1. Who We Are (Responsible Party)

ControlTemp ("we", "us") is the responsible party for personal information collected through this website and the ControlTemp monitoring service. We are based in Durban, KwaZulu-Natal, South Africa.

Information Officer contact: info@controltemp.co.za.

2. Information We Collect

2.1 Account and Business Information

Data	Why we collect it	Legal basis (POPIA)
Company name, contact person name	Account identification and invoicing	Contractual necessity
Email address	Account access, service notifications, alarm alerts	Contractual necessity
Phone / WhatsApp number	Support contact and SMS alarm delivery	Contractual necessity
Province and town	Multi-site filtering and support	Contractual necessity
Payment information	Processing subscription fees	Contractual necessity

2.2 Device Telemetry (Operational Data)

Your ControlTemp Hardware continuously sends temperature readings, GPS coordinates, power status, signal quality, and device health data to our servers. This data belongs to you (see Section 7 of our Terms of Service). It may incidentally include GPS locations of your premises or vehicles.

2.3 Website Usage Data

When you visit our website we collect standard server log data including IP address, browser type, pages visited, and time of access. This is used solely for security monitoring and aggregate analytics. We do not use third-party analytics tracking scripts.

2.4 Contact Enquiry Data

If you submit our contact form, we collect your name, company, email, phone number, province, and the content of your message. This is stored in our database and used only to respond to your enquiry.

3. How We Use Your Information

• Providing and operating the temperature monitoring service
• Delivering SMS alarm notifications and dashboard alerts
• Sending service-related communications (invoices, maintenance notices, firmware update notifications)
• Responding to support enquiries
• Improving the reliability and features of the service
• Complying with South African legal and regulatory obligations

We do not use your personal information for marketing to third parties, and we do not sell your data under any circumstances.

4. Who We Share Data With

We only share personal information with the following categories of third parties, strictly as necessary to provide the service:

Third Party	Purpose	Location
Africa's Talking	SMS alarm and notification delivery	Kenya (adequately regulated)
Axxess / cPanel hosting	Web server and database hosting	South Africa

We do not share your information with advertisers, data brokers, or any other parties not listed above. We will disclose information to law enforcement or government bodies only when required by a valid South African court order or legal process.

5. Data Retention

• Temperature and device telemetry: retained for 12 months from the date of recording, then automatically deleted.
• Account information: retained for the duration of your subscription plus 5 years after termination for accounting and legal purposes.
• Contact enquiries: retained for 2 years.
• Server logs: retained for 90 days.

6. Security

We implement the following technical and organisational measures to protect your personal information:

• HTTPS encryption for all web traffic (TLS 1.2+)
• API key authentication for all device-to-server communications
• Bcrypt password hashing (cost factor 12) for all user accounts
• Session fixation protection and secure, HTTP-only cookies
• Database credentials stored outside the web root
• Access controls limiting dashboard data to the account owner

No method of transmission over the internet is 100% secure. We will notify you without undue delay if we become aware of a data breach that is likely to result in harm to you, as required by POPIA.

7. Your Rights Under POPIA

As a data subject under the Protection of Personal Information Act, you have the right to:

• Access — request a copy of the personal information we hold about you
• Correction — request that inaccurate or incomplete information be corrected
• Deletion — request that we delete your personal information (subject to our legal retention obligations)
• Objection — object to the processing of your personal information in certain circumstances
• Complaint — lodge a complaint with the Information Regulator of South Africa

To exercise any of these rights, email us at info@controltemp.co.za. We will respond within 30 days.

The Information Regulator of South Africa can be contacted at: www.justice.gov.za/inforeg/

8. Cookies

We use only strictly necessary session cookies to maintain your logged-in state on the dashboard. We do not use advertising, tracking, or analytics cookies. See our Cookie Policy for full details.

9. Children

Our Service is intended for business use only and is not directed at children under 18. We do not knowingly collect personal information from minors.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you by email before material changes take effect. The "last updated" date at the top of this page will always reflect the current version.

11. Contact

For privacy-related enquiries or to exercise your POPIA rights, contact our Information Officer at info@controltemp.co.za.

---

ControlTemp · Durban, KwaZulu-Natal, South Africa · Last updated 1 June 2025