1. PURPOSE

Drizit (“Drizit”, “we”, “our”, or “us”) is committed to protecting the privacy, confidentiality, and security of personal information entrusted to us by our clients, employees, contractors, suppliers, website visitors, and other stakeholders.

This Privacy Policy explains how we collect, process, use, store, disclose, and protect personal information in accordance with the Protection of Personal Information Act, 4 of 2013 (“POPIA”) and other applicable legislation.

By accessing our website, engaging our services, or providing personal information to Drizit, you acknowledge that you have read and understood this Privacy Policy.

2. SCOPE

This Privacy Policy applies to:

• Website visitors;
• Clients and prospective clients;
• Employees and prospective employees;
• Contractors and subcontractors;
• Suppliers and service providers;
• Tender participants;
• Any person whose personal information is processed by Drizit.

3. DEFINITIONS

Personal Information

Personal information means information relating to an identifiable, living natural person and, where applicable, an identifiable juristic person, including but not limited to:

• Names and surnames;
• Identity or passport numbers;
• Contact information;
• Physical and postal addresses;
• Email addresses;
• Telephone numbers;
• Banking details;
• Employment information;
• Training and competency records;
• Health and medical fitness information where legally required;
• CCTV footage and site access records;
• Any other information protected under POPIA.

Processing

Processing refers to any operation involving personal information, including collection, recording, storage, updating, retrieval, use, dissemination, restriction, or destruction.

4. OUR COMMITMENT TO PRIVACY

Drizit is committed to:

• Processing personal information lawfully, fairly, and transparently;
• Collecting only information necessary for legitimate business purposes;
• Maintaining the accuracy and integrity of personal information;
• Implementing appropriate technical and organisational security measures;
• Respecting the rights of data subjects;
• Complying with all applicable data protection legislation.

5. INFORMATION WE COLLECT

We may collect and process the following categories of information:

Client Information

• Names and contact details;
• Company details;
• Billing information;
• Delivery addresses;
• Contractual information;
• VAT numbers.

Employee and Contractor Information

• Identification documents;
• Employment records;
• Payroll information;
• Qualifications and training records;
• Medical fitness certificates;
• Competency certifications;
• Criminal screening results where legally permitted.

Supplier Information

• Company registration details;
• Banking information;
• Tax information;
• Contact details.

Website Information

When visiting our website, we may automatically collect:

• IP addresses;
• Browser information;
• Device information;
• Geographic location data;
• Website usage statistics;
• Cookies and tracking information.

6. HOW WE COLLECT INFORMATION

Personal information may be collected:

• Directly from you;
• Through website forms;
• Through employment applications;
• During client onboarding;
• Through contractual engagements;
• Through tender submissions;
• Through supplier registration processes;
• Through CCTV systems and access control systems;
• Through cookies and analytics technologies.

7. LEGAL BASIS FOR PROCESSING

Drizit processes personal information only when:

• Consent has been obtained;
• Processing is necessary to fulfil a contract;
• Processing is required by law;
• Processing protects a legitimate interest of the data subject;
• Processing is necessary for Drizit’s legitimate business interests;
• Processing is required to comply with occupational health, safety, environmental, labour, tax, or regulatory obligations.

8. HOW WE USE PERSONAL INFORMATION

Personal information may be used for:

Service Delivery

• Providing products and services;
• Managing projects and contracts;
• Delivering customer support.

Business Administration

• Processing payments;
• Managing accounts;
• Maintaining records;
• Conducting audits.

SHEQ and Compliance Management

• Safety file administration;
• Contractor management;
• Legal compliance verification;
• Training and competency verification;
• Incident investigation and reporting.

Human Resources

• Recruitment;
• Employment administration;
• Payroll administration;
• Performance management.

Marketing and Communications

• Newsletters;
• Service updates;
• Industry information;
• Promotional communications.

Recipients may opt out of marketing communications at any time.

Website Analytics

We may use tools such as Google Analytics to monitor website performance and improve user experience.

9. COOKIES AND WEBSITE TRACKING

Our website may use cookies and similar technologies to:

• Improve website functionality;
• Analyse website traffic;
• Enhance user experience;
• Remember user preferences.

Users may disable cookies through browser settings; however, certain website features may not function correctly.

10. DISCLOSURE OF PERSONAL INFORMATION

Drizit does not sell personal information.

We may share personal information with:

• Service providers;
• IT support providers;
• Payroll administrators;
• Professional advisors;
• Regulatory authorities;
• Government departments;
• Auditors;
• Legal representatives;
• Clients where contractually required.

All third parties are required to maintain appropriate confidentiality and security standards.

11. INTERNATIONAL TRANSFERS

Certain service providers, including cloud hosting and analytics providers, may process information outside South Africa.

Where international transfers occur, Drizit will take reasonable steps to ensure that personal information receives an adequate level of protection consistent with POPIA requirements.

12. INFORMATION SECURITY

Drizit implements appropriate technical and organisational measures to safeguard personal information, including:

• Access control procedures;
• Password protection;
• Encryption technologies where appropriate;
• Secure data storage;
• Antivirus and endpoint protection;
• Network security controls;
• Backup and recovery procedures;
• Confidentiality agreements;
• Controlled document retention and disposal practices.

While reasonable measures are implemented, no electronic system can be guaranteed to be completely secure.

13. DATA RETENTION

Personal information will be retained only for as long as necessary to:

• Fulfil contractual obligations;
• Meet legal requirements;
• Comply with regulatory obligations;
• Resolve disputes;
• Support legitimate business operations.

Information that is no longer required will be securely destroyed or anonymised.

14. DATA SUBJECT RIGHTS

Subject to applicable law, individuals have the right to:

• Request access to personal information;
• Request correction of inaccurate information;
• Request deletion of information where legally permissible;
• Object to certain processing activities;
• Withdraw consent where processing is based on consent;
• Request restriction of processing;
• Submit complaints regarding privacy practices.

Requests may be submitted to the Information Officer.

15. CHILDREN’S INFORMATION

Drizit does not knowingly collect personal information from minors unless authorised by a parent, legal guardian, or otherwise permitted by law.

Should we become aware that information has been collected unlawfully from a minor, appropriate steps will be taken to remove such information.

16. DATA BREACH MANAGEMENT

In the event of a personal information security breach that may compromise the rights or interests of affected individuals, Drizit will:

• Investigate the incident;
• Take corrective action;
• Notify affected parties where required;
• Notify relevant authorities where legally required.

17. COMPLAINTS

Any person who believes that their personal information has been processed unlawfully may submit a complaint to Drizit’s Information Officer.

Complaints may also be submitted to the Information Regulator (South Africa).

18. INFORMATION OFFICER

Information Officer:

Sindy Du Preez

Email: sindy@drizit.co.za

The Information Officer is responsible for overseeing compliance with privacy and data protection requirements and handling requests relating to personal information.

19. CHANGES TO THIS POLICY

Drizit reserves the right to amend this Privacy Policy from time to time.

Any updates will be published on our website and will become effective upon publication unless otherwise stated.

20. CONTACT DETAILS

For any questions, requests, or concerns regarding this Privacy Policy or the processing of personal information, please contact:

Drizit Environmental (Pty) Ltd

Email: sales@drizit.co.za

Information Officer: sindy@drizit.co.za

APPROVAL

This Privacy Policy is approved by Drizit management and applies to all personal information processed by the organisation.