Get Started

Privacy Policy

Effective date: [DD Month YYYY]
Who we are. CION BPO (Pty) Ltd (“CION BPO”, “we”, “us”, “our”) provides outsourced customer operations and back-office services.
Registered address: Regus Business Centre, 1st Floor, Block B, North Park, Black River Park, 2 Fir Street, Observatory,
Cape Town, 7925, South Africa
Contact:  chiara@cion-bpo.com

1) Scope

This notice explains how we collect, use, disclose, and secure personal information when you: (a) visit cion-bpo.com or our sub-sites; (b) contact us; (c) apply for a job; or (d) we process data for clients as their operator/processor under contract. It applies globally; regional addenda may supplement it.

2) Our roles under the law

  • Responsible party (controller) when we decide why/how to process (e.g., website analytics, talent recruiting, supplier management).

  • Operator (processor) when we process instructions from clients (e.g., handling their customer data). We then follow the client’s privacy terms and our DPA.

3) What we collect

a) Website & contact

Identifiers (name, email, phone), firmographics (company, role), content of enquiries, call/meeting notes, IP address, device/browser, approximate location, cookies and similar tech (see Cookies).

b) Recruitment (careers)

CV/resume data, qualifications, right-to-work, references, background-check outcomes where lawful, and interview records (CION recruits SA talent for global delivery).

c) Service delivery (client programmes)

Customer interaction records (voice/chat/email), tickets/notes, quality-assurance metrics, performance analytics, and limited special-category/sensitive data only where the client’s programme requires it and with appropriate safeguards/consents.

d) PAIA/rights requests

Identity and request details needed to authenticate and fulfil your POPIA/PAIA rights. (PAIA manual to be published on our site.)

4) Why we use data (lawful bases)

  • Provide and improve services; respond to RFPs and enquiries; operate our website (legitimate interests/contract).
  • Recruitment & HR (pre-contract/consent where required).
  • Security & fraud prevention; quality assurance and compliance monitoring (legitimate interests/legal obligation).
  • Legal & PAIA/POPIA obligations (e.g., record-keeping, rights responses).
  • Marketing to business contacts in a responsible manner with opt-out.

5) Cookies & similar technologies

We use:

  • Essential cookies (site operation, security, load balancing).
  • Analytics (aggregate usage; IP truncation where feasible).
  • Preference cookies (remember choices).

You can manage non-essential cookies via our banner or browser settings.

6) Sharing & disclosure

  • Service providers/Operators: hosting, security, analytics, call-centre software, HR/recruitment tools—bound by contracts and confidentiality.

  • Clients: when we act as their operator, we share performance/QA records per contract.

  • Corporate events: restructuring/merger with safeguards.

  • Legal/regulatory: to comply with law, enforce rights, or respond to lawful requests.

7) Cross-border transfers

Where data moves outside South Africa (or the UK/EEA for EU/UK data), we use appropriate transfer mechanisms (e.g., contractual safeguards, adequacy where applicable). (Your UK line indicates cross-border relevance.)

8) Security

Layered controls: access governance, encryption in transit, role-based permissions, secure facilities, vendor due diligence, and QA tooling with least-privilege. No method is 100% secure; suspected incidents are handled under our Incident Response SOP, including notifications to the SA Information Regulator and affected data subjects as required (via the e-portal).

9) Retention

We retain data only as long as necessary for the purposes above, then delete or de-identify it under documented schedules.
Examples:

  • Enquiries: [12–24] months.
  • Recruitment unsuccessful: [12] months (or per consent).
  • Client interaction records: per client contract and law.

10) Your rights (POPIA & PAIA; plus UK/EU where applicable)

You may access, correct, delete, object, restrict, and complain. Submit requests to  chiara@cion-bpo.com or via our PAIA Manual (published on our website). You may also complain to the Information Regulator (South Africa).

11) Children

Our services and site are for business audiences; we don’t knowingly collect children’s data.

12) Contact

Information Officer: chiara@cion-bpo.com
Address: Regus Business Centre, 1st Floor, Block B, North Park, Black River Park, 2 Fir Street, Observatory, Cape Town, 7925, South Africa

13) Changes

If we materially change this notice, we’ll update the date and post a banner/notice.

Let’s Talk

Let’s get started right now.

Contact Us
Useful Links
Quick Links

Copyright 2025. CION BPO All rights reserved.

South Africa Stock Videos by Vecteezy

Facebook-f X-twitter Youtube Instagram Linkedin