Privacy policy

IBER Technologies Systems™, a division of Iber Investments (Pty) Ltd (registration 2020/737200/07) · Phalaborwa, Limpopo, South Africa · Effective 1 October 2026

1. Who we are

IBER Technologies Systems™ designs, builds and supports business branding, websites, apps and systems, including the IBER Municipal Management System™, IBER TransSamples™, IBER OpsFlow™, IBER VibPredict™ and the IBER School Management System™. In this policy, "we" and "us" means IBER Technologies Systems™ and Iber Investments (Pty) Ltd.

Our Information Officer is Gift Duncan, Director, gift@ibertechsystems.co.za, +27 66 377 8245. General enquiries: info@ibertechsystems.co.za.

2. Two roles

• Our own website and enquiries. We are the responsible party for the details you send us through this website or by e-mail or phone.
• The systems we run for our clients. When a client (for example a municipality, a school or a company) uses one of our systems, the client is the responsible party for the personal information in it, and we are its operator under a written agreement (POPIA sections 20 and 21). We process that information only on the client's instructions, for the purpose of the service, and never for our own purposes.

3. What we collect through this website

When you send an enquiry: your name, company or municipality, phone number, e-mail address and your message. Our server also records the internet address of the request for 1 hour, only to stop abuse (no more than 5 enquiries per hour). We do not use advertising trackers, we do not sell or share your details, and this website sets no cookies.

We use your details only to reply to you, prepare a quote and, if you become a client, to deliver and support the work. Enquiries are kept for up to 2 years unless you become a client.

4. Device management data (Android Enterprise)

Some of our systems, including the IBER Municipal Management System™, include device management through Google's Android Management API. It manages company-owned phones and tablets that the client issues to its own staff (for example meter readers and maintenance technicians). It is never used on personal phones.

• What is processed: the device's make, model, serial and hardware identifiers, operating-system and security-patch level, the installed work apps and their versions, the policy applied, compliance status, the time of the last contact, and the commands sent to the device (lock, reboot, reset the screen PIN, lost mode, wipe), each with the person who sent it, the time and the reason. Location is used by the work apps to prove where work was done (for example the GPS position of a meter reading) and, in lost mode, to find a lost device.
• Why: to keep the client's devices and the personal information on them secure, to install and update the work apps, and to lock or wipe a lost or stolen device.
• Who sees it: only the client's authorised administrators, and our support engineers when the client asks for help. Every action is recorded in the system's audit trail.
• Where it is kept: in the client's own system, hosted in South Africa, and in the client's Android Enterprise with Google, under Google's terms.
• How long: while the device is enrolled, and then as the client's records-retention policy requires. A retired device is removed from management and wiped.

We do not use device management data for advertising, profiling or any purpose other than securing and managing the client's devices.

5. How we protect information

• Encrypted connections (HTTPS / TLS) for all traffic; encrypted storage on field devices and encrypted backups.
• Each person signs in with their own pass key; two-step sign-in for administrators; role-based access, so each person sees only what their role allows.
• A tamper-evident audit trail of every sign-in, change and approval; automatic screen lock; remote lock and wipe of lost devices.
• Hosting in South Africa; least-privilege access for our own engineers.

6. Security compromises

If we have reason to believe that personal information has been accessed or acquired by an unauthorised person, we notify the responsible party (our client) immediately, and, where we are the responsible party, the Information Regulator and the people affected as soon as reasonably possible, as section 22 of POPIA requires.

7. Your rights

You may ask what personal information we hold about you, ask us to correct or delete it, or object to its processing. Write to gift@ibertechsystems.co.za. If the information is in a client's system, we will pass your request to that client, who is the responsible party. You may also complain to the Information Regulator (South Africa): inforeg.org.za.

8. Changes

We will publish any change to this policy on this page, with its new effective date.