Information Securtity and Data Protection Policy

Data Protection

We are committed to ensuring that your personal information is processed in compliance with the Protection of Personal Information Act (POPIA), 2013, and safeguarded against unauthorised access, disclosure, alteration, or destruction.

Processing of Personal Information

Personal information will be collected and processed only for specific, lawful, and legitimate business purposes, including:
  • Provision of services to customers and clients.
  • Communication with employees, suppliers, and stakeholders.
  • Compliance with legal and regulatory obligations.
Processing is carried out fairly, transparently, and in accordance with POPIA’s eight conditions for lawful processing.

Responsible Authority

The responsible authority under POPIA is the company’s Information Officer, appointed in terms of Section 55 of the Act, who ensures compliance and acts as the contact point with the Information Regulator.
DEKRA Certification
267 West Street, 1st Floor 267 West Building
Die Hoewes, Centurion,
0157

Visiting Our Website

When you visit our website, we may process certain technical data such as your device’s IP address, browser type, and usage activity. This is done for:
  • Ensuring website functionality and security.
  • Detecting and preventing misuse or cyberattacks.
  • Improving user experience.
The legal basis is our legitimate business interest in maintaining a secure and functional website.

Other Purposes

We may also process information voluntarily provided by you, including customer inquiries, supplier details, or job applications. Such processing is strictly limited to the purposes for which the information was collected.

Contact via Forms

If you contact us using website forms, email, or other electronic means, we collect and store the data you provide for the purpose of responding to your request and for internal recordkeeping.

Transfer to Third Parties

Your personal information may be shared with third parties only when:
  • It is necessary to deliver a contracted service.
  • It is required by law or legal process.
  • The third party is a service provider bound by a contract ensuring compliance with POPIA.
We will not sell your personal information or use it for commercial gain outside the agreed purpose.

Intended Data Transfer to Other Countries

Where cross-border transfers of personal information are required, we will ensure that the recipient country has adequate protection as required under Section 72 of POPIA, or that appropriate contractual safeguards are in place.

Security

We implement technical and organisational measures to protect personal information, including:
  • Encryption of data in transit and at rest.
  • Access control and authentication mechanisms.
  • Firewalls, antivirus, and monitoring tools.
  • Physical security for offices and storage areas.
Security controls are regularly tested, monitored, and improved in line with evolving risks.

Web Analysis and Tracking

Where applicable, we may use website analytics tools (such as Google Analytics or local alternatives) to evaluate website usage. Any analytics processing is carried out only with user consent, and in line with POPIA.

Use of Cookies

Our website uses cookies to improve functionality, enhance user experience, and analyse site traffic. Cookies are small files stored on your device.
  • Essential cookies: Required for website operation.
  • Analytical cookies: Used to monitor performance and usage trends.
  • Marketing cookies: Used only with your explicit consent.
You may adjust cookie settings through your browser or our cookie management tool.

Embedding of Social Media Plugins

Where our website includes links to social media platforms (e.g. Facebook, LinkedIn, Twitter, YouTube), no personal data will be transferred unless you actively click the social media button. Once clicked, the respective platform’s privacy policy applies.

Deletion of Data

Personal information will not be retained longer than necessary. Data will be deleted or anonymised when:
  • The purpose for collection no longer applies.
  • Legal or regulatory retention periods expire.
  • A valid deletion request is received under POPIA.

Rights of Data Subjects

Under POPIA, you have the right to:
  • Access your personal information.
  • Correct inaccurate or incomplete information.
  • Request deletion of personal information where lawful.
  • Object to processing based on legitimate interests or direct marketing.
  • Lodge a complaint with the Information Regulator of South Africa.

Information Regulator Contact

The Information Regulator (South Africa)
JD House, 27 Stiemens Street, Braamfontein, Johannesburg, 2001
Email: complaints.IR@justice.gov.za | inforeg@justice.gov.za
Tel: 010 023 5200

Amendment of this Policy

This Information Security and Data Protection Policy may be updated from time to time to reflect legal or business changes. The current version will always be made publicly available.