Effective date: 4 June 2026
VAConnect takes the protection of personal and business data seriously. This Data Protection Policy summarises the organisational and technical measures we apply when handling data belonging to our clients, their customers, and our team. It complements our Privacy & Security Policy and GDPR / CCPA / CPRA Notice.
1. Our principles
We process data lawfully, fairly, and transparently; collect only what we need; keep it accurate; retain it no longer than necessary; and protect it with appropriate security.
2. Access controls
Access to client data is granted on a need-to-know basis. Virtual assistants and staff are given access only to the systems and information required to perform their role for you, and access is revoked when an engagement ends.
3. Confidentiality and training
All VAConnect team members are bound by confidentiality obligations (see our Non-Disclosure Policy) and receive guidance on secure handling of data, including password hygiene, phishing awareness, and secure file sharing.
4. Technical safeguards
We rely on reputable, security-certified providers for hosting, email, payments, and collaboration. Data in transit is encrypted using TLS/HTTPS. Payment data is handled exclusively by our PCI-DSS certified payment processor; we do not store full card numbers.
5. Data processing on your behalf
Where we process personal data on your behalf (for example, your customers’ details that your assistant works with), we act as a processor and follow your reasonable instructions. We are happy to enter into a Data Processing Agreement on request.
6. Data breach response
If we become aware of a personal-data breach that affects you, we will investigate promptly, take steps to contain it, and notify affected parties and regulators where required by applicable law and within applicable timeframes.
7. Sub-processors and transfers
We may use trusted sub-processors (such as Stripe for payments and our hosting and email providers). Some processing occurs in South Africa, the United States, and other countries. Where required, we apply appropriate safeguards for cross-border transfers.
Contact us
If you have any questions about this policy, please contact us:
- Email: hello@vaconnect.co.za
- Phone: +27 71 674 9339
- Post: Block B, Infinity Business Park, Cnr William Nicol Dr / Pieter Wenning Rd, Fourways, 2191, Johannesburg, South Africa
VAConnect is the trading name of Virtual Assistant Connect LLC (United States) and its South African operating affiliate. Virtual Assistant Connect LLC — Registration No. 10275605, EIN 36-5147421. South African operating affiliate — Company Registration No. 2014/179499/07.