POPIA Privacy Policy

Global Manufacturing Africa (Pty) Ltd ("GMA", "we", "our") is committed to protecting the personal information of all natural persons and juristic entities with whom we interact. This policy governs how we collect, use, store, and share personal information in compliance with POPIA.

1. Who We Are

Responsible Party: Global Manufacturing Africa (Pty) Ltd, Reg. K2025753377, SARU House, Tyger Valley, Cape Town, South Africa.
Information Officer: Timothy Manners-Wood | [email protected]

2. What Personal Information We Collect

We collect the following categories of personal information:

• Identifying information: Full name, ID number or company registration number
• Contact details: Email address, phone number, physical and postal address
• Financial information: Bank account details (for payment processing only)
• Commercial information: Purchase history, quotations, and order details
• Communication records: Emails and correspondence related to our business
• Technical data: IP address and device information when visiting our website

We do not intentionally collect special personal information (e.g. race, health, political views).

3. Why We Collect Personal Information

We process personal information only for the following lawful purposes:

• Order fulfilment, delivery, and invoicing
• Warranty registration and after-sales support
• Legal and regulatory compliance
• Communication regarding our products and services (where consent is given)
• Fraud prevention and security

4. Lawful Basis for Processing

We process personal information on the following bases:

• Performance of a contract (sales agreements, reseller agreements)
• Legal obligation (tax, regulatory reporting)
• Legitimate interest (fraud prevention, business operations)
• Consent (marketing communications — opt-in only)

5. How We Share Personal Information

We share personal information only with:

• Our banking institutions (for payment processing)
• Logistics and freight providers (for delivery)
• Authorised technology service providers (cloud hosting, CRM — subject to processing agreements)
• Regulatory authorities (where legally required)

We do not sell personal information to any third party.

Where we share data with processors outside South Africa, we ensure equivalent protections are in place.

6. Retention of Personal Information

• We retain personal information for as long as necessary to fulfil the purpose for which it was collected, or as required by law.
• Financial and contractual records are retained for a minimum of 5 years in accordance with South African tax and commercial law.
• After the applicable retention period, personal information is securely destroyed.

7. Security Measures

GMA implements appropriate technical and organisational measures to protect personal information, including:

• Encryption of data in transit and at rest
• Role-based access controls
• Audit logging of access to personal data
• Regular security assessments

8. Your Rights Under POPIA

You have the right to:

• (a) Access your personal information held by us
• (b) Request correction of inaccurate information
• (c) Object to processing
• (d) Request deletion (subject to our legal obligations)
• (e) Lodge a complaint with the Information Regulator

To exercise any of these rights, contact our Information Officer at [email protected].
Information Regulator: www.justice.gov.za/inforeg | [email protected]

9. Cookies and Website

• Our website may use essential cookies for functionality. We do not use tracking or advertising cookies without consent.
• You may disable cookies in your browser settings.

10. Updates to This Policy

• GMA may update this Privacy Policy from time to time. The current version will always be available on our website and upon request.
• Material changes will be communicated to registered partners and customers.