LEGAL & COMPLIANCE

Privacy Policy

Your privacy is important to us. This policy explains how we collect, use, and protect your personal information.

Last Updated: March 31, 2026 Version: 2.0
Scroll to read policy
QUICK NAVIGATION

Table of Contents

SECTION 1

Introduction & Scope

Chinata Group (Pty) Ltd ("we," "our," "us," or "the Company") is committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, engage with our services, or interact with us in any way.

This policy applies to all personal information collected by Chinata Group through our website, digital platforms, email communications, phone calls, in-person meetings, and any other interactions you may have with us. We comply with the Protection of Personal Information Act (POPIA) of South Africa and, where applicable, the General Data Protection Regulation (GDPR) of the European Union.

📋

By using our website or services, you consent to the collection and use of your information as described in this Privacy Policy. If you do not agree with any part of this policy, please do not use our services.

SECTION 2

Information We Collect

We collect various types of information to provide and improve our services to you. The categories of information we may collect include:

Personal Information You Provide

  • Contact Information: Name, email address, phone number, company name, job title, physical address
  • Account Information: Username, password, account preferences, and communication settings
  • Quote & Project Information: Project details, specifications, drawings, technical requirements, budget information
  • Payment Information: Billing address, invoice details, banking information (processed securely through third-party payment processors)
  • Communications: Any correspondence you send to us via email, phone, contact forms, or social media
  • Employment Information: CV, resume, cover letter, employment history, qualifications (for job applications)

Information Automatically Collected

  • Device Information: IP address, browser type, operating system, device identifiers
  • Usage Data: Pages visited, time spent on pages, click patterns, referral URLs, search queries
  • Location Data: Approximate geographic location based on IP address
  • Cookies & Tracking Technologies: Information collected through cookies, web beacons, and similar technologies

Information from Third Parties

  • Social Media: If you interact with our social media accounts, we may receive information about your public profile
  • Business Partners: Information from partners, vendors, or clients who refer you to us
  • Public Sources: Information available from publicly accessible databases or directories
SECTION 3

How We Collect Information

We collect information through the following methods:

  • Direct Interactions: When you fill out forms on our website, request quotes, contact us via email or phone, or provide information in person
  • Website Forms: Contact forms, quote request forms, newsletter sign-up, and job application forms
  • Email Communications: When you email us or respond to our communications
  • Phone Calls: When you call us, we may record information about the conversation
  • In-Person Meetings: Information collected during meetings, site visits, or networking events
  • Cookies & Tracking: Automatic collection through cookies, analytics tools, and server logs
  • Third-Party Sources: Information from business partners, public records, or referrals
SECTION 4

How We Use Your Information

We use the information we collect for the following purposes:

  • Provide Services: To process quote requests, deliver products and services, manage projects, and communicate with you about your inquiries
  • Improve Our Website: To analyze usage patterns, optimize user experience, and enhance website functionality
  • Marketing Communications: To send you information about our services, industry updates, and promotional offers (with your consent where required)
  • Legal Compliance: To comply with applicable laws, regulations, and legal processes
  • Security: To protect our website, systems, and users from fraud, unauthorized access, or security threats
  • Business Operations: To manage our business operations, billing, accounting, and internal reporting
  • Recruitment: To evaluate job applications and communicate with candidates
  • Analytics & Research: To conduct market research, analyze trends, and improve our services
SECTION 5

Legal Basis for Processing

We process your personal information based on one or more of the following legal grounds:

  • Consent: You have given us explicit consent to process your information for specific purposes
  • Contractual Necessity: Processing is necessary to fulfill a contract with you or to take steps at your request before entering into a contract
  • Legal Obligation: Processing is necessary to comply with applicable laws, regulations, or legal processes
  • Legitimate Interests: Processing is necessary for our legitimate business interests, provided your fundamental rights do not override those interests
  • Public Interest: Processing is necessary for tasks carried out in the public interest or official authority
⚖️

Under POPIA, we are required to have a lawful basis for processing your personal information. Where we rely on consent, you have the right to withdraw that consent at any time.

SECTION 6

Sharing Your Information

We may share your personal information with the following categories of recipients:

  • Service Providers: Third-party vendors who assist us with IT services, hosting, analytics, payment processing, and customer support
  • Business Partners: Trusted partners who collaborate with us to deliver services you have requested
  • Professional Advisors: Lawyers, accountants, auditors, and consultants who provide professional services to us
  • Government Authorities: Law enforcement, regulators, or other authorities when required by law or to protect our legal rights
  • Corporate Transactions: In the event of a merger, acquisition, or sale of assets, your information may be transferred to the new entity
  • With Your Consent: Any other third parties with your explicit consent

We do not sell, rent, or trade your personal information to third parties for marketing purposes without your explicit consent.

SECTION 7

Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction:

  • Encryption: We use SSL/TLS encryption to protect data transmitted between your browser and our servers
  • Access Controls: Strict access controls ensure only authorized personnel have access to personal information
  • Secure Storage: Data is stored on secure servers with firewall protection and regular security audits
  • Employee Training: Our staff receive regular training on data protection and privacy best practices
  • Incident Response: We have procedures in place to respond to and manage data breaches
🔒

While we strive to protect your personal information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

SECTION 8

Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

  • Contact Information: Retained for the duration of our business relationship plus up to 5 years after last contact
  • Transaction Records: Retained for up to 7 years to comply with tax and accounting requirements
  • Quote Requests: Retained for up to 3 years for reference and analysis
  • Website Analytics: Aggregated data may be retained indefinitely; personally identifiable data is anonymized or deleted after 26 months
  • Job Applications: Retained for up to 12 months after the application process unless you consent to longer retention

When we no longer need your personal information, we will securely delete or anonymize it in accordance with our data retention policies.

SECTION 9

Your Rights

Under POPIA and applicable data protection laws, you have the following rights regarding your personal information:

  • Right to Access: You have the right to request a copy of the personal information we hold about you
  • Right to Rectification: You have the right to request correction of inaccurate or incomplete information
  • Right to Erasure: You have the right to request deletion of your personal information in certain circumstances
  • Right to Restrict Processing: You have the right to request that we limit how we use your information
  • Right to Data Portability: You have the right to receive your information in a structured, commonly used format
  • Right to Object: You have the right to object to processing based on legitimate interests or for direct marketing
  • Right to Withdraw Consent: Where processing is based on consent, you have the right to withdraw it at any time
  • Right to Lodge a Complaint: You have the right to lodge a complaint with the Information Regulator of South Africa
SECTION 10

Cookies & Tracking

We use cookies and similar tracking technologies to enhance your experience on our website. Cookies are small text files stored on your device that help us remember your preferences and understand how you interact with our site.

Types of Cookies We Use

  • Essential Cookies: Required for basic website functionality and security
  • Preference Cookies: Remember your settings and preferences
  • Analytics Cookies: Help us understand how visitors use our website
  • Marketing Cookies: Used to deliver relevant advertisements and track campaign effectiveness

Managing Cookies

You can control cookies through your browser settings. Most browsers allow you to:

  • View cookies stored on your device
  • Block cookies from specific websites
  • Delete all cookies when you close your browser
  • Set your browser to notify you when cookies are being set

Please note that disabling certain cookies may affect the functionality of our website.

SECTION 11

International Data Transfers

Your personal information may be transferred to and processed in countries other than South Africa. We ensure that any such transfers comply with applicable data protection laws and that your information remains protected:

  • Service Providers: Some of our service providers may be located outside South Africa
  • Safeguards: We implement appropriate safeguards, such as standard contractual clauses, to protect your data during international transfers
  • GDPR Compliance: For individuals in the European Union, we ensure adequate protection mechanisms are in place

By using our services, you consent to the transfer of your information to countries that may have different data protection laws than your country of residence.

SECTION 12

Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately. We will take steps to delete such information from our records.

SECTION 13

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or operational needs. When we make changes, we will:

  • Update the "Last Updated" date at the top of this policy
  • Notify you of material changes via email or prominent notice on our website
  • Obtain your consent where required by law

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

SECTION 14

Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact our Information Officer:

📞
📍
Address:

40 Camdeboo Road, Fourways, Gauteng, South Africa, 2055

Information Regulator of South Africa

You have the right to lodge a complaint with the Information Regulator if you are dissatisfied with our handling of your personal information:

Information Regulator (South Africa)
JD House, 27 Stiemens Street, Braamfontein, Johannesburg, 2001
PO Box 31533, Braamfontein, Johannesburg, 2017
Email: inforeg@justice.gov.za
Website: www.inforegulator.org.za

We Value Your Privacy

Thank you for taking the time to read our Privacy Policy. Chinata Group is committed to protecting your personal information and maintaining your trust.