Legal
Privacy Policy
Mphahlele Unlimited (Pty) Ltd respects your privacy and is committed to protecting the personal information you share with us. This policy explains what we collect, why we collect it, how we use and safeguard it, and the rights you have over it under the Protection of Personal Information Act 4 of 2013 (POPIA).
Before publishing: the items marked in square brackets below must be completed with your company's actual details, and this document should be reviewed by a qualified attorney. It is a well-structured starting point, not legal advice, and it must be checked against how your business actually handles data.
1. Who We Are
Mphahlele Unlimited (Pty) Ltd ("Mphahlele Unlimited", "we", "us" or "our") is a multi-subsidiary company registered in the Republic of South Africa, operating a Technology Division and a Logistics Division.
For the purposes of POPIA, we are the responsible party for the personal information described in this policy.
- Registered name: Mphahlele Unlimited (Pty) Ltd
- Registration number: [COMPANY REGISTRATION NUMBER]
- Registered address: [REGISTERED PHYSICAL ADDRESS]
- Information Officer: [NAME OF INFORMATION OFFICER]
- Email: info@mphahleleunlimited.co.za
2. Information We Collect
We collect personal information in the following ways.
Information you give us directly
- Your name and surname
- Your email address and telephone number
- The service you are enquiring about
- The content of any message, brief or enquiry you send us
- Company name and role, where you provide it
Information we collect automatically
- Your IP address and approximate location
- Browser type, device type and operating system
- Pages visited, time spent and referring website
Information related to our services
Where you engage us for technology or logistics work, we may process additional information necessary to deliver that service — for example delivery addresses and consignment details for logistics work, or system and user data where we are appointed to build or maintain software. Where we process such information on your behalf, we act as an operator under POPIA and process it only on your documented instruction.
3. How We Use Your Information
We use personal information for the following purposes:
- To respond to enquiries submitted through our contact form
- To prepare quotations, proposals and scopes of work
- To deliver the technology and logistics services you engage us for
- To manage our contractual relationship with you, including invoicing
- To provide support and communicate about active projects
- To improve our website, services and internal processes
- To comply with our legal, tax and regulatory obligations
We do not sell your personal information, and we do not use it for automated decision-making that produces legal consequences for you.
4. Lawful Basis for Processing
We process personal information where:
- You have given consent — for example, by submitting our contact form
- Processing is necessary to conclude or perform a contract with you
- Processing is required to comply with an obligation imposed by law
- Processing protects our legitimate interests, or those of a third party, in a way that does not override your rights
Where we rely on consent, you may withdraw it at any time by contacting us. Withdrawing consent does not affect processing already carried out.
5. Sharing and Disclosure
We do not sell, rent or trade personal information. We may share it in limited circumstances:
- Service providers and operators — hosting providers, email and communication platforms, and analytics providers who process information on our behalf under written agreement
- Subsidiaries and divisions — within the Mphahlele Unlimited group, where necessary to deliver an integrated service
- Subcontractors — logistics partners, couriers or specialist technical contractors engaged to fulfil your instructions
- Legal and regulatory — where disclosure is required by law, court order or a lawful request from a competent authority
- Business transfers — in connection with a merger, acquisition or sale of assets, subject to this policy continuing to apply
6. Cross-Border Transfers
Some of the service providers we use — for example website hosting, email and analytics — may store or process information on servers outside South Africa. Where personal information is transferred across borders, we take reasonable steps to ensure the recipient is subject to laws, binding agreements or corporate rules that provide an adequate level of protection, as required by section 72 of POPIA.
To confirm: list the actual third-party processors you use (for example your hosting provider, email platform and analytics tool) and where they store data, so this section reflects reality.
7. How We Protect Information
We maintain appropriate, reasonable technical and organisational measures to prevent loss of, damage to, or unauthorised destruction of personal information, and to prevent unlawful access to or processing of it. These include encrypted connections to our website, access controls, and limiting access to personal information to staff who need it to perform their duties.
No method of transmission or storage is completely secure. While we work to protect your information, we cannot guarantee absolute security. If a security compromise affecting your personal information occurs, we will notify you and the Information Regulator as required by section 22 of POPIA.
8. How Long We Keep It
We keep personal information only for as long as necessary to fulfil the purpose it was collected for, or for as long as required by law.
- Enquiries that do not become projects — [RETENTION PERIOD, e.g. 24 months]
- Client and project records — for the duration of the engagement plus [RETENTION PERIOD]
- Financial and tax records — five years, as required by the Tax Administration Act
Once the retention period ends, we securely delete or de-identify the information.
9. Your Rights
Under POPIA you have the right to:
- Be told whether we hold personal information about you, and request access to it
- Request that inaccurate, irrelevant, excessive, outdated or incomplete information be corrected or deleted
- Object to the processing of your personal information on reasonable grounds
- Withdraw consent where processing is based on consent
- Object to direct marketing, including unsolicited electronic communications
- Lodge a complaint with the Information Regulator
To exercise any of these rights, contact us using the details in section 13. We may need to verify your identity before acting on a request. Requests for access to information are handled under the Promotion of Access to Information Act 2 of 2000 (PAIA).
You may also complain directly to the Information Regulator (South Africa) via inforegulator.org.za.
10. Cookies and Analytics
Our website loads fonts and icons from third-party content delivery networks (Google Fonts and unpkg), which may record your IP address as part of serving those files. We use cookies and similar technologies only where they support the functioning of the site or help us understand how it is used.
Most browsers let you refuse or delete cookies through their settings. Disabling cookies may affect how parts of the site work.
To confirm: if you add Google Analytics, Meta Pixel or any similar tracking, this section must be expanded and a cookie consent banner added before those scripts load.
11. Children's Information
Our website and services are directed at businesses and adults. We do not knowingly collect personal information of children under 18 without the consent of a competent person. If you believe we have collected such information, contact us and we will delete it.
12. Changes to This Policy
We may update this policy from time to time to reflect changes in our practices or in the law. The revised version will be published on this page with an updated date. Where changes are material, we will take reasonable steps to notify you directly.
13. Contact Us
For questions about this policy, or to exercise any of your rights, contact our Information Officer:
- info@mphahleleunlimited.co.za
- +27 76 368 6294
- South Africa (Worldwide)