Data Processing Terms

In respect of personal information about a customer's own contacts that the customer enters into KENEK, the customer is the responsible party and KENEK acts as an operator (processor) for the purposes of POPIA. KENEK processes such information only on the customer's documented instructions through the Service.

KENEK will process customer personal information only as necessary to provide the Service and as instructed by the customer through the platform's functionality. KENEK will not process it for its own purposes except as permitted by law.

KENEK ensures that personnel authorised to process customer personal information are subject to confidentiality obligations.

KENEK maintains reasonable technical and organisational security measures appropriate to the risk, including access controls and isolation of customer workspaces.

KENEK uses subprocessors (operators) such as hosting, authentication and email providers to deliver the Service. KENEK remains responsible for ensuring subprocessors provide sufficient guarantees and are bound by written obligations consistent with these terms.

Where subprocessors process data outside South Africa, KENEK takes reasonable steps to ensure appropriate safeguards consistent with POPIA.

KENEK will notify the customer of a personal-information compromise affecting customer data without undue delay, and will take reasonable steps to assist with any required reporting.

Where a data subject (e.g. one of the customer's clients) makes a request that KENEK receives, KENEK will, where reasonably able, refer the request to the customer, who remains the responsible party for responding.

Customer personal information is retained for the duration of use and any applicable legal/retention period, after which it may be deleted or anonymised.

On termination, the customer may export its data. KENEK will delete or anonymise customer personal information after a reasonable post-termination period, subject to legal retention obligations.