1. Who is responsible
UNITCURRENT, enterprise number 2026/878585/07, is established in Helderkruin, Roodepoort, Gauteng, South Africa 1724. Therry Martins is the accountable Information Officer. Contact privacy@unitcurrent.co.za or use the privacy request form.
For website enquiries and UnitCurrent's own administration, UnitCurrent determines why and how personal information is processed. For most customer utility operations, the body corporate, homeowners' association, property owner or managing organisation determines the purpose and UnitCurrent acts as its operator under contract. Your customer or scheme notice remains important in that situation.
2. Information we may process
- contact and enquiry details you submit;
- account, organisation, role and authentication evidence for authorised users;
- site, unit, meter-point, interval, supplier-bill, allocation, statement, case and approval records provided under customer authority;
- support, incident, access, correction, consent and preference records;
- necessary technical records such as time, IP address, browser, security events and request identifiers; and
- commercial, invoicing and service-administration records for UnitCurrent customers.
3. Why we process it
We process information to respond to enquiries; assess and deliver contracted services; authenticate and scope access; import and reconcile authorised utility data; prepare, review and release approved outputs; explain statements and corrections; coordinate support and named partners; protect the service; meet legal obligations; maintain audit evidence; and establish, exercise or defend rights.
We rely on the ground applicable to the activity, including consent where required, contract, legal duty, a legitimate interest that does not unjustifiably prejudice you, or the lawful instruction of the responsible customer. UnitCurrent does not use a source meter to infer an individual unit's measured consumption.
4. Sharing and operators
Information is shared only for an authorised purpose with the relevant customer, scoped users, contracted infrastructure or support providers, and named metering, payment, vending or field partners where the service requires them. Current production selections are AWS for the application, private evidence and email delivery; Supabase for database and authentication; Microsoft 365 for business mail; and Bitbucket for source/release records without customer production data. Professional advisers, regulators or law-enforcement bodies may receive information when legally justified. UnitCurrent does not sell personal information or hold resident funds.
5. International processing
AWS workload data is hosted in Cape Town, South Africa. Supabase database, authentication and managed backup data is hosted in Ireland. Microsoft 365 and Bitbucket are provider-managed and can involve cross-border storage or remote support. Each live customer schedule records the applicable POPIA section 72 condition, processors and any site-specific provider. Product demonstrations do not contain customer production data.
6. Retention, deletion and legal holds
Utility readings, released statements and their replay evidence are generally retained for seven years; UnitCurrent tax/accounting records for five years; ordinary closed support files for three years; website enquiries for two years; and authentication/security logs for 30 days. Customer-exit archives are deleted 30 days after verified receipt and never later than 60 days after creation. Database recovery uses no more than eight daily restore points at launch. A shorter customer instruction applies where legal, contractual, correction and proof duties permit it.
Expired information is deleted, de-identified or restricted across database rows, objects and versions, derivatives, logs and processors. A narrowly scoped legal hold requires independent activation, review within 30 days and at least every 90 days, and independent release; it never restarts the ordinary retention clock. Restored backups reapply deletion suppression before use.
7. Your rights
Subject to POPIA and the role of the responsible customer, you may ask whether we hold your information, request access or correction, object to certain processing, request deletion where the law permits it, withdraw consent, or complain. We verify identity and authority before disclosure and will direct a service-data request to the responsible customer when it owns the decision.
You may contact the Information Regulator of South Africa at inforegulator.org.za. Contacting us first can help us resolve the matter promptly, but it is not a condition of approaching the Regulator.
8. Security and changes
UnitCurrent uses role and tenant scoping, managed secrets, encrypted transport, private object access, audit evidence and independent release controls appropriate to the service boundary. No system is risk-free; confirmed incidents follow the applicable customer and regulatory notification process. Report a suspected issue to security@unitcurrent.co.za without including credentials or sensitive evidence. Material notice changes will be dated and made available on this page.