TSU Protect Privacy Policy

Effective Date: 03/08/2026

Last Updated: 03/08/2026

1. Introduction

TSU Protect ("TSU Protect", "we", "our" or "us") respects your privacy and is committed to protecting your personal information.

This Privacy Policy explains how we collect, use, disclose, store and protect your personal information when you use the TSU Protect mobile application, website, customer portal and related emergency response services.

TSU Protect is an emergency response platform operated by PanicGuard Limited(“PanicGuard”) on behalf of TSU Protection Services and its authorised clients. In this Privacy Policy references to “we” in clauses 2 to 6 inclusive and clause 8 shall be deemed to include TSU Protect and PanicGuard. Our services are designed to improve personal safety by enabling users to request emergency assistance,share their location with our monitoring centre, communicate during emergencies and manage their security profile.

TSU Protection Services (Pty) Ltd is the Responsible Party for the processing of personal information through the TSU Protect platform. PanicGuard Limited processes personal information as an authorised Operator on behalf of TSU Protection Services in accordance with section 21 of POPIA.

We do not knowingly collect personal information from children unless authorised by a parent, legal guardian or an organisation responsible for the child's account. Any processing of children's personal information complies with section 35 of POPIA, including obtaining consent from a competent person where required

This Privacy Policy should be read together with any additional privacy notices we may provide for specific services or clients.

2. What Personal Information We Collect

To provide emergency response services, we collect only the information necessary to operate the TSU Protect platform safely and effectively. If you choose not to provide certain information, some features of the service may not be available.

The personal information we collect may include:

Identity & Contact Information

Full name
Email address
Mobile telephone number

Optional Information

You may choose to provide information such as:

Emergency contact details (name, email address and phone number)
Medical information
Vehicle details
Profile picture
Height
Hair colour
Eye colour
Build
Gender
Company name

Live Location & Incident Information

TSU Protect continuously processes your precise GPS location while you are logged into the application. This allows the TSU monitoring centre to verify alarms, dispatch responders, monitor active incidents and provide emergency assistance as quickly as possible. We may also collect information relating to emergency incidents, including responder notes and communications.

Video & Audio

Where enabled by you or your organisation, the application may capture video recordings or audio recordings during an emergency or incident and shared with the TSU monitoring centre to arrange the necessary support. These features may be disabled by you or by the organisation administering your account.

Payment Information

Where you purchase TSU Protect directly, payment information is processed by Stripe. TSU Protect does not store your complete payment card details.

Technical & Device Information

When logged into the TSU Protect app, we automatically collect technical information including:

Device metrics
Application version
Crash reports

This information helps us maintain the reliability and security of the Services.

3. How and Why We Use Your Personal Information

We only process your personal information where permitted by law.

Purpose	Lawful Basis
Provide emergency response services	Performance of a contract; protection of the legitimate interests of the data subject where necessary to protect life or physical safety during an emergency.
Dispatch responders using live location	Performance of a contract; protection of the legitimate interests of the data subject where necessary to protect life or physical safety during an emergency.
Verify alarms and incidents	Legitimate interests.
Manage your account	Performance of a contract.
Process payments	Performance of a contract.
Respond to support requests	Legitimate interests.
Improve our platform	Legitimate interests.
Maintain platform security	Legitimate interests.
Process optional medical information	Explicit consent; and, where the information constitutes special personal information, processing is permitted under Sections 26–33 of POPIA where necessary to protect the life or physical safety of the data subject or another person during an emergency.
Comply with legal obligations	Legal obligation.
Send marketing communications	Consent (where required). Existing customers may receive marketing communications where permitted under POPIA. New prospects require consent unless another lawful basis applies. Users may opt out at any time.

We will only use your personal information for the purpose for which it was collected unless another compatible purpose is permitted by law.

4. Sharing Your Personal Information

We only share your personal information where necessary to provide our services or where required by law. Your information may be shared with:

TSU Protection Services: Authorised personnel within TSU Protection Services, including our monitoring centre, may access your information to manage incidents, dispatch responders, provide customer support, and administer the TSU Protect service. Where necessary, we may share relevant information with TSU responders, emergency medical services, fire and rescue services, police, and other authorised emergency response partners to provide assistance during an emergency.

Your Organisation: If your TSU Protect account is provided through your employer or another organisation, authorised administrators may access information relating to your account, activity, and incidents to administer the services provided to your organisation.

Service Providers: We use trusted third-party service providers to support the delivery of our services, including:

Clickatell: We use Clickatell as our SMS messaging provider. Clickatell processes the mobile phone numbers of your nominated emergency contacts to send notifications when:
- You add them as an emergency contact;
- An alert is triggered;
- A journey is created or a journey timer expires;
- A check-in or check-out is sent;
- You choose to share your live location.
PanicGuard Limited: PanicGuard provides account management and operational support services for the TSU Protect application. Authorised PanicGuard personnel may have rolebased access to personal information where necessary to support the operation, maintenance, and administration of the service.
Cloud hosting: AWS Ireland
Payment processing: Stripe

All operators processing personal information on behalf of TSU Protection Services are contractually bound in terms of section 21 of POPIA to implement appropriate technical and organisational security measures and may only process personal information on documented instructions.

Legal Authorities: We may disclose personal information where required by applicable law, regulation, court order, or legal process, or where disclosure is necessary to protect the vital interests of an individual, safeguard property, prevent fraud, or establish, exercise, or defend legal claims.

We do not sell your personal information.

5. International Data Transfers

TSU Protect hosts its production systems using Amazon Web Services (AWS) infrastructure located in Ireland. As a result, your personal information may be transferred outside South Africa. Where international transfers occur, we implement appropriate contractual, technical and organisational safeguards to protect your information in accordance with Section 72 of POPIA and, where applicable, GDPR.

6. Security of Your Personal Information

We use appropriate physical, technical and organisational security measures to protect your personal information.

These measures include:

Encryption in transit
Multi-factor authentication (admin dashboard)
Access controls
Role-based permissions
Security monitoring
Audit logging
Secure backups
Vulnerability management
Penetration testing
Incident response procedures
Security awareness training
Supplier security assessments

Although we take reasonable steps to protect your information, no internet-based system can be guaranteed to be completely secure.

7. Your Privacy Rights

Subject to applicable law, you may have the right to:

Request access to your personal information.
Request correction of inaccurate information.
Request deletion of personal information where legally permitted.
Object to processing in terms of section 11(3) of POPIA.
Object to direct marketing under section 69 of POPIA.
Withdraw consent where processing relies on consent.
Request restriction of processing.
Request a copy of your information in a portable format.

You may also delete your TSU Protect account through the application where this functionality is available, or by contacting our Information Officer. We may request proof of identity before processing your request.

8. Data Retention

Personal information is retained only for as long as necessary in accordance with section 14 of POPIA unless longer retention is required by law. We retain personal information to provide our services, comply with legal obligations and maintain records relating to emergency incidents.

Because TSU Protect provides emergency response services, certain incident records may be retained for extended periods where necessary for legal, contractual, insurance or operational purposes.

Client organisations may define specific retention periods applicable to their users.

Where personal information is no longer required, it will be securely deleted or anonymised where reasonably practicable.

9. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be published on our website and, where appropriate, communicated through the application or by email.

The "Last Updated" date at the top of this Privacy Policy indicates when it was most recently revised.

10. Contact Us

If you have any questions about this Privacy Policy or how we process your personal information, please contact our Information Officer.

Information Officer

The Information Officer is registered with the Information Regulator, and requests will be handled in accordance with PAIA and POPIA. Data subject requests may require identity verification.

TSU Protection Services
Johan Koster
Email: johan.koster@tsuint.com
Telephone Number: +27 (0) 21 385 0116

If you believe that we have not handled your personal information in accordance with applicable law, you may lodge a complaint with the Information Regulator (South Africa) or your local data protection authority.

Information Regulator (South Africa)

JD House
27 Stiemens Street
Braamfontein
Johannesburg

Email:
PAIAComplaints@inforegulator.org.za

Complaints:
POPIAComplaints@inforegulator.org.za

Website:
https://www.justice.gov.za/inforeg/