Legal
Privacy Policy
This policy explains how StratEQ collects, uses, protects and retains personal information across the public website, StratEQ Reporting and StratEQ Equa.
Who is responsible
STRATEQ (PTY) LTD, registration number 2026/263159/07, is the responsible party for personal information used to operate the website, administer accounts and licences, provide support and maintain the customer relationship. Where a customer uploads information about its clients, employees or other persons into a StratEQ product, the customer ordinarily determines the purpose of that processing and StratEQ processes the information on the customer's documented instructions as an operator. The applicable order or data-processing terms may provide further detail.
Information we process
Depending on how you use StratEQ, we may process account and contact details; organisation, role, licence and module-entitlement information; authentication, invitation and security records; product configuration; trial balances, financial records and reporting inputs; engagement, request, evidence, comment, sign-off and audit-trail data; support correspondence; invoice and payment references; and technical records such as IP address, browser, device, requested pages and timestamps. We do not collect or store payment-card details on this website.
How information is collected
Information may come directly from you, an authorised user, your organisation, a client invited into a workspace, files uploaded to a product, system activity generated through use of the service, or providers supporting authentication, hosting and communications. The public website does not currently use an enquiry form, advertising cookies, behavioural analytics or an online payment facility.
Why we process information
We process information to provide and secure the products; authenticate users and enforce permissions; import, classify, analyse and report on authorised financial data; manage engagements and evidence; respond to enquiries and support requests; administer subscriptions and payments; maintain records and audit trails; prevent misuse; investigate faults and security events; comply with legal duties; and improve reliability and usability. Processing is limited to a lawful and defined purpose, including consent, performance of an agreement, compliance with law, protection of a legitimate interest, or a legitimate interest of StratEQ or a third party where permitted by POPIA.
Customer data and confidentiality
Customers retain their rights in data submitted to the products. StratEQ uses customer data only to provide, secure, support and improve the contracted service, comply with law, or follow the customer's lawful instructions. Access is limited to authorised users and personnel who require it for those purposes. Customers must have the authority to upload personal, financial and engagement information and must configure access appropriately.
Billing and payment records
StratEQ currently issues agreed quotations or invoices and records only the information needed to identify and reconcile a payment, such as the payer, amount, date, currency and bank or invoice reference. The website does not collect payment. We do not ask customers to email card numbers, banking passwords or one-time codes. If an online payment provider is introduced, this policy and the transaction disclosures will be updated before that facility is used.
Operators and sharing
We may use operators and service providers for cloud hosting, database and file storage, authentication, security, email, support and professional administration. They receive only information reasonably required for their service and must process it under appropriate confidentiality, security and data-protection obligations. We may also disclose information where required by law, to protect rights or security, in a business reorganisation, or with the data subject's authority. We do not sell personal information.
Service providers and processing locations
StratEQ Reporting's primary database, authentication and storage environment is hosted through Supabase in Stockholm, Sweden. The public website and product traffic may pass through Cloudflare's global network for delivery, performance and security. Email and professional-service providers may process limited contact or business records needed for their service. A customer-specific order or data-processing agreement may identify additional providers or a different approved hosting arrangement.
Cross-border safeguards
Because these providers may process information outside South Africa, personal information can be transferred across a border. StratEQ permits a cross-border transfer only where section 72 of POPIA or another applicable legal basis allows it, including where the recipient is subject to a law, binding corporate rules or a binding agreement that provides an adequate level of protection; the data subject consents where consent is appropriate; or the transfer is otherwise necessary and lawful. Access, confidentiality, security and onward-processing requirements remain applicable after transfer.
Security and incidents
We use reasonable and appropriate technical and organisational safeguards designed to protect confidentiality, integrity and availability. These may include access controls, authentication, tenant and role restrictions, private storage, encrypted transport, logging, backups and controlled administrative access. No system is risk free. If there are reasonable grounds to believe personal information has been accessed or acquired by an unauthorised person, we will investigate, contain the event and notify the Information Regulator and affected data subjects as required by POPIA.
Licences, invitations and demonstrations
Production access is issued to authorised users by email invitation. We process the invitation address, activation status, organisation membership, role, licence status and permitted modules to create the account and enforce access. Demonstration accounts are separate from production subscriptions and use fictional information. Users must not upload real personal, client or confidential information into a demonstration environment.
Retention and deletion
We retain information only for as long as necessary for the service, the purpose collected, an agreed retention period, legitimate records, dispute resolution, security, backup cycles and legal obligations. When information is no longer required, it is deleted, destroyed or de-identified in a reasonably secure manner. Account closure does not require immediate deletion where retention is legally required or data remains temporarily in protected backups. Customers should export required records before access ends.
Your rights
Subject to POPIA and applicable limitations, a data subject may ask whether StratEQ holds personal information about them; request access, correction or deletion; object to processing; withdraw consent where consent is the basis; request restriction where appropriate; and complain about unlawful processing. A request may require identity verification. Where StratEQ acts only as an operator, we may refer the request to the responsible customer. Submit requests to the Information Officer, STRATEQ (PTY) LTD, at info@strateq.co.za.
Direct marketing
We will send electronic marketing only where permitted. You may opt out using the method in the message or by emailing us. Service, security, billing and account notices are operational communications and may still be sent while you use the product.
Children and special personal information
The products are intended for business use and are not directed at children. Do not upload children's information or special personal information unless it is necessary for a lawful business purpose, your organisation has the required authority, and the applicable product and data-processing arrangements permit it.
Complaints and contact
Privacy and PAIA requests can be addressed to the Information Officer, STRATEQ (PTY) LTD, at info@strateq.co.za. You may also lodge a complaint with South Africa's Information Regulator at POPIAComplaints@inforegulator.org.za. We encourage you to contact StratEQ first so that we can investigate and respond.
Changes to this policy
We may update this policy when the products, providers or legal requirements change. Material changes will be communicated where required. The current version and effective date will remain available on this page.