GDPR Compliance

Your data protection rights under European regulations

Our Commitment

While our primary operations are based in South Africa, we recognize and respect the data protection rights of individuals in the European Union under the General Data Protection Regulation.

This page outlines how we comply with GDPR principles when processing personal data of EU residents.

Legal Basis for Processing

We process your personal data under these legal bases:

  • Consent: When you submit service request forms or accept cookies, you provide explicit consent for processing
  • Contract Performance: Processing necessary to fulfill services you've requested
  • Legitimate Interests: Website analytics and service improvement, balanced against your privacy rights
  • Legal Obligations: Compliance with applicable laws and regulations

Your GDPR Rights

If you are an EU resident, you have these rights regarding your personal data:

Right to Access

You can request confirmation of whether we process your data and obtain a copy of that data. We will provide this information in a commonly used electronic format.

Right to Rectification

If your personal information is inaccurate or incomplete, you can request that we correct or complete it.

Right to Erasure

Also known as the "right to be forgotten," you can request deletion of your personal data when:

  • The data is no longer necessary for its original purpose
  • You withdraw consent and no other legal basis exists
  • You object to processing and no overriding legitimate grounds exist
  • The data has been unlawfully processed

Right to Restriction

You can request that we limit how we use your data in certain circumstances, such as when you contest accuracy or object to processing.

Right to Data Portability

You can receive your personal data in a structured, machine-readable format and transmit it to another controller.

Right to Object

You can object to processing based on legitimate interests or for direct marketing purposes. We will cease processing unless we demonstrate compelling legitimate grounds.

Rights Related to Automated Decision-Making

We do not use automated decision-making or profiling that produces legal or similarly significant effects.

Exercising Your Rights

To exercise any of these rights, send a request to [email protected] with:

  • Your full name and contact information
  • Description of which right you wish to exercise
  • Specific details about your request
  • Any supporting documentation if relevant

We will respond to your request within one month. In complex cases, this may extend to three months, and we will inform you of any delay.

We do not charge a fee for processing requests unless they are clearly unfounded, repetitive, or excessive.

Data Protection Principles

We adhere to GDPR's core principles:

  • Lawfulness, Fairness, Transparency: We process data legally and inform you clearly about our practices
  • Purpose Limitation: We collect data for specific, legitimate purposes and do not use it incompatibly
  • Data Minimization: We collect only data necessary for stated purposes
  • Accuracy: We maintain accurate data and correct errors promptly
  • Storage Limitation: We retain data only as long as necessary
  • Integrity and Confidentiality: We implement appropriate security measures
  • Accountability: We demonstrate compliance with these principles

International Data Transfers

When we transfer personal data from the EU to South Africa or other countries, we ensure appropriate safeguards are in place.

South Africa has been recognized by the EU as providing adequate data protection. For transfers to other locations, we implement standard contractual clauses or other approved mechanisms.

Data Breach Notification

In the event of a data breach that poses risks to your rights and freedoms, we will notify you without undue delay, typically within 72 hours of becoming aware of the breach.

Our notification will include the nature of the breach, likely consequences, and measures taken or proposed to address it.

Children's Data

We do not knowingly process data of children under 16 without parental consent. If you believe we have inadvertently collected such information, contact us immediately for deletion.

Supervisory Authority

If you are unsatisfied with how we handle your data or our response to your requests, you have the right to lodge a complaint with your local supervisory authority in the EU.

Contact details for EU data protection authorities are available at the European Data Protection Board website.

Updates to This Information

We may update this GDPR compliance information to reflect changes in regulations or our practices. Significant changes will be communicated through our website.

Contact

For GDPR-related questions or to exercise your rights:

Email: [email protected]
Address: 142 Burnett Street, Hatfield, Pretoria, 0028, South Africa