Data Processing Agreement

Defining how personal data is processed, controlled, and protected within Optirex Consulting engagements.

Last Updated: 19 March 2026

1. Scope of Processing

Optirex Consulting (Pty) Ltd processes personal data solely for the purpose of delivering commercial advisory, system validation, and revenue architecture enforcement within active engagements.

2. Jurisdiction and Regulatory Basis

Processing is governed in Gauteng, Republic of South Africa and aligned with the Protection of Personal Information Act (POPIA) and the General Data Protection Regulation (GDPR) where applicable.

3. Data Handling Principles

Personal data is processed lawfully, minimally, and only where required for defined engagement outcomes. Data is not sold, distributed, or repurposed beyond its intended operational use.

4. Technical and Organisational Measures

Encryption

Industry-standard encryption applied to stored and transmitted data.

Access Control

Restricted access based on role and operational necessity.

Integrity Monitoring

Ongoing review of data handling and system integrity.

Continuity

Backup and recovery controls to maintain data availability.

5. Breach Notification

In the event of a personal data breach, notification will be issued within applicable regulatory timeframes, including the 72-hour requirement where mandated.

6. Contact and Information Officer

Optirex Consulting (Pty) Ltd
Email: info@optirexconsulting.com
Tel: +27 10 825 0393
Gauteng, Republic of South Africa

7. Intellectual Property and Brand Protection

The name Optirex Consulting, its logo, and all associated visual identity elements are the exclusive property of Optirex Consulting (Pty) Ltd and are protected under applicable intellectual property and copyright law.

All proprietary frameworks, including The Revenue Durability Framework™, The VECTOR Commercial Architecture Model™, The QoE Revenue Validation Toolkit™, and The RPI Standard™, remain the sole property of Optirex Consulting (Pty) Ltd.