Privacy Policy

1. Introduction

Welcome to Data Sanctuary. We are committed to protecting your corporate and personal privacy. This policy outlines how we collect, process, and safeguard your information in strict accordance with the Protection of Personal Information Act (POPIA) of South Africa. As a provider of enterprise-grade offsite backups, data sovereignty and absolute privacy are the foundational principles of our infrastructure.

2. Information We Collect

To provision and manage your dedicated environments, we collect the following:

• Identity & Contact Data: Full name, company name, and work email address.
• Infrastructure Data: Required storage capacity, preferred technology architecture (S3-compatible storage, NextCloud, or UrBackup), and relevant existing network configurations.
• Usage & Analytics Data: Standard website visitor metrics gathered via Google Analytics to optimize our web experience and track engagement.

3. Purpose of Processing

We process your information exclusively for legitimate business purposes, including:

• Providing custom infrastructure quotes and provisioning 1-week free trials.
• Configuring your dedicated, isolated storage environments and secure VPN tunnels.
• Arranging secure physical courier seeding for large initial datasets.
• Fulfilling our obligations under our physical, signed POPIA privacy contracts.

4. Data Sovereignty & Disclosure

Data Sanctuary operates on a strict South African data sovereignty model. We do not utilize shared storage pools. Your backup data is housed in an isolated environment reserved strictly for your organization.

We will never sell, trade, or unlawfully share your personal information. Information is only disclosed to vetted service providers (such as physical courier services) who are bound by stringent POPIA-compliant confidentiality agreements, or when legally mandated by South African authorities.

5. Security Safeguards

We implement robust, enterprise-grade technical and organizational measures to prevent unauthorized access, loss, or destruction of your information. This includes encrypted VPN transit, physical server security, and strict access controls to our Western Cape infrastructure.

6. Data Retention

We retain your information only as long as necessary to fulfill the purposes outlined in this policy, or to comply with South African legal and accounting requirements. Upon termination of service, all corporate and personal data is securely destroyed and de-identified.

7. Your POPIA Rights

As a data subject, you have the right to:

• Request access to the personal information we hold about you.
• Request the correction of inaccurate or outdated information.
• Request the deletion of your personal information.
• Object to the processing of your information on reasonable legal grounds.

8. Contact Us

To exercise any of your rights or for questions regarding this policy, please contact our Information Officer:

Email: hello@datasanctuary.co.za
Location: Western Cape, South Africa