Privacy Policy.

Who we are and what this policy covers

Nexus Core Technologies is the registered trading brand of Goldenaxis Technologies (Pty) Ltd, a private company duly incorporated under the laws of South Africa (Company Registration Number: 2026/533058/07). References in this document to "Nexus", "we", "us", or "our" refer to Goldenaxis Technologies (Pty) Ltd t/a Nexus Core Technologies.

We provide enterprise technology and infrastructure solutions throughout KwaZulu-Natal and remotely across South Africa. Our registered correspondence address is 4B, 15 Erasmus Road, Margate, KwaZulu-Natal, 4275 (client consultations are arranged by appointment; not a public walk-in counter).

This policy details how we collect, store, handle and safeguard personal information relating to website visitors, prospective and active clients, vendors, and individuals who communicate with us via digital forms, email, telephone, or advertising campaigns (including Google Ads).

Where Nexus determines the purpose and means of personal information processing, Nexus functions as the responsible party under POPIA. Where we maintain, process or host customer data strictly in accordance with client instructions under a service agreement, Nexus acts as an operator.

Personal information we may collect

• Contact and identity details: Full name, organisation name, job title, email address, and direct telephone contact numbers.
• Location details: Physical site address, business address, town/city, or coordinates required for solar assessments, network installations, or on-site hardware deployments.
• Enquiry and technical specifications: Selected service areas, system architecture requirements, architectural notes, RFQs, and related project documentation.
• Client and transaction details: Invoices, payment confirmations, service agreements, billing contact details, and transaction history.
• Technical metrics and network telemetry: Public IP addresses, timestamp logs, device information, browser agents, and server diagnostics generated for cyber-defense and security audit purposes.
• Lead generation data: Answers and contact fields submitted through verified Google Ads lead forms and website quotation modules.

We request that prospective clients refrain from transmitting sensitive personal data—such as South African ID/passport numbers, passwords, health data, or banking credentials—via unencrypted enquiry fields or public advertising forms.

Where information comes from

We acquire personal information primarily direct from you when you submit a quotation request, engage our engineers, call or email our offices, or interact with our digital infrastructure. We may also receive information from an authorized representative of your organisation, referred commercial clients, or third-party service providers acting on your explicit instruction.

Our server infrastructure automatically generates technical audit logs upon visit for intrusion detection, security analysis, and service reliability.

Why we process personal information

• To evaluate technical scopes, deliver formal quotations, and fulfill contracted software, network, solar, and automation projects.
• To provide ongoing technical support, system maintenance, and operational updates regarding active service contracts.
• To manage accounting records, tax filings, legal obligations, and B-BBEE compliance documentation.
• To protect enterprise digital assets, detect cyber threats, prevent abuse, and safeguard server integrity.
• To send relevant product updates and service advisories where legitimate business interests or explicit consents exist under POPIA.

If personal data must be processed for an alternative purpose materially divergent from the original purpose, we evaluate statutory requirements and obtain necessary consents prior to execution.

Lawful processing and your choices

We process personal information strictly within the lawful provisions of Chapter 3 of POPIA, including: explicit consent, steps required to conclude or perform a client contract, statutory legal compliance, the protection of legitimate data subject interests, or the legitimate commercial interests of Nexus Core Technologies.

Supplying project details via our website or quote form is voluntary. However, failure to provide accurate contact information or essential technical requirements may preclude us from issuing an accurate assessment or fulfilling your quotation request.

Google Ads and lead-form enquiries

When you complete a Nexus lead form within Google Ads or YouTube, we receive the fields you choose to supply (such as name, email, phone number, city, and selected service). We process these details solely to contact you, understand your deployment scope, and prepare your quotation. Submitting a quotation request does not enroll you in unsolicited third-party marketing lists.

Google maintains and processes advertising forms under its own privacy terms. You can review Google's Privacy Policy for full details. Once ingested into Nexus Core Technologies' infrastructure, your lead details are treated under this policy.

Lead submissions are processed only by vetted personnel and securely logged in our protected management database. We do not sell, rent, or trade lead data to third-party data brokers under any circumstances.

Sharing information and international processing

We disclose information solely to authorized operators and service partners strictly necessary to fulfill operations—such as secure cloud infrastructure providers, telecommunications carriers, payment processors, and professional legal/financial advisers. All operators are bound by confidentiality, POPIA-compliant data protection agreements, and security mandates.

Where cloud infrastructure or software systems rely on offshore server environments (e.g., global hyperscalers such as AWS, Google Cloud, or Microsoft Azure), cross-border transfers are governed by Section 72 of POPIA, ensuring recipient jurisdictions maintain equivalent data privacy laws or binding enterprise contractual protections.

How long we keep information

Personal information is retained only as long as required to achieve the purpose for which it was acquired, or as mandated by applicable South African statutory retention requirements (including the Companies Act, 2008 and the Tax Administration Act, 2011, which require accounting and contract records to be maintained for specified multi-year periods).

Upon expiry of lawful retention requirements, data is permanently erased, securely purged from databases, or de-identified in an irreversible manner.

Protecting your information

In accordance with Section 19 of POPIA, Nexus Core Technologies implements comprehensive technical and organisational security measures. These safeguards include modern cryptographic protocols (TLS/SSL encryption in transit, hashed credentials), least-privilege administrative access controls, CSRF token validation, input sanitization, automated SQL injection prevention, and secure database sandboxing.

In the unlikely event of a verified data compromise, we execute our incident response framework and report the incident to both affected data subjects and the Information Regulator in compliance with Section 22 of POPIA.

Automatically collected technical data

When you interact with our website or digital infrastructure, our servers and network security tools automatically collect specific technical data. This passive collection is based on our legitimate interest in maintaining enterprise security, optimizing network performance, and understanding how our digital services are utilized.

Information collected automatically includes:

• Device & Network Identifiers: Your public IP address, browser type and version, operating system details, and unique device fingerprints.
• Usage Telemetry: The specific pages you visit, time spent on those pages, referral URLs (the site that directed you to us), and interaction timestamps.
• Server Audit Logs: Access logs, request headers, error reports, and security audit trails generated by our firewall and hosting infrastructure to prevent unauthorized access or DDoS attacks.

Cookies and Web Beacons:

Our website utilizes essential technical mechanisms (such as short-lived session cookies) strictly required to render pages securely and handle quotation inquiries safely. These essential cookies authenticate form tokens and prevent automated spam or cross-site request forgery (CSRF).

Optional measurement tags and analytics cookies (such as Google Analytics or Google Ads measurement) are loaded only if you provide explicit consent via our Cookie Preference Banner. If you decline, all non-essential measurement scripts are blocked entirely. Personal form content and quotation details are never transmitted into tracking tags.

Data collected via our web crawler

Nexus Core Technologies operates a specialized, automated web crawler (identified in server logs as NexusLeadBot) designed to discover publicly available information regarding businesses, organizations, and public tenders that may benefit from our commercial services.

In compliance with POPIA's guidelines on processing information derived from the public domain, we adhere to the following principles:

• B2B Focus: We strictly target Business-to-Business (B2B) operational information, such as registered corporate names, public URLs, and general business contact endpoints (e.g., info@ or sales@ addresses).
• No Sensitive Personal Data: We intentionally avoid harvesting private personal information of individuals, including residential addresses, private phone numbers, or ID numbers.
• Technical Politeness: Our crawler strictly obeys robots.txt directives and respects standard server rate-limiting to ensure no disruption to targeted websites.

If you wish to instruct our crawler to ignore your website, or if you wish to exercise your right to have collected public data permanently removed from our internal records, please view our detailed Web Crawler Notice for instructions and direct contact methods.

Direct marketing and opting out

Nexus conducts direct electronic marketing strictly in compliance with Section 69 of POPIA. Responding directly to your requested quote or consultation is distinct from marketing list enrollment. You have the right to opt out of promotional communications at any point by emailing info@nexuscoretechnologies.co.za with the subject "Marketing Opt-Out".

Your privacy rights under POPIA

Under Chapter 3 of POPIA and the Promotion of Access to Information Act (PAIA), you hold statutory rights regarding your personal information, including:

• The right to request confirmation of whether we hold personal information relating to you.
• The right to request access to your recorded personal information.
• The right to request correction, amendment, or destruction of inaccurate, outdated, or unlawfully obtained records.
• The right to object on reasonable grounds to the processing of your personal information.
• The right to lodge a formal complaint with the Information Regulator of South Africa.

To exercise any of these rights, contact our registered Information Officer using the contact details in Section 16 below.

Children and sensitive information

Nexus Core Technologies provides commercial and enterprise business solutions. Our digital platforms and quote forms are directed exclusively at adult decision-makers acting for themselves or their corporate entities. We do not knowingly solicit or collect personal details from minors under 18 years of age.

Changes to this policy

We periodically review and update this privacy policy to reflect infrastructure enhancements, service additions, and statutory developments. The latest version is consistently hosted on this page with an updated effective date and version reference.

Contact our Registered Information Officer

In terms of Section 55(2) of the Protection of Personal Information Act, 2013 (POPIA) and the Promotion of Access to Information Act, 2000 (PAIA), Nexus Core Technologies' Information Officer is officially registered with the Information Regulator of South Africa.