SIRE AI Automation Agency

Responsible Party: SIRE AI Automation Agency (Pty) Ltd

Registration number: 2025/525039/07

Physical address: Durban, KwaZulu-Natal, South Africa

Email: sire.ecomm@gmail.com

WhatsApp: 068 237 7821

Information Officer: Siyabonga Sithole · sire.ecomm@gmail.com

Website: sireaiautomations.co.za

We are registered with the Information Regulator of South Africa in terms of section 55(2) of POPIA.

We may collect your full name, email address, phone number, WhatsApp number, business name and industry, and physical address. We also collect communication records (SMS, WhatsApp, call transcripts where consented to), website usage data (IP address, browser, pages visited), invoice and payment records, and project briefs.

We do not collect special personal information (health, race, religion, biometrics) unless you voluntarily provide it.

We process your information to respond to quote requests and enquiries, provide web design and AI automation services, send invoices and manage payments, communicate about your project, send marketing communications (only with your consent), improve our services, and comply with legal obligations.

We will not use your information for any other purpose without your consent.

We do not sell your personal information. We share it only with:

South African infrastructure (data stays in SA): Our web hosting provider and server infrastructure — both South African companies operating POPIA-compliant data centres.

International operators (cross-border transfer — see below): SMS and voice routing providers (USA), AI language processing (USA), and WhatsApp Business API (USA/Global). Each of these operators has a data processing agreement in place.

We also share information with our accountant for financial compliance, and with law enforcement where required by law.

Some service providers are based outside South Africa. When we transfer your information internationally, we ensure a data processing agreement is in place providing equivalent protection to POPIA. Cross-border processing only occurs for SMS/voice routing, AI language model responses, and WhatsApp message delivery — the minimum necessary for service delivery. Your stored records remain on South African servers.

By engaging our services, you consent to these transfers where required for delivery of those services.

Client project records: 5 years. Invoice and financial records: 5 years (SARS requirement). Quote requests not converted: 12 months. SMS and WhatsApp logs: 24 months. Voice recordings: 90 days. Website analytics: 26 months. Marketing consent records: until withdrawn.

All client data is hosted on South African servers with physical access controls. All websites and communications use SSL/TLS encryption. Our database uses row-level security and access controls. We maintain regular encrypted backups. In the event of a security breach, we will notify you and the Information Regulator as required by section 22 of POPIA.

You have the right to: access your personal information; request correction of inaccurate data; request deletion (subject to legal retention obligations); object to direct marketing at any time; withdraw consent; and lodge a complaint with the Information Regulator.

To exercise these rights, contact our Information Officer: popia@sireaiautomations.co.za. We will respond within 30 days.

Information Regulator: www.inforegulator.org.za · complaints.IR@justice.gov.za · 010 023 5207

We only send marketing communications with your explicit consent. Opt out anytime by replying STOP to any SMS, clicking unsubscribe in any email, or emailing hello@sireaiautomations.co.za.

We may update this policy to reflect changes in law or our practices. Material changes will be communicated via email or a notice on our website.