This Addendum forms part of the Terms and governs our processing of personal information that you (the "Responsible Party") place in the Service, where we (Xee Holdings (Pty) Ltd) act as "Operator" under POPIA.
You determine the purpose and means of processing your customer and ISMS data; we process it only on your documented instructions, which include your configured use of the Service.
We will: process personal information only for the purpose of providing the Service; keep it confidential; apply appropriate technical and organisational security measures; and notify you without undue delay after becoming aware of a personal-information breach affecting your data.
You authorise us to appoint sub-operators (hosting, email, payments) under written terms no less protective than this Addendum. A current list is available on request.
Where personal information is processed outside South Africa, we ensure a lawful basis and adequate protection consistent with POPIA section 72.
We will provide reasonable assistance with data-subject requests and with your security and breach-notification obligations.
On termination we will, at your choice, return or delete the personal information we process on your behalf, save where retention is required by law.