POPIA Privacy Policy

Privacy Policy – (POPIA Compliant)

Last Updated: 22 August 2025

1. Introduction

Heidelquip (Pty) Ltd T/A Agriquip (“we”, “us”, “our”) is committed to safeguarding the privacy of individuals and ensuring that personal information is processed lawfully, transparently, and securely in accordance with the Protection of Personal Information Act (POPIA), Promotion of Access to Information Act (PAIA), Consumer Protection Act (CPA), and other applicable South African laws. This Privacy Policy outlines how we collect, use, disclose, and protect your personal information when you interact with our website, services, or personnel.

2. Who We Are

Company Name: Heidelquip (Pty) Ltd T/A Agriquip
Information Officer: Georg Fredrik Janse van Rensburg
Email: dewald@agriquipheidelberg.co.za
Phone: 082 447 10197
Website: www.agriquip.co.za

3. Legal Frameworks We Comply With

• POPIA (Act 4 of 2013): Governs the processing of personal information.
• PAIA (Act 2 of 2000): Provides access to information held by public and private bodies.
• CPA (Act 68 of 2008): Regulates direct marketing and consumer rights.
• Cybercrimes Act (Act 19 of 2020): Addresses unlawful access, interception, and data breaches.

4. What Personal Information We Collect

We may collect and process the following categories of personal information:

• Full name and identity details
• Contact information (email, phone number, address)
• Company or business details
• Website usage data (cookies, analytics)
• Communication preferences
• Any other information voluntarily provided

Special Personal Information (processed only with explicit consent or legal justification):

• Race, ethnic origin, religious/philosophical beliefs
• Health or biometric data
• Political opinions or trade union membership

5. How We Collect Information

We collect personal information through:

• Direct interactions (forms, emails, calls)
• Automated technologies (cookies, analytics)
• Third-party service providers (e.g., hosting, marketing)
• Publicly available sources

6. Purpose of Collection

We process personal information for the following lawful purposes:

• To provide and manage services
• To respond to inquiries and support requests
• To improve website functionality and user experience
• To comply with legal and regulatory obligations
• To send marketing communications (with explicit consent)

7. Legal Basis for Processing

Under POPIA, we process personal information based on:

• Consent: Voluntary, specific, and informed
• Contractual necessity: To fulfill service agreements
• Legal obligation: Compliance with laws
• Legitimate interest: Business operations, fraud prevention

8. Your Rights Under POPIA

You have the right to:

• Access your personal information
• Request correction or deletion
• Object to processing
• Withdraw consent at any time
• Lodge a complaint with the Information Regulator (www.inforegulator.org.za)

Requests can be submitted via email, WhatsApp, SMS, phone, or in writing. Telephonic requests will be recorded and made available upon request.

9. Disclosure of Information

We do not sell or trade personal information. We may share it with:

• Service providers under contract
• Legal or regulatory authorities
• Third parties with your explicit consent

All operators are bound by confidentiality and data protection agreements.

10. Data Security Measures

We implement appropriate technical and organisational safeguards, including:

• Secure servers and encryption
• Access controls and authentication
• Regular audits and vulnerability assessments
• Staff training on data protection

11. Cookies and Tracking Technologies

Our website uses cookies to:

• Enhance user experience
• Track usage patterns
• Improve content relevance

You can manage cookie preferences via browser settings. See our Cookie Policy for details.

12. Direct Marketing and Consent

We only send direct marketing communications if:

• You are an existing customer, or
• You have given explicit, recorded consent via email, SMS, WhatsApp, or phone

Note: Opt-out does not equal consent. Consent must be a positive action.

13. Cross-Border Data Transfers

We do not transfer personal information outside South Africa unless:

• The recipient country has adequate data protection laws, or
• You have given explicit consent

14. Links to Third-Party Sites

Our website may contain links to external sites. We are not responsible for their privacy practices. Please review their policies independently.

15. Information Officer Responsibilities

Our Information Officer ensures:

• POPIA and PAIA compliance
• Maintenance of a compliance framework
• Handling of access and correction requests
• Staff awareness and training
• Continuous improvement of privacy practices

16. Complaints and Enforcement

Complaints can be submitted to the Information Regulator via:

• Email, fax, post, courier, WhatsApp, or phone
• In any language, with assistance available
• Anonymous complaints are allowed with justification

Failure to comply may result in fines or imprisonment.

17. Changes to This Policy

We may update this Privacy Policy periodically. Changes will be posted on this page with the revised date.

18. Contact Us

For questions or to exercise your rights, contact:
Andre Joubert
Email: andre@elevatingart.co.za
Phone: 071 631 4971