Privacy
Privacy notice
Last updated: 29 September 2026
Who we are
Hapis Tech Ltd ("Hapis Tech", "we", "us") is a technology company registered in Mauritius. We are the controller of the personal data described in this notice.
Address: Hi Tech Center, B31, Port Louis, Mauritius. Email: contact@hapis.tech. Telephone: +230 234 49 34 / +230 235 49 34.
This notice covers this website and our dealings with enquirers, clients and suppliers. The Hapis BMS Suite software has its own privacy policy.
What we collect and why
- Enquiries and project briefs. Name, email address, telephone number, organisation and whatever you tell us about your project. We use it to reply and to prepare a proposal. Lawful basis: taking steps at your request before entering into a contract, and our legitimate interest in answering enquiries. We keep it for up to 24 months after our last contact unless you become a client.
- Client and supplier records. Contact details, contracts, correspondence and invoices. Lawful basis: performance of a contract and legal obligations. We keep them for as long as Mauritian company and tax law requires.
- Website operation and security. When you visit the site, our hosting provider processes technical data such as your IP address, browser type and the pages requested, to deliver the site and protect it from abuse. Lawful basis: legitimate interests. These logs are kept for a short period set by the provider.
We do not collect special category data (such as health or biometric data) through this website, and we do not sell personal data or use it for automated decisions that affect you.
Customers and enquirers in Zambia
HAPIS Tech Solutions Limited, a Hapis Tech group company in Lusaka, sells and supports Hapis Nav and the connected-asset range in Zambia. It is the controller of the personal data of its Zambian customers and enquirers, under Zambia's Data Protection Act, 2021.
Address: 9B Corner of Kiola and Ngwezi Road, Roma, Lusaka, Zambia. Email: paul@hapis.tech. Telephone and WhatsApp: +260 977 727 568.
- Enquiries. If you contact the Lusaka office by WhatsApp, email or phone, it uses your name, contact details and message to reply and prepare a quote. Lawful basis: taking steps at your request before a contract. Enquiries are kept for up to 24 months after the last contact unless you become a customer.
- WhatsApp. WhatsApp is operated by Meta, which processes messages under its own terms and privacy policy. If you prefer not to use it, email or call instead.
- Tracking and monitoring data. Vehicle, camera and sensor data collected through Hapis Nav and our monitoring systems is handled under the customer's agreement with HAPIS Tech Solutions Limited. Customers who track employees are responsible for telling them and for setting retention periods.
You can exercise the rights described below by contacting the Lusaka office, and you can complain to the Office of the Data Protection Commissioner in Zambia.
How the project brief works
The project brief form does not send or store anything on our servers. It prepares an email in your own mail application, and nothing reaches us unless you choose to send that email. From then on, your message is handled as an enquiry, as described above.
Cookies and third-party resources
This website does not use analytics, advertising or tracking cookies.
- Fonts are loaded from Google Fonts, so your browser sends your IP address to Google when a page loads.
- Some Hapis Labs demonstration pages load open-source libraries from public content delivery networks (jsDelivr and cdnjs), which receive your IP address in the same way.
- If a page fails to load, basic technical error information (the error message and page address) may be recorded to help us fix it. It does not include form contents.
Who we share data with
- Website hosting and platform provider (Lovable and its cloud infrastructure), to run this website.
- Our email hosting provider, to receive and store email.
- Professional advisers, and authorities where the law requires it.
Each provider processes data on our instructions or under its own legal obligations. We do not share personal data for marketing.
International transfers
Some of our providers process data outside Mauritius, including in the United States and the European Union. Where required, we rely on the safeguards those providers offer, such as standard contractual clauses, so that your data remains protected.
Your rights
Under the Mauritius Data Protection Act 2017 and, where it applies, the EU or UK GDPR, you can ask us to:
- give you access to the personal data we hold about you
- correct inaccurate data
- delete your data
- restrict or object to our processing
- give you your data in a portable format
- withdraw consent, where we rely on consent
See how to make a data request. We respond within one month.
Security
The site is served over encrypted connections, and access to enquiry and client records is limited to the people who need it. No system is completely secure, but we work to protect your data and will notify you and the relevant authority of a breach where the law requires it.
Children
This website and our services are not directed at children, and we do not knowingly collect their data.
Complaints
If you are unhappy with how we handle your data, please contact us first. You can also complain to the Data Protection Office in Mauritius, to the Office of the Data Protection Commissioner in Zambia for the Zambian services, or to the data protection authority where you live or work.
Changes to this notice
We will post any changes on this page and update the date above.