Privacy Notice
NamBiz Privacy Notice
How NamBiz collects, processes, secures, and retains personal information in Namibia-focused operations.
Last updated: February 18, 2026
1. Who We Are
NamBiz is operated by Hex-Tech Software Technologies CC in Namibia. We act as a service provider and, depending on workflow context, may act as a processor/operator for customer organizations or as a controller for our own account and platform operations.
Primary privacy contact: [email protected]
2. Information We Collect
We collect account identity data, tenant and company profile data, payroll and HR records, compliance workflow records, document metadata, and support communications.
Technical data includes authentication logs, session identifiers, device/browser metadata, and security telemetry.
3. How We Use Information
We use data to authenticate users, provide ERP/payroll/compliance functions, generate regulatory outputs, support audits, deliver communications, and secure the platform.
Processing grounds include contractual necessity, legal/regulatory compliance, legitimate business interests, and consent where specifically requested.
4. Communications and Integrations
NamBiz may use third-party communications providers (for example Twilio and Twilio SendGrid) to deliver transactional email, SMS, and WhatsApp notifications.
We share only the minimum data required for delivery, tracing, and abuse prevention.
5. Disclosure and Transfers
We may disclose data to subprocessors, professional advisors, and regulators where required by law or valid legal process.
If processing involves cross-border infrastructure, we apply contractual and technical safeguards designed to maintain confidentiality and integrity.
6. Retention and Deletion
Retention depends on legal obligations, audit requirements, and service configuration. Statutory and financial records may need longer retention than account profile data.
Deletion and anonymization follow our approved retention matrix and customer contract terms.
7. Security Measures
NamBiz applies role-based access control, event logging, transport security, idempotent API controls, and monitoring for unauthorized access attempts.
No internet-facing system is risk-free, but we operate security controls consistent with business-critical SaaS standards.
8. Your Requests and Rights
You may request access, correction, export, or deletion of personal information, subject to applicable legal restrictions and record-retention duties.
Where data is processed on behalf of an employer or tenant, requests may be routed through that organization as primary data owner.
9. Namibia Legal Position
NamBiz is built for Namibian operations and aligns privacy handling with constitutional privacy protections and applicable sectoral legislation.
As Namibia's privacy and data legislation evolves, this notice will be updated and versioned accordingly.
Namibian Legal References
This policy set is drafted for NamBiz operations in Namibia and should be reviewed by qualified Namibian legal counsel before production launch.