We are committed to protecting and respecting your privacy when dealing with your personal information. 

This privacy notice sets out the basis on which any personal information we collect from you, or that you provide to us, is used, stored, disclosed and processed by us. Please read the following carefully to understand our practices regarding your personal information, how we will treat it and your rights in relation to that information. By providing your personal information to us or by using our services, website or other online or digital platform(s) you are accepting or consenting to the practices as described or referred to in this privacy notice. 

When we refer to ‘we’, ‘us’ and ‘our’, we mean Alzu Group of Companies )Pty) Ltd and its subsidiary companies.  

YOUR PERSONAL INFOMATION 

When we refer to personal information in this notice, we mean information relating to an identifiable, living, natural person, as defined in the Protection of Personal Information Act, 2013 (“POPIA“). We may hold and use personal information about you as a customer, supplier, employee,  or in any other capacity, in accordance with the relevant privacy laws.  Depending on what services you receive from us this may include special personal information, as defined in POPIA, such as information relating to your Identity and other personal information. 

 WHEN DO WE COLLECT PERSONAL INFORMATION ABOUT YOU?

We may collect information about you when you: 

  • Contract with us as a client, customer or supplier of goods and services;  
  • Apply for a credit or cash account with one of subsidiary companies; 
  • visit one of our websites; 
  • apply for a job with us and as part of the recruitment process;  
  • enquire about any of our services; 
  • use or request to use any of our online services; 
  • fill in a form or survey for us; 
  • carry out a transaction on our website; 
  • participate in a competition or promotion or marketing activity; 
  • make payments to us; 
  • contact us, for example by email, telephone or social media; 
  • participate in interactive features on any of our websites; 

 LAWFUL BASIS

To process your information in accordance with POPIA, we must establish  a lawful basis for doing so which must be at least one of the following: 

  • you consent to the processing of your information; 
  • processing of the information is necessary for the performance of a contract or a legal obligation; 
  • processing is necessary for the protection of our and your legitimate interests; 

In addition, your special personal information, such as information relating to your general and credit related information may be processed if such processing is necessary for proper consideration of all applications, for the administration of our service or where such processing is necessary for the work conducted by ourselves and/or any of our subsidiary companies and/or affiliated organisations. 

 By agreeing to our privacy notice you also permit us to disclose your personal information in the following circumstances: 

  • you consent to this disclosure in writing; 
  • Necessary legal steps are to be taken to protect our legal interests relating to any of our services and/or engagements with you. 
  • a court order or any law requires that disclosure; or 
  • non-disclosure of the information represents a serious threat to public interest. 

We process your personal information for a number of legitimate interests as set out within this privacy notice having assessed and taken into account your interests, rights and freedoms. 

 THE SECURITY AND STORAGE OF YOUR PERSONAL INFORMATION

Your personal information will be kept confidential and secure and will, unless you agree otherwise, only be used for the purpose(s) for which it was collected and in accordance with this our applicable Privacy notice, POPIA and national health laws. 

ORGANISATIONAL AND TECHNICAL SECURITY MEASURES 

We have appropriate organisational and technical security measures in place to  prevent unauthorized access or unlawful processing of personal information and to prevent personal information being lost, destroyed or damaged. We monitor our information systems in an endeavor to ensure that the ongoing security is robust.   All personal information you provide to us is stored securely. When applicable, and where we have given you (or where you have chosen) a password that enables you to access certain parts of our website and information systems, you are responsible for keeping that password confidential. We ask you not to share a password with anyone. The transmission of information via the internet cannot be guaranteed as completely secure.  Once we have received your information, we will use strict procedures and security features in an endeavor to prevent unauthorised access.  

At your request, we may occasionally transfer personal information to you via email, or you may choose to transfer information to us via email. Email is not a secure method of information transmission; if you choose to send or receive such information via email, you do so at your own risk. 

IP ADDRESS  

All information regarding your IP address will automatically be collected and stored as part of your access via the website to Alzu’s server. This website usage information serves as an indicator of how visitors of the website make use of the website, the amount of times which the website is accessed, the frequency of all users in general to each web page, registered IP addresses together with the time period of each visit and/or access of the website and web pages.  

Should there be a security breach, the IP address will be used to identify the user by the internet service provider and contact will be made thereafter. Alzu endeavors to ensure that your IP address is not processed in a manner that infringes on your privacy. 

 TRANSFERS OF PERSONAL INFORMATION OUTISIDE OF SOUTH AFRICA

Personal information that we collect from you may be transferred to, and stored at, a destination outside of South Africa. It may also be processed by staff operating outside South Africa who work for us or for one of our suppliers. Where we transfer your personal information outside South Africa, we will endeavor to ensure that there are adequate protections in place for your rights, in accordance with POPIA. By submitting your personal information, and in providing any personal information to us, you agree to this transfer, storing or processing. We will take all steps reasonably necessary to ensure that your information is treated securely and in accordance with this Privacy Notice. 

DISCLOSURE OF YOUR PERSONAL INFORMATION  

We may disclose your personal information (to the extent necessary) to certain third party organisations used to support the delivery of our services during our usual course of business. These may include the following: 

 Warehouses, employees, courier companies, legal advisors and attorneys, administrative staff, and all other personnel that have access to information in the general scope of our business. 

These persons may collect, process and disclose your confidential information, including information relating to your Identity, address and financial information, as is necessary in the following circumstances:

  • to enable employees and staff to perform their duties; 
  • for the Alzu Group of Companies (Pty) Ltd and its subsidiaries  to provide the necessary services to you, 

In instances where Alzu Group of Companies does share your personal and health information with third parties, Alzu Group of Companies undertakes to share only those aspects of your information which is necessary, or which is necessary to prevent a threat to public interest, while preserving the confidentiality, privacy and security of that information as far as possible. In addition, Alzu Group of Companies may be required to disclose your personal and confidential information in terms of a court order or other law.  Upon your request, we will notify you of the recipients or category of recipients with whom we share your personal information, as well as the category of information shared (for example, your demographic or other information); 

*  In addition to the above instances, you grant Alzu Group of Companies the right to process your personal, demographic, financial and other  information, for the following purposes: 

  • to share your information with third parties such as attorneys and other professionals acting on your behalf who may, on your instruction or with your knowledge and authorisation, seek access to your personal and other information  either for litigious or non-litigious reasons, or to share your information with our own attorneys and/ or other professionals for instituting or defending any potential legal claims;  
  • to share your information with non-affiliated third parties such as our auditors, for the purposes of running and administering our day to-day operations and subject to them being bound to confidentiality; 
  • in respect of any outstanding account, to share your information with third parties assisting us in recovering payment on the account from you (such as debt recovery agents or attorneys; 
  • to share your personal information (limited only to your name and contact number) with our third party service providers for the purposes of marketing.  In addition, should you subsequently change your mind after having initially opted in to receiving marketing content, we will cease from processing your information any further for these purposes; 
  • to share your information with business partners, suppliers and sub-contractors for the performance of services we provide to you as set out in the privacy notice;  
  • to share your information with organisations providing IT systems support and software development, and for hosting in relation to the IT systems on which your information is stored and subject to confidentiality undertakings; 
  • to share your information with delivery companies for the purposes of transportation; 
  • to share your information with third party service providers for the purposes of storage of information and confidential destruction;  
  • to share your information third party marketing companies for the purpose of sending marketing emails, subject to obtaining appropriate consent; 
  • Where a third party supplier is used, we shall endeavor to ensure that they operate under contractual restrictions with regard to confidentiality and security, in addition to their obligations under POPIA. 
  • In the case of independent consultants, the consultant is the responsible party of your personal information, and will be required to maintain their own records in accordance with POPIA and applicable confidential guidelines and retention periods;  
  • Regulators: We may be requested – and in some cases can be required – to share certain information (including personal information and special personal information) about you and your care with regulators such as the National Credit Regulator. We will ensure that we do so within the framework of the law and with due respect to your privacy; 

SALE OF BUSINESS 

We may also disclose your personal information to third parties in the event that we sell or buy any business or assets or where we are required by law to do. 

CCTV  

Many of our premises are surveyed by CCTV for the purposes of security and the safe provision of services. Images and videos may be retained for a limited period.  

STATISTICAL AND RESEARCH PURPOSES 

We may also retain your personal information for statistical, historical or research purposes. In such instances, we shall maintain the confidentiality of your information through adequate security measures such as de-identification or anonymity of the information concerned. 

SUPPLIERS AND VENDORS

We may process your personal information as required for our legitimate business interests and in course of running our business.  These include but are not limited to: during our BEE scoring and reporting process; computing sustainability measures; during quality audits; during internal and external investigations; if you submit tender and other proposals to us, and for vendor assessments that may be carried out as required. We may also process your information during a business due diligence; and we may process your information for commercial and market research purposes. 

 YOUR RIGHTS

You have the following rights in relation to your personal information, where legally permissible: 

  • Right of access: the right to make a written request for details of your personal information and a copy of that personal information; 
  • Right to rectification: the right to have inaccurate information about you corrected or removed; 
  • Right to erasure (‘right to be forgotten’): the right to have certain personal information about you erased; 
  • Right to restriction of processing: the right to request that your personal information is only used for restricted purposes; 
  • Right to object: the right to object to processing of your personal information in cases where our processing is based on the performance of a task carried out in the public interest or we have let you know the processing is necessary for our or a third party’s legitimate interests; 
  • Right to information portability: the right to ask for the personal information you have made available to us to be transferred to you or a third party in machine-readable formats; 
  • Right to withdraw consent: the right to withdraw any consent you have previously given us to handle your personal information. If you withdraw your consent, this will not affect the lawfulness of our use of your personal information prior to the withdrawal of your consent and we will let you know if we will no longer be able to provide you your chosen product or service; 
  • Right in relation to automated decisions: you have the right not to be subject to a decision based solely on automated processing which produces legal effects concerning you or similarly significantly affects you, unless it is necessary for entering into a contract with you, it is authorised by law or you have given your explicit consent. We will let you know when such decisions are made, the lawful grounds we rely on and the rights you have. 

Please note: Your rights are not absolute: they do not always apply in all cases and we will let you know in our correspondence with you how and whether we will be able to comply with your request. 

Should you, at any time, wish to object, or feel that we are not reasonably processing your personal information in a manner that preserves the confidentiality, privacy and security thereof as required by law, you may notify us accordingly, either telephonically or in writing, and we will then ensure that your complaint or query is investigated and dealt with efficiently.   

Further to the above, you may contact us in order to determine whether we hold any of your personal information and thereafter, to request that we rectify or delete such information (to the extent that we are not prohibited from doing so by any law), should it be found to be inaccurate or outdated. 

Should you wish to exercise any of the above rights you may contact the Information officer at jacques@alzu.co.za; ben@alzu.co.za 

Should you not be satisfied with the outcome, you also have the right to lodge a complaint regarding the processing of your personal information with the Information Regulator. In terms of POPIA, you are also entitled to direct a compliant to the Office of the Information Regulator, South Africa at SALU Building, 316 Thabo Sehume Street, Pretoria, South Africa; Tel: 012 406 4818; Fax: 086 500 3351; 

Email: inforeg@justice.gov.za; Website: http://www.justice.gov.za/inforeg/.