POPIA compliance
Commitment to POPIA
Nexus Desk is committed to processing personal information in accordance with the Protection of Personal Information Act, 2013 (POPIA).
We collect only the information reasonably necessary to provide our services, maintain platform functionality, meet legal obligations, and support our users.
Responsible Party
The operating company of Nexus Desk acts as the Responsible Party for personal information processed through the platform.
The appointed Information Officer is the named director of the operating company.
Contact details for the Information Officer are available in the website footer.
Purpose of Processing
Personal information may be processed to:
- Create and manage user accounts
- Store and organise business records
- Manage projects and employee information
- Generate documents and reports
- Provide support services
- Process subscriptions and payments
- Maintain security and audit records
- Comply with legal and regulatory obligations
User Responsibility
Users are responsible for ensuring that any personal information uploaded to Nexus Desk has been collected, processed, and shared lawfully.
Where users upload employee, contractor, client, supplier, or third-party information, the user remains responsible for obtaining any required permissions or legal authority.
How We Secure Your Information
- Nexus Desk implements reasonable technical and organisational safeguards, including:
- TLS encryption for dashboard and API traffic
- Authenticated access controls
- Private file storage outside publicly accessible directories
- Controlled document delivery through authenticated systems
- Activity logging and audit records
- Restricted administrative access
- Regular backups with controlled retention policies
Access Controls and Auditing
Nexus Desk is designed so that customer documents remain under customer control.
Administrative personnel do not routinely access customer document contents.
Where access is required for security investigations, support, legal obligations, or user-authorised assistance, such access will be restricted and recorded wherever reasonably possible.
Cross-Border Processing
Primary hosting infrastructure is located within South Africa where reasonably practical.
Where third-party service providers are used, including payment processors, email providers, hosting providers, or notification services, Nexus Desk seeks to use providers that maintain appropriate security standards and protections comparable to those required under POPIA.
Data Subject Rights
Subject to POPIA and applicable legal requirements, users may request:
- Access to personal information
- Correction of inaccurate information
- Deletion of information where legally permitted
- Objection to certain forms of processing
- Information regarding how personal information is processed
Requests may be submitted through the contact details provided by Nexus Desk.