THE PROTECTION OF PERSONAL INFORMATION ACT 4 OF 2013
CUSTOMER PRIVACY NOTICE

Introduction

This notice explains how we obtain, use and disclose your personal information, in
accordance with the requirements of the Protection of Personal Information Act 4 of 2013
(“POPIA”).
Black African Organics (“BAO”) recognises the importance of privacy and the protection of
personal information provided to it and is committed to the safeguarding of such
information. This privacy notice explains how BAO collects and uses your personal
information. It contains information regarding the rights of natural persons (and juristic
persons, where applicable) to whom personal information relates (“data subjects” or
“you”). BAO reserves the right to amend this Privacy Notice or add provisions to it at any
time by publishing an updated version on our website.

About The Company

Black African Organics (Pty) Ltd

Definition of Data Subject

According to the Act ‘‘data subject’’ means the person to whom personal information
relates.

Definition of Personal Information

According to the Act ‘‘personal information’’ means information relating to an
identifiable, living, natural person, and where it is applicable, an identifiable, existing
juristic person. Further to the POPI Act, BAO also includes the following items as personal
information:

  • All addresses including residential, postal and email addresses.

Information We Collect

Your interaction with the company on the BAO website will result in the collection of
information regarding your activities on the website. Similarly, when you engage with the
company via any one of BAO’s social media platforms. This information includes, but is not
limited to, your name, contact details and information regarding the transaction you may
need assistance with.

While engaging with customers on transactions, BAO will naturally
be exposed to and collect personal information.


We collect and process your personal information mainly to contact you for the purposes
of understanding your requirements, and delivering services accordingly. For this purpose,
we will collect contact details including your name, address and/or organisation.
We collect information directly from you where you provide us with your personal
details. Where possible, we will inform you what information you are required to provide
to us and what information is optional.

Cookies

BAO’s websites makes use of cookies. Cookies store information regarding website visitors.
Cookies have various purposes, such as improving the visitor’s experience on the website
and facilitating their use of the website. A website visitor may disable or decline cookies.
However, if the visitor does so, their user experience on the site may be diminished.

Direct Marketing

BAO may distribute marketing and promotional communications and material. Recipients
may opt out from receiving such communications by contacting BAO at the details
provided below or by clicking on the opt-out link that will be contained in the relevant
electronic communication.

How We Use Your Information

We will use your personal information only for the purposes for which it was collected and
agreed with you. In addition, where necessary your information may be retained for legal
or research purposes.
The purposes for which BAO processes personal information include, but are not limited
to:

  • To gather contact information;
  • To confirm and verify your identity or to verify that you are an authorised user for
    security purposes;
  • For the detection and prevention of fraud, crime, money laundering or other
    malpractice;
  • To conduct market or customer satisfaction research or for statistical analysis;
  • Marketing and promotion of BAO’s services;
  • Providing and improving services to customers;
  • Improving user’s experience when using BAO’s

Disclosure of Information

We may disclose your personal information to our service providers who are involved in
the delivery of products or services to you. We have agreements in place to ensure that
they comply with the privacy requirements as required by the Protection of Personal
Information Act.


We may also disclose your information:

  • Where we have a duty or a right to disclose in terms of law or industry codes;
  • Where we believe it is necessary to protect our rights.

Retention of Personal Information

BAO retains personal information for as long as may be reasonably necessary in
accordance with applicable law, and/or in order to provide services to you. It is impractical
for us to tell you in this document how long we may keep your information, however, our
first obligation is to keep it as long as may be required by law. Thereafter, we would only
keep information in order to provide services to you, or for specific business purposes.

Information Security

We are legally obliged to provide adequate protection for the personal information we
hold and to stop unauthorised access and use of personal information. We will, on an ongoing basis, continue to review our security controls and related processes to ensure that
your personal information remains secure.


Our security policies and procedures cover:

  • Physical security;
  • Computer and network security;
  • Access to personal information;
  • Secure communications;
  • Security in contracting out activities or functions;
  • Retention and disposal of information;
  • Acceptable usage of personal information;
  • Governance and regulatory issues;
  • Monitoring access and usage of private information;
  • Investigating and reacting to security incidents.

When we contract with third parties, we impose appropriate security, privacy and
confidentiality obligations on them to ensure that personal information that we remain
responsible for, is kept secure.
We will ensure that anyone to whom we pass your personal information agrees to treat
your information with the same level of protection as we are obliged to.

Your Rights: Access to Information

You have the right to request a copy of the personal information we hold about you. To do
this, simply contact us at the numbers/addresses as provided on our website and specify
what information you require. We will need a copy of your ID document to confirm your
identity before providing details of your personal information.


Please note that any such access request may be subject to a payment of a legally allowable
fee. However, BAO may, in certain instances, legally refuse or decline such requests.

Correction of Your Information

You have the right to ask us to update, correct or delete your personal information. We
will require a copy of your ID document to confirm your identity before making changes to
personal information we may hold about you. We would appreciate it if you would keep
your personal information accurate.


If applicable, you might also have the right to object to BAO’s processing of their personal
information or to file a complaint with a regulator, however we encourage you to address
your complaint to us first.

In South Africa, the Information Regulator can be contacted at:
JD House
27 Stiemens Street
Braamfontein
Johannesburg
2001
Email: inforeg@justice.gov.za


In some cases, you may withdraw your consent for processing—this withdrawal has no
effect on lawful processing conducted up to that point. If you wish to exercise your rights,
you can contact BAO at the details provided below. BAO may charge you a fee for
accessing, amending or deleting your personal information. You will be advised of this fee
in advance, if applicable.


You are encouraged to contact BAO in order to update your personal information as and
when necessary.

How to Contact Us

If you have any queries about this notice; you need further information about our privacy
practices; wish to withdraw consent; exercise preferences or access or correct your
personal information, please contact us at the numbers/addresses listed on our website,
www.blackafricanorganics.co.za