Privacy Notice

Information handled by Chloé

• Account information, such as name, business email address, role, account status and authentication records.
• Onboarding details, such as employee number, job title, department, company, office location, manager details, start date and requested IT services.
• Asset information, including service tags, device details, assigned and previous users, locations, condition, value, warranty, accessories and change history.
• Operational and security records, including audit events, sign-in activity, password-reset activity, session information, technical logs and IP addresses where recorded for security purposes.
• Support communications and information submitted through approved Chloé workflows.

Why information is used

• To create and manage authorised user accounts and access.
• To process user onboarding and IT service requests.
• To allocate, support, recover, audit and report on company assets.
• To maintain security, investigate faults or suspected misuse and preserve an audit trail.
• To meet legitimate business, employment, contractual, legal and record-keeping requirements.

Chloé is not intended for advertising, profiling for marketing purposes or the sale of personal information.

Access and sharing

Access is limited according to assigned roles and operational need. Information may be available to authorised IT, management, HR or other approved personnel where required for the relevant workflow. It may also be processed by approved hosting, email, warranty or technical service providers where necessary to operate or support the platform.

Information should not be disclosed outside authorised business processes unless required by law, approved policy or a properly authorised request.

Retention and accuracy

Records are retained for as long as reasonably needed for active operations, support, audit, security, employment, contractual and legal requirements. Retention periods may differ by record type. Records may be archived, corrected, restricted or deleted when no longer required and where deletion is legally and operationally appropriate.

Users and requestors must provide accurate, relevant and current information. Corrections should be reported through the Contact page.

Your privacy choices and rights

Subject to applicable law and identity verification, a person may ask whether relevant personal information is held, request access or correction, object to certain processing, or request deletion where legally appropriate. Some records may need to be retained for security, audit, contractual or legal reasons.

South Africa's Protection of Personal Information Act 4 of 2013 sets minimum requirements for processing personal information. The official Act is available from the South African Government.

Cookies and session data

Chloé uses essential session and security data to keep users signed in, enforce access controls and protect requests. The platform is not intended to use third-party advertising cookies. Blocking essential session cookies may prevent secure sign-in or other protected functions from working.