EvTrack Privacy

Last updated: 2026-10-19

EvTrack is a visitor management and access control service. Organisations use it to register, check in and admit visitors, contractors and staff. Those organisations, our customers, decide what personal data is collected and why. EvTrack processes it on their behalf: an operator under South Africa’s POPIA and a processor under the GDPR.

These pages are for customers and their legal, privacy and procurement teams. They describe what the service does with personal data today, and link to the EvTrack manual for how to configure it.

Quick facts

• Hosting: the application and databases are hosted in the region the customer chooses at sign-up: Frankfurt, Cape Town or London (Amazon Web Services), or Abu Dhabi (Oracle Cloud).
• Encryption: in the cloud service, data is encrypted in transit and at rest, and identity numbers are encrypted in the database.
• Retention: customers set how long data is kept. Cloud defaults are 365 days for visits and visitor data and 31 days for audit logs.
• Sub-processors: EvTrack uses eight third-party providers that may process personal data. All are listed by name.
• On-premise: customers who need full control can run EvTrack on their own servers.

Pages

• Privacy Policy: what the service processes, why, who receives it, and your rights
• Data Storage and Security: hosting, encryption, access control and backups
• Retention and Deletion: how long data is kept and what deleting removes
• Sub-processors: the third-party services EvTrack uses
• POPIA: EvTrack under South Africa’s Protection of Personal Information Act
• GDPR: EvTrack under the EU and UK General Data Protection Regulation
• End-User Licence Agreement: the licence terms for EvTrack software

Contact

EvTrack (Pty) Ltd, 159 Buitenkant St, Gardens, Cape Town, 8001, South Africa

Information Officer: Nathan Bearman
Privacy requests and questions: legal@evtrack.com

If you visited a site that uses EvTrack and want to see, correct or delete your data, please contact the organisation you visited first. They are responsible for your data.