EthicAI (Pty) Ltd ("EthicAI", "we", "us") provides AI-powered camera intelligence services to businesses across the Eastern Cape, South Africa. We take privacy seriously — it is in our name. This policy explains what personal information we process, why, and what your rights are under POPIA.
1. Information we collect on this website
- Quote and contact forms: name, mobile/WhatsApp number, email address, business address and site details you provide.
- Direct contact: anything you send us by email, phone or WhatsApp.
We use this information solely to respond to your enquiry, prepare quotes, and provide our services. We do not sell or share it with third parties for marketing.
2. Information processed by deployed camera systems
- Video footage of premises, including images of staff, customers and visitors.
- Vehicle number plates (ANPR) entering or leaving monitored sites.
- Biometric information where facial recognition features are enabled. Under POPIA, biometric information is special personal information and is only processed where a lawful basis exists and the client has configured the feature deliberately.
For deployed systems: the client owns and controls this data. It is never aggregated across clients, never sold, and never accessed by EthicAI without the client's permission. Standard footage retention is [30 days] unless flagged for an incident.
3. Notification and signage
Every EthicAI deployment includes POPIA-compliant signage so that people entering a monitored site are informed that camera monitoring is in operation. Staff at monitored sites are always informed that systems are active and what triggers a flag. Break rooms and similar private spaces are excluded from monitoring by default. Attendance verification, where used, is a disclosed, opt-in module agreed with the client — never covert.
4. Lawful basis for processing
We and our clients rely on: consent (where required, including for special personal information), the legitimate interests of the business in protecting people, property and assets, and compliance with legal obligations (e.g. providing footage to SAPS under lawful process).
5. Storage and security
Footage and event data are stored on secured on-site recorders and/or encrypted cloud infrastructure with access controls. Access is limited to the client and, where authorised, EthicAI support personnel. We maintain appropriate, reasonable technical and organisational measures as required by section 19 of POPIA.
6. Sharing
Personal information is only shared: with the client who owns the deployment; with armed response, SAPS or insurers at the client's instruction or under lawful process; and with service providers (e.g. cloud hosting) bound by confidentiality and POPIA operator obligations.
7. Your rights under POPIA
- Request access to personal information we hold about you;
- Request correction or deletion of inaccurate, irrelevant or unlawfully obtained information;
- Object to processing on reasonable grounds;
- Lodge a complaint with the Information Regulator (South Africa) — inforegulator.org.za.
Staff at monitored sites may request access to footage and flags concerning themselves via their employer (the responsible party); EthicAI supports clients in honouring these requests.
8. Information Officer
Information Officer: [Ainslie Keith Smith]
EthicAI (Pty) Ltd · Registration no: [COMPANY REG NUMBER]
[PHYSICAL ADDRESS], East London, Eastern Cape
Email: keith@ethicai.co.za · Tel: +27 63 601 0348
9. Changes to this policy
We may update this policy from time to time. The current version will always be available at this address with the date of last revision shown above.