Privacy Policy

Effective date: January 1, 2025 Last updated: March 27, 2026

Outsource House CC, trading as OSH.co.za (“us”, “we”, or “our”) operates the https://osh.co.za website (the “Service”).

This page informs you of our policies regarding the collection, use, and disclosure of personal data when you use our Service and the choices you have associated with that data. This policy is compliant with the Protection of Personal Information Act (POPIA) and the General Data Protection Regulation (GDPR).

We use your data to provide and improve the Service. By using the Service, you agree to the collection and use of information in accordance with this policy.

Cookie Consent and Management

When you first visit our website, you’ll see a cookie consent banner where you can:

• Accept All - Enable all cookies and features
• Decline - Only use essential cookies required for the website to function
• Manage Preferences - Choose which categories of cookies you want to enable

You can change your cookie preferences at any time by clicking the “Cookie Preferences” link in our footer or by clearing your browser data.

Cookies and Tracking Technologies

What Are Cookies?

Cookies are small text files that are placed on your device when you visit our website. They help us provide you with a better experience by remembering your preferences and enabling certain features.

Cookie Categories

We use the following categories of cookies on our website:

1. Essential Cookies (Always Active)

These cookies are necessary for the website to function properly and cannot be disabled. They include:

• Cookie Consent Preferences - Remembers your cookie choices for 365 days
• Session Management - Maintains your session while browsing
• Security Tokens - Protects forms from spam and abuse

Legal Basis: Legitimate interest (necessary for website operation)

2. Functional Cookies (Requires Consent)

These cookies enable enhanced functionality and personalization:

• Zoho SalesIQ Chat Widget - Provides live chat support when you need assistance
  • Purpose: Customer support and communication
  • Data Collected: Chat messages, name, email (if provided), browsing behavior on our site
  • Retention: Chat history is retained for support purposes
  • Third Party: Zoho Corporation (privacy policy: https://www.zoho.com/privacy.html)
  • Data Transfer: Data may be transferred to servers in India and the United States

Legal Basis: Consent (you can enable/disable via cookie preferences)

3. Analytics Cookies (Requires Consent)

These cookies help us understand how visitors use our website through Google Analytics (via Google Tag Manager):

• Page views and navigation patterns
• Time spent on pages
• Referral sources
• Device and browser information
• User interactions and conversions

You have full control over analytics cookies through our cookie preference center. Analytics are only tracked when you enable analytics cookies.

Legal Basis: Consent (opt-in required)

Third-Party Services

Google Tag Manager & Google Analytics

We use Google Tag Manager (GTM) to manage tracking and analytics on our website.

• Purpose: Event tracking, user behavior analysis, and website optimization
• Data Collected: Page views, user interactions, device information, browser data, IP address
• Retention: Google retains data according to its own retention policies (typically 26 months)
• Third Party: Google Ireland Limited (privacy policy: https://policies.google.com/privacy)
• Legal Basis: Consent (you can enable/disable via cookie preferences)
• Note: Google Analytics data is processed in accordance with Google’s data processing terms

Cloudflare Turnstile (Spam Protection)

Our contact form uses Cloudflare Turnstile to protect against spam and automated abuse. This is a privacy-focused alternative to traditional CAPTCHAs.

• Purpose: Fraud prevention and spam protection
• Data Collected: Browser fingerprint, IP address, interaction patterns
• Retention: Temporary (session-based, not stored long-term)
• Third Party: Cloudflare, Inc. (privacy policy: https://www.cloudflare.com/privacypolicy/)
• Legal Basis: Legitimate interest (security and fraud prevention)
• Note: Turnstile is loaded only on the contact form page and runs automatically to verify you’re human

Managing Your Cookies

You can control cookies in several ways:

1. Our Cookie Preference Center: Click “Cookie Preferences” to enable or disable specific categories
2. Browser Settings: Most browsers allow you to refuse cookies or delete existing ones
3. Do Not Track: We respect browser Do Not Track signals

Note that disabling essential cookies may affect website functionality.

Cookie Retention

• Essential Cookies: Session-based or up to 1 year
• Consent Preferences: 365 days (you’ll be asked again after one year)
• Functional Cookies: Varies by service, typically up to 7 days for chat widget

Information Collection And Use

We collect several different types of information for various purposes to provide and improve our Service to you.

Types of Data Collected

Personal Data

While using our Service, we may ask you to provide us with certain personally identifiable information that can be used to contact or identify you. This information is collected only when you voluntarily provide it through:

Contact Forms:

• First name and last name (required)
• Email address (required)
• Service interest selection (optional)
• Message content (optional)

Live Chat (Zoho SalesIQ) - Only if you enable functional cookies:

• Name (if provided)
• Email address (if provided)
• Chat messages
• Pages visited during your session

Email Communications:

• Email address
• Name
• Any information you choose to include in your messages

Usage Data

We may automatically collect certain information when you visit our website:

• IP address (anonymized where possible)
• Browser type and version
• Device type (mobile, tablet, desktop)
• Operating system
• Pages visited and time spent on each page
• Referral source (how you found our website)
• Date and time of visit

Note: Usage data is collected minimally and only for essential website functionality unless you consent to analytics cookies.

Technical Data (Cloudflare Turnstile)

When you submit our contact form, Cloudflare Turnstile collects:

• Browser characteristics and behavior
• IP address
• Interaction patterns (to verify you’re human, not a bot)

This data is processed by Cloudflare for fraud prevention and is not stored long-term.

Use of Data

Outsource House CC uses the collected data for various purposes:

Primary Uses

• Service Delivery: To provide and maintain our website and services
• Customer Support: To respond to inquiries via contact form or live chat
• Communication: To notify you about changes to our services or respond to your requests
• Security: To detect, prevent, and address technical issues, spam, and fraud
• Legal Compliance: To comply with legal obligations under POPIA and other applicable laws

Secondary Uses (Requires Consent)

• Analytics: To track page views, user interactions, and website performance using Google Analytics (only if analytics cookies are enabled)
• Service Improvement: To analyze how users interact with our website and optimize user experience
• Personalization: To remember your preferences and provide a better user experience

Legal Basis for Processing

We process your personal information based on:

1. Consent: When you provide explicit consent (e.g., cookie preferences, contact form submission)
2. Legitimate Interest: For essential website functionality, security, and fraud prevention
3. Legal Obligation: When required by South African or international law
4. Contractual Necessity: To fulfill our obligations when providing services to you

Transfer Of Data

Your information, including Personal Data, may be transferred to and maintained on computers located outside of your state, province, country or other governmental jurisdiction where the data protection laws may differ from those of your jurisdiction.

If you are located outside South Africa and choose to provide information to us, please note that we transfer the data, including Personal Data, to South Africa and process it there.

Your consent to this Privacy Policy followed by your submission of such information represents your agreement to that transfer.

Outsource House CC will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this Privacy Policy.

Disclosure Of Data

We may disclose your Personal Data in the good faith belief that such action is necessary to:

• Comply with a legal obligation
• Protect and defend the rights or property of Outsource House CC
• Prevent or investigate possible wrongdoing in connection with the Service
• Protect the personal safety of users of the Service or the public
• Protect against legal liability

Security Of Data

No method of transmission over the Internet, or method of electronic storage, is 100% secure. While we use commercially reasonable means to protect your Personal Data, we cannot guarantee absolute security.

Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this privacy policy:

After the retention period, we securely delete or anonymize your data.

International Data Transfers

Some of our service providers operate in countries outside of South Africa:

• Google Tag Manager & Google Analytics: Data is processed by Google in the United States and other countries
• Zoho SalesIQ: Data may be transferred to India and the United States
• Cloudflare: Data is processed globally through Cloudflare’s network

We ensure that appropriate safeguards are in place when transferring data internationally, including:

• Standard contractual clauses
• Privacy Shield frameworks (where applicable)
• Adequacy decisions by relevant authorities

Your Rights Under POPIA

Under the Protection of Personal Information Act (POPIA), you have the following rights regarding your personal information:

1. Right to Access

You can request a copy of the personal information we hold about you.

2. Right to Correction

You can request that we correct or update inaccurate or incomplete personal information.

3. Right to Deletion

You can request deletion of your personal information when:

• It’s no longer necessary for the purposes for which it was collected
• You withdraw consent (where processing was based on consent)
• You object to processing and there are no overriding legitimate grounds
• The data was unlawfully processed

4. Right to Object

You can object to the processing of your personal information for:

• Direct marketing purposes
• Processing based on legitimate interests
• Automated decision-making

5. Right to Restrict Processing

You can request that we temporarily restrict processing of your personal information when:

• You contest the accuracy of the data
• The processing is unlawful but you don’t want the data deleted
• We no longer need the data, but you need it for legal claims

6. Right to Data Portability

You can request a copy of your personal information in a structured, commonly used format.

7. Right to Withdraw Consent

Where processing is based on consent, you can withdraw your consent at any time. This includes:

• Changing your cookie preferences
• Unsubscribing from marketing communications
• Requesting deletion of chat transcripts

How to Exercise Your Rights

To exercise any of these rights, please contact us:

• Email: support@osh.co.za
• Contact Form: https://osh.co.za/contact/

We will respond to your request within 30 days as required by POPIA.

Children’s Privacy

Our Service is not intended for children under the age of 18. We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately so we can delete such information.

Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption: All data transmitted to and from our website is encrypted using SSL/TLS
• Access Controls: Limited access to personal data by authorized personnel only
• Secure Storage: Data is stored on secure servers with regular backups
• Third-Party Security: We only work with service providers that maintain adequate security standards

No method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any material changes by:

• Posting the new Privacy Policy on this page
• Updating the “Last updated” date at the top of this policy
• Displaying a notice on our website for significant changes

Changes are effective when posted on this page.

Third-Party Links

Our website may contain links to third-party websites that are not operated by us. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services. We recommend reviewing the privacy policy of any third-party website you visit.

Cookie Preference Management

You can manage your cookie preferences at any time by:

1. Clicking on “Cookie Preferences” in our website footer
2. Clearing your browser cookies (this will reset your preferences)
3. Using browser settings to block all cookies (may affect website functionality)

Your consent preferences are stored locally on your device and are valid for 365 days.

Contact Us & Data Protection Officer

If you have any questions about this Privacy Policy, wish to exercise your rights under POPIA, or have concerns about how we handle your personal data, please contact us:

Outsource House CC (trading as OSH.co.za)

• Email: support@osh.co.za
• Contact Form: https://osh.co.za/contact/
• Physical Address: Cape Town, South Africa

For POPIA-related inquiries or to lodge a complaint, you can also contact the Information Regulator of South Africa:

• Website: https://inforegulator.org.za/
• Email: inforeg@justice.gov.za

Complaints

If you believe we have not complied with POPIA or GDPR, you have the right to lodge a complaint with:

• South Africa: Information Regulator - https://inforegulator.org.za/
• Europe: Your local supervisory authority

We will work with you to address any privacy concerns.