of a data breach, we will notify affected users and the South African Information Regulator within 72 hours as required by POPIA, and take immediate steps to contain and remediate the breach.

6. Data Retention and Deletion

6.1 Retention Periods

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this policy:

• Account Data: Retained while your account is active and for 7 years after closure for legal compliance
• IoT Device Data: Retained for the duration of your subscription plus 2 years for historical analysis
• Communication Records: Retained for 3 years for support and legal purposes
• Financial Records: Retained for 7 years in accordance with South African tax law

6.2 Data Deletion

Upon expiration of retention periods or upon your request (where legally permissible), we will securely delete your personal information using industry-standard data destruction methods.

7. International Data Transfers

Your personal information may be transferred to and processed in countries other than South Africa. When we transfer data internationally, we ensure appropriate safeguards are in place, including:

• Adequacy decisions by the South African Information Regulator
• Standard data protection clauses approved by relevant authorities
• Binding corporate rules for transfers within our corporate group
• Certification schemes and codes of conduct

8. Your Rights Under POPIA

As a data subject under POPIA, you have the following rights:

9. Cookies and Tracking Technologies

9.1 Types of Cookies

We use the following types of cookies:

• Essential Cookies: Required for the platform to function properly
• Performance Cookies: Help us understand how you interact with our platform
• Functional Cookies: Remember your preferences and settings
• Marketing Cookies: Used to deliver relevant advertisements (with your consent)

9.2 Managing Cookies

You can control and manage cookies through your browser settings or our cookie preference center. Note that disabling certain cookies may affect the functionality of our platform.

10. Children's Privacy

Our services are not intended for children under the age of 18. We do not knowingly collect personal information from children under 18. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.

If we become aware that we have collected personal information from a child under 18 without parental consent, we will take steps to remove that information from our servers.

11. Contact Information and Information Officer

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by:

• Posting the updated policy on our website with a new "Last Updated" date
• Sending you an email notification (if you have provided your email address)
• Displaying a prominent notice on our platform

Your continued use of our services after any changes to this Privacy Policy constitutes your acceptance of the updated policy.