Privacy Policy

1. In terms of section 18 of the POPIA Act we need to make our Data Subjects aware of certain information and rights in terms of the POPIA Act. The POPIA Act do not described how we are to notify you, but the international standard is to do it with a Privacy Notification.
2. This Privacy Notification lets you know what happens to any Personal Information that you give to us, or any that we may collect from or about you.
3. This privacy notice applies to Personal Information processed by or on behalf of the Organisation where we act as Responsible Party.
4. In this Privacy Notification you will find –
5. what information is being collected and where the information is not collected from you, the source from which it is collected;
6. our name and address (where we act as the responsible party);
7. the purpose for which the information is being collected;

1. whether or not the supply of the information by you is voluntary or mandatory;
2. the consequences of failure to provide the information;
3. any particular law authorising or requiring the collection of the information;
4. the fact that, where applicable, we (as the responsible party) intend to transfer the information to a third country or international organisation and the level of protection afforded to the information by that third country or international organisation;
5. any further information such as the—
6. recipient or category of recipients of the information;
7. nature or category of the information;

• existence of the right of access to and the right to rectify the information collected;

1. existence of the right to object to the processing of Personal Information as referred to in section 11(3); and
2. right to lodge a complaint to the Information Regulator and the contact details of the Information Regulator,

Collection of Personal Information.

What Personal Information do we collect?

1. Personal Information is collected either by voluntarily action, automatic process or via third party processors.
2. Voluntarily: We have access to/collect personal information that you voluntarily give us via email or other direct contact from you.
   • Typically, we may collect, use and store the following categories of personal information about you: (but not limited to) –
3. Identifying particulars – for example names, identification numbers, company registration numbers, etc. for accounting, service delivery and payment purposes;
4. Contact information – for example addresses, telephone numbers, e-mail address, etc;
5. Personal Information you choose to provide to us;
6. Personal Information when you contact us directly;
7. Personal Information you provide through our websites.
8. Personal Information from former, current and prospective clients, our suppliers and their employees, as well as contractors and others;
9. Automatic: We may also have access / collect Personal information that we collect automatically when you visit our website.
10. Third Parties: We may also collect information about you through our trusted third-party sources to assist us in providing product and service offerings to you.
11. In terms of the POPIA Act we must have accurate and up to date information about you. Please check that your personal details are correct whenever you visit us and inform us of any changes.
12. Personal Information is collected directly from our Data Subjects. We may also use other sources, subject to restrictions under applicable law, to assist in obtaining relevant Personal Information about you.

Our Contact Particulars.

Organisation Name:	Arcfyre Group
Physical Address	Apple street, Honeydew, Johannesburg, 2170 Blueberry Office Park, Block C, Unit 17
Postal Address	POBOX 971, Banburry, Northgate, Johannesburg, 2164
Tel No:	+27 (0)11 794 9502
Email:	info@arcfyre.com

Purpose for which the information is being collected.

1. We will only use your personal information when the law allows us to. Most commonly, we will use your personal information in the following circumstances:
2. The processing is necessary to perform a contract with you or take steps to enter into a contract at your request.
3. The processing is necessary for us to comply with a relevant legal obligation.
4. The processing is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests.
5. You have consented to the processing.
6. We may also use your personal information in the following situations:

• Where we need to protect your interests (or someone else’s interests).
• Where it is needed in the public interest or for official purposes.

2. We only collect Personal Information for the specific, explicitly defined and lawful purpose of conducting our business.
3. Direct Marketing
   • We may use your personal information to periodically send you direct marketing communications about products or our related services that we think may be of interest to you. This will be in the form of email, post, [SMS or targeted online advertisements]. We limit direct marketing to a reasonable and proportionate level, based on the information we have about you.
   • Where opt-in consent is required, we will ask for your consent.
   • You have a right to stop receiving direct marketing at any time – you can do this by following the opt-out or unsubscribe links located in the electronic communications (such as emails) you receive from us, by contacting us, or by emailing us.

Is the supply of the information voluntary or mandatory?

Supplying of certain types of information is mandatory in terms of legislation and regulations. For example, in terms of the Consumer Protection Act, a supplier of goods or services must provide a written record of each transaction to the consumer to whom any goods or services are supplied. In terms of the Basic Conditions of Employment Act we need to process certain Personal Information from our employees.

Any particular lawauthorising or requiring the collection of the information.

If your Personal Information is collected in terms of a particular law authorising or requiring the collection of the information, we will take steps to ensure that you are aware of that.

Failure to provide the requested information.

This personal information is required to enter into a contract with you (such as in anticipation of a services level agreement) or to perform a contract with you (such as to provide services at your request), and failure to provide any information may result in our inability to provide you the requested services or products.

Transfer the information to a third country.

If your Personal Information is transferred outside the Republic of South Africa to third party service providers, we will take steps to ensure that your Personal Information receives the same level of protection as if it remained within the Republic.

Recipient or category of recipients of the information

Your Personal Information will be treated as prescribed by the 8 Conditions for the Lawful Processing of Personal Information in the POPIA Act. We may share your Personal Information with:

1. Partners& Affiliated Companies – Any partner or affiliated company.
2. Service Providers – We may disclose the information we collect from you to third party contractors, technology and other service providers or agents who perform functions on our behalf, or are engaged with us. These service providers are allowed to access and use the information we make available to them only as needed to perform their functions and for no other purposes, subject to appropriate contractual restrictions and security measures.
3. In Response to Legal Process – We may disclose the information we collect from you in order to comply with the law, a legal proceeding, court order, or other legal process, such as in response to a court order or a subpoena.
4. Third Parties –
5. third parties used to facilitate payment transactions, for example clearing houses, clearing systems, financial institutions, and transaction beneficiaries.
6. third parties where you have a relationship with that third party, and you have consented to us sending information (for example social media sites or other third-party application providers);
7. third parties for marketing purposes (e.g., our partners and other third parties with whom we work and whose products or services we think will interest you in the operation of your business activities. For example, financial services organisations (such as banks, insurers, finance providers), payment solutions providers, software and services providers that provide business solutions);
8. To Protect Us and Others – We also may disclose the information we collect from you where we believe it is necessary to investigate, prevent, or take action regarding illegal activities, suspected fraud, situations involving potential threats to the safety of any person, violations of this Privacy Notification, or as evidence in litigation in which we are involved.
9. Government – Government bodies, regulators and any other third party necessary to meet our legal and regulatory obligations.
10. Professional Advisors – our own professional advisors and auditors for the purpose of seeking professional advice or to meet our audit responsibilities.

Your Rights as a Data Subject.

As a Data Subject in terms of the POPIA Act, you do have the following rights:

1.         Right to be Notified:

The right to be notified that –

• Personal Information about you is being collected – our Section 18 Privacy Notification; and
• your Personal Information has been accessed or acquired by an unauthorised person;

2.      Right of Access:

The right to establish whether we hold Personal Information of you and to request access to your Personal Information – use our form 4.8 PAIA Form C – Request for Access to Record of Private Body;