Privacy Policy

GSP Industries (Pty) Ltd. Privacy Policy

Website: www.gspindustries.co.za

Company registration number: 2019/107882/07

Registered address: 4 Lathe Street, Amalgam, Johannesburg, 2092, South Africa

1. Introduction

This Privacy Policy explains how GSP Industries (Pty) Ltd (“GSP Industries”, “we”, “us”, “our”) collects, uses, shares and protects personal information when you use our website at www.gspindustries.co.za or when you interact with us by email, phone or in person.

We are committed to complying with the Protection of Personal Information Act 4 of 2013 (“POPIA”) and other applicable South African laws, and to processing personal information in a lawful, reasonable and secure manner. 

By using our website or submitting personal information to us, you acknowledge that you have read and understood this Privacy Policy.

2. Responsible party and contact details

The responsible party for purposes of POPIA is:

GSP Industries (Pty) Ltd

Registration number: 2019/107882/07

Address: 4 Lathe Street, Amalgam, Johannesburg, 2092, South Africa

Email: info@gspindustries.co.za

3. Personal information we collect

We may collect and process the following categories of personal information:

  • Identification details such as full name, company name and position in accordance with our privacy policy
  • Contact details such as email address, phone number and physical or postal address
  • Order and account information such as products requested, delivery preferences and order history
  • Payment related information for EFTs such as proof of payment and banking reference details (we do not store your full banking login or card details)
  • Technical information such as IP address, browser type, device information and pages viewed, which may be collected through cookies or similar technologies
  • Any other information that you voluntarily provide to us when you contact us, complete forms, submit applications or request quotations.

We collect personal information directly from you where possible. In limited cases we may receive information from third parties such as couriers, payment references or business partners.

4. Purposes for processing personal information

We process your personal information for the following purposes:

  • To create and manage customer profiles and procurement applications
  • To process and fulfil orders, including confirming stock, arranging delivery and issuing invoices
  • To receive and allocate EFT payments and maintain proper accounting records
  • To communicate with you about your orders, quotations, queries or complaints
  • To manage our relationship with you and provide after-sales support
  • To comply with legal and regulatory obligations, tax requirements and record-keeping duties
  • To improve our website, services and customer experience through analysis of aggregated usage data in accordance with our privacy policy
  • To send you service related notices and, where permitted, marketing communications that you can opt out of at any time.

We will only process personal information for purposes that are lawful, relevant and not excessive in relation to the reason for which it was collected. 

5. Legal basis for processing

We rely on one or more of the following grounds when processing personal information:

  • Your consent where you voluntarily provide information or agree to receive communications
  • The need to perform or conclude a contract with you, including orders and procurement agreements
  • Our legitimate interests in operating and improving our business and protecting our rights
  • Compliance with legal obligations in terms of South African legislation.

6. Cookies and website usage

Our website may use cookies and similar technologies to improve functionality, remember your preferences and analyse website traffic. These cookies do not usually identify you directly, but they may be linked to your IP address or device.

You can adjust your browser settings to refuse cookies, although this may affect certain features or performance of the website.

7. Sharing of personal information

We will not sell your personal information. We may share it in limited circumstances with:

  • Service providers who help us operate the website, store data, send emails, host servers or deliver goods, subject to confidentiality and data protection obligations
  • Professional advisers such as auditors, accountants or legal advisers where reasonably necessary
  • Payment and banking institutions to confirm and allocate EFT payments
  • Regulatory authorities, law enforcement bodies or other third parties where we are required or permitted by law to do so, or where it is necessary to protect our rights and legitimate interests.

Where personal information is transferred outside South Africa, we will take reasonable steps to ensure that the recipient is subject to laws, binding corporate rules or agreements that provide an adequate level of protection in line with POPIA. 

8. Information security

We take appropriate, reasonable technical and organisational measures to safeguard personal information in our possession against loss, unauthorised access, unlawful processing, disclosure or destruction. Such measures include access controls, secure storage, updating software and restricting access to personal information to authorised personnel only. 

Despite these safeguards, no system is completely secure. You acknowledge that the transmission of information over the internet is at your own risk, although we will take reasonable steps to mitigate any security breaches and to notify you and the Information Regulator where required by law. 

9. Retention of personal information

We will keep personal information only for as long as it is necessary to fulfil the purposes for which it was collected or to comply with legal, accounting or reporting obligations. When information is no longer required, we will take reasonable steps to delete or de-identify it in a secure manner.

10. Your rights as a data subject

Under POPIA you have the right to: 

  • Be informed that your personal information is being collected and how it will be used
  • Request access to the personal information that we hold about you
  • Request the correction, update or deletion of your personal information where it is inaccurate, irrelevant, excessive, out of date or misleading
  • Object to the processing of your personal information on reasonable grounds relating to your particular situation
  • Object at any time to the processing of your personal information for direct marketing purposes
  • Withdraw any consent you may have given, subject to legal or contractual limitations
  • Lodge a complaint with the Information Regulator if you believe we are interfering with the protection of your personal information.

To exercise these rights, please contact us in writing using the contact details above. We may require proof of identity before responding to a request and are entitled to charge a reasonable fee for providing copies of records where permitted by law.

11. Information Regulator contact details

Information Regulator (South Africa) 

Website: inforegulator.org.za

Email: complaints.IR@justice.gov.za (complaints)

Address: JD House, 27 Stiemens Street, Braamfontein, Johannesburg, 2001, South Africa

12. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our business or the law. The latest version will always be available on our website and will apply from the date of publication.

privacy policy gsp industries