Privacy Policy & POPIA Notice

This Privacy Policy is issued by PMO Edge Technology ("PMO Edge", "we", "us", "our"), the provider of the PMO Edge project management office platform (the "Platform") available at pmoedge.tech. It explains how we collect, use, store and protect personal information in accordance with the Protection of Personal Information Act 4 of 2013 ("POPIA").

For any privacy-related query, complaint, or request, contact our Information Officer at support@pmoedge.tech.

We collect the following categories of personal information:

• Account information — name, email address and password (stored securely hashed, never in plain text) when you or your organisation creates a Platform account.
• Platform content — project, programme, RAID, financial, and reporting information that you or your organisation enters into the Platform in the course of using it. Where this includes personal information about your colleagues or third parties (e.g. a project manager or sponsor's name), your organisation remains responsible for having a lawful basis to enter that information, and we process it on your organisation's behalf.
• Contact form submissions — if you use the form on our Contact us page, it opens your own email application with your name, email address and message pre-filled, addressed to us. That form does not transmit or store any data on our servers — we only receive what you actually choose to send from your own email client.
• Direct communications — information you send us directly by email or WhatsApp.
• Technical information — standard web server logs (IP address, browser type, pages visited) and essential authentication session cookies required to keep you signed in. We do not use advertising, tracking, or analytics cookies.

We process personal information to:

• Create and administer your Platform account and authenticate sign-in;
• Provide, operate and support the Platform's features for your organisation;
• Respond to enquiries submitted through our contact channels;
• Maintain the security, integrity and proper functioning of the Platform;
• Comply with legal, regulatory and contractual obligations.

Our lawful basis for this processing is that it is necessary to perform our contract with your organisation, to pursue our legitimate business interests in operating the Platform, or because you have given consent (e.g. by voluntarily submitting an enquiry).

The Platform is hosted using Vercel and Supabase, both of which may process and store data on infrastructure located outside South Africa. Where personal information is transferred across borders in this way, we take reasonable steps to ensure it remains subject to a level of protection that is at least equivalent to POPIA, including relying on our providers' contractual data protection commitments.

Data in transit is encrypted (HTTPS/TLS). Passwords are stored using industry-standard hashing and are never visible to PMO Edge staff. Access to Platform data is restricted through account-based access controls.

We do not sell personal information. We share it only with:

• Our infrastructure providers (Supabase, Vercel) who process data on our behalf strictly to operate the Platform, acting as operators under POPIA;
• Other users within your own organisation's Platform workspace, as configured by your organisation;
• Law enforcement or regulators, where required by law.

We retain account and Platform data for as long as your organisation's account remains active, and for a reasonable period afterward to meet legal, accounting or dispute-resolution requirements, after which it is deleted or anonymised.

Under POPIA, you have the right to:

• Request access to the personal information we hold about you;
• Request correction or deletion of inaccurate or outdated information;
• Object to processing of your information on reasonable grounds;
• Withdraw consent, where processing is based on consent, at any time;
• Lodge a complaint with the Information Regulator of South Africa if you believe your information has been mishandled.

To exercise any of these rights, contact us at support@pmoedge.tech.

We implement reasonable technical and organisational measures to protect personal information against loss, unauthorised access, alteration or disclosure, including encrypted connections, access controls and secure password storage. No system is completely secure, and we will notify affected users and the Information Regulator in the event of a security compromise as required by POPIA.

The Platform is intended for business use by adults acting on behalf of their organisation. We do not knowingly collect personal information from children.

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the effective date above. Continued use of the Platform after changes take effect constitutes acceptance of the updated policy.

Questions, requests or complaints about this Privacy Policy or our handling of your personal information can be directed to our Information Officer:

Email: support@pmoedge.tech
WhatsApp: +27 82 526 9226