POPIA Notice

Overview

This POPIA Notice explains how Matlakse (Pty) Ltd ("Matlakse") collects, processes and protects personal information in compliance with the Protection of Personal Information Act, 4 of 2013 (POPIA). It supplements our Privacy Policy and applies to customers, suppliers, contractors, prospective clients and visitors to our website.

Responsible Party & Information Officer

Lawful Basis for Processing

We process personal information on one or more of the lawful bases recognised by POPIA:

• Consent — where you have voluntarily agreed (e.g. opting in to marketing communications).
• Contract — to prepare or perform a contract with you (quotations, orders, deliveries, support).
• Legal obligation — to comply with statutory or regulatory requirements.
• Legitimate interest — to operate, secure and improve our business, balanced against your rights.
• Public or vital interest — where processing is necessary to protect such interests.

Categories of Personal Information

We typically process the following categories of personal information:

• Identity, contact and employer details of customer and supplier representatives;
• Project, site and technical information necessary to design, manufacture and deliver our products;
• Banking, tax and registration information for payments and statutory compliance;
• Website, communication and analytics data (see Cookies).

We do not knowingly collect special personal information (e.g. health, biometric, religious or political data) unless legally required.

Sharing & Cross-Border Transfers

Personal information may be shared with operators and third parties as described in our Privacy Policy. Where personal information is transferred outside South Africa (for example to international project partners or hosting providers), we ensure the recipient is subject to laws, binding rules or contractual arrangements that provide an adequate level of protection in line with section 72 of POPIA.

Your Rights as a Data Subject

Under POPIA you have the right to:

• Be notified that your personal information is being collected or has been accessed without authorisation;
• Request access to and details of the personal information we hold about you;
• Request correction, deletion or destruction of inaccurate, irrelevant or excessive information;
• Object to processing or withdraw consent (where consent is the lawful basis); and
• Submit a complaint to the Information Regulator if you believe your rights have been infringed.

To exercise these rights, please send a written request to the Information Officer above. We may request proof of identity before processing your request.

Information Regulator