Privacy Policy

Executive Solutions (Pty) Ltd — Website Privacy Policy
Last updated: 29 September 2026

1. Who we are and what this policy covers

Executive Solutions (Pty) Ltd ("ES", "we", "us", "our") is a South African IT managed services and cybersecurity company based in Linbro Park, Johannesburg. We respect your privacy and process personal information in line with the Protection of Personal Information Act 4 of 2013 ("POPIA").

This policy explains how we collect, use, share and protect personal information when you visit www.es.co.za (the "Website"), contact us through it, or subscribe to our communications. It does not cover personal information we process under a signed service agreement with a client; that processing is governed by the relevant contract and data processing terms.

2. Our Information Officer

ES is the responsible party for personal information collected through the Website. Our Information Officer is Deseree ‘O Neill who can be reached at:

  • Email: info@es.co.za
  • Telephone: +27 11 608 3000
  • Address: B5 The Stables, 13 3rd Road, Linbro Park, 2065

3. Personal information we collect

We collect only what we need for the purposes set out in this policy:

  • Information you give us: name, surname, job title, company name, email address, telephone number, and anything you include in a message, quote request, support query or job application.
  • Information collected automatically: IP address, browser and device type, pages visited, time spent on pages, referring website and approximate location, collected through cookies and similar technologies (see section 8).
  • Information from third parties: business contact details from public sources, event partners or referrals, where lawful to do so.

The Website is aimed at businesses. We do not knowingly collect personal information from children, and we do not intend to collect special personal information (such as health, religious or biometric information) through the Website. Please do not submit such information in contact forms.

4. Why we use your personal information

We process personal information for the following purposes, each with a lawful basis under section 11 of POPIA:

Purpose Lawful basis
Responding to enquiries, quote requests and support queries Your consent, and steps to conclude a contract at your request
Providing and managing services you have contracted us for Performance of a contract
Sending newsletters, security advisories and event invitations Your consent, or our legitimate interest for existing customers (with an opt-out in every message)
Running, securing and improving the Website, including analytics Our legitimate interest
Processing job applications Your consent, and steps to conclude an employment contract
Meeting legal, tax, regulatory and audit obligations Compliance with the law
Protecting our rights, and detecting and preventing fraud or cyber attacks Our legitimate interest

We will not use your personal information for a purpose that is incompatible with the reason it was collected without telling you first.

5. Direct marketing

We send electronic direct marketing only in line with section 69 of POPIA: to people who have opted in, or to existing customers about similar ES products and services. Every marketing message includes a simple way to unsubscribe, and you can opt out at any time by emailing info@es.co.za We do not sell or rent personal information to anyone.

6. Who we share personal information with

We share personal information only where needed for the purposes above, with:

  • ES group entities and staff who need it to respond to you or deliver services;
  • service providers who act as operators on our behalf, such as website hosting, CRM, email and analytics providers, under written agreements that require them to keep the information confidential and secure;
  • technology vendors and distributors, where needed to quote on or supply a product you have asked for;
  • professional advisers, auditors and insurers; and
  • regulators, courts or law enforcement, where required by law.

7. Cross-border transfers

When we transfer personal information across borders, we do so only in line with section 72 of POPIA: to a country or recipient bound by adequate data protection laws or binding agreements, with your consent, or where the transfer is needed to perform a contract with you.

8. Cookies and similar technologies

Cookies are small text files stored on your device. The Website uses:

  • Essential cookies, needed for the Website to function and stay secure;
  • Analytics cookies, which help us understand how visitors use the Website; and
  • Marketing cookies, if any, which measure the effectiveness of our campaigns.

Non-essential cookies are set only with your consent through our cookie banner. You can change your choice at any time by adjusting your browser settings, although some parts of the Website may then not work as intended.

9. How we protect your information

As a cybersecurity company, we apply the same care to our own data that we apply for our clients. We use appropriate, reasonable technical and organisational measures to protect personal information against loss, damage, and unauthorised access or disclosure, in line with section 19 of POPIA. These include encryption in transit, access controls, multi-factor authentication, monitoring, and staff confidentiality obligations.

If we have reasonable grounds to believe that your personal information has been accessed or acquired by an unauthorised person, we will notify you and the Information Regulator as required by section 22 of POPIA.

10. How long we keep your information

We keep personal information only for as long as needed for the purpose it was collected, or as required by law, contract or our legitimate business needs. For example, enquiry records are kept for 24 months after our last contact with you, and client records for the period required by tax and company law. After that, information is securely deleted, destroyed or de-identified.

11. Your rights

  • Under POPIA you have the right to:

    • ask whether we hold personal information about you, and request access to it;
    • ask us to correct, update or delete inaccurate, outdated or unlawfully obtained information;
    • object to processing based on our legitimate interests, and to direct marketing at any time;
    • withdraw your consent where processing is based on consent; and
    • lodge a complaint with the Information Regulator.
    •  

    To exercise these rights, contact our Information Officer at info@es.co.za 


    Information Regulator (South Africa)

    • Website: https://inforegulator.org.za
    • Complaints: POPIAComplaints@inforegulator.org.za

12. Links to other websites

The Website may link to vendor, partner or social media sites. We are not responsible for the privacy practices of those sites, and we encourage you to read their privacy policies.

13. Changes to this policy

We may update this policy from time to time. The latest version will always be on this page with its "Last updated" date. Where changes are material, we will take reasonable steps to let you know.