POPIA Privacy Policy and Consent Notice

Construction Safety Solutions respects your privacy and is committed to protecting your personal information in accordance with the Protection of Personal Information Act 4 of 2013, commonly known as POPIA.

This Privacy Policy explains how we collect, use, store, protect, share, and retain your personal information when you register on our website, create a user profile, purchase products or services, upload documents, or provide payment-related information.

POPIA requires responsible parties to process personal information lawfully, transparently, and securely, and to inform users when personal information is collected.

When you register, purchase, or use our website, we may collect the following personal information:

Construction Safety Solutions does not intentionally store full bank card numbers, CVV numbers, online banking passwords, or sensitive payment authentication details. Payments should be processed through a secure third-party payment gateway.

We collect and process your personal information for the following purposes:

• To register and manage your user account
• To verify your identity and account access
• To process orders, invoices, quotations, and payments
• To provide access to purchased digital products, templates, documents, training materials, apps, or services
• To communicate with you about your account, orders, subscriptions, support requests, or service updates
• To manage contractor safety, compliance, training, audit, or health and safety-related services where applicable
• To keep records required for legal, tax, accounting, contractual, and business purposes
• To improve our website, products, services, and user experience
• To prevent fraud, unauthorised access, misuse, or security breaches
• To comply with applicable South African laws and regulatory requirements

Construction Safety Solutions processes personal information where:

• You have provided consent;
• Processing is necessary to create or manage your user account;
• Processing is necessary to provide products or services you have requested;
• Processing is necessary to process payment and complete a transaction;
• Processing is required by law;
• Processing is necessary for our legitimate business interests, provided your rights are not unfairly affected; or
• Processing is necessary to protect the rights, safety, or legal interests of Construction Safety Solutions, its users, clients, or third parties.

When you purchase a product or service through our website, payment may be handled by a third-party payment provider.

Construction Safety Solutions may receive confirmation of payment, transaction references, order values, and payment status, but we do not require users to provide full card security information directly to us.

Users are responsible for ensuring that the payment information they provide is accurate and authorised for use.

We will not sell your personal information.

We may share your personal information only where necessary with:

• Payment gateway providers
• Website hosting providers
• IT support providers
• Cloud storage and software service providers
• Accounting, tax, legal, or compliance service providers
• Employees or authorised representatives of Construction Safety Solutions
• Regulatory authorities, law enforcement, or other parties where required by law

Where third-party service providers process personal information on our behalf, they are expected to maintain confidentiality and apply appropriate security measures.

Construction Safety Solutions will take reasonable technical and organisational measures to protect personal information against loss, damage, unauthorised access, unlawful processing, disclosure, alteration, or destruction.

These measures may include:

• Secure user authentication
• Password protection
• Access control
• Secure payment gateway processing
• Data backup procedures
• Antivirus and security monitoring
• Limited access to authorised persons only
• Secure storage of user and transaction records
• Regular review of system and data protection controls

POPIA requires responsible parties to secure the integrity and confidentiality of personal information through appropriate and reasonable technical and organisational measures.

We will retain personal information only for as long as necessary for the purpose for which it was collected, unless longer retention is required by law, contract, accounting requirements, tax obligations, audit purposes, dispute resolution, or legitimate business requirements.

When personal information is no longer required, we will securely delete, destroy, anonymise, or restrict access to it where reasonably possible.

You have the right to:

• Request access to the personal information we hold about you;
• Request correction of inaccurate, outdated, incomplete, or misleading information;
• Request deletion of personal information where legally permitted;
• Object to certain processing of your personal information;
• Withdraw consent where processing is based on consent;
• Request proof of authorisation where your information is processed by a third party on our behalf; and
• Lodge a complaint with the Information Regulator of South Africa.

POPIA provides data subjects with rights relating to notification, access, correction, deletion, objection, and complaints regarding the processing of personal information.

Construction Safety Solutions may send marketing communication only where permitted by law or where you have provided consent.

You may unsubscribe from marketing communication at any time by using the unsubscribe option or contacting us directly.

Marketing consent should be separate from registration and payment consent.

Our website may use cookies, analytics tools, and similar technologies to improve website performance, remember user preferences, analyse website traffic, support account login functionality, and improve services.

You may adjust your browser settings to block or delete cookies. Some website features may not work properly if cookies are disabled.

Where website hosting, cloud storage, payment processing, email systems, or software service providers are located outside South Africa, your personal information may be processed or stored in another country.

Where this occurs, Construction Safety Solutions will take reasonable steps to ensure that appropriate data protection safeguards are in place.

If we become aware of a security compromise involving personal information, we will take reasonable steps to investigate, contain, and address the incident.

Where required by POPIA, we will notify the Information Regulator and affected data subjects. POPIA section 22 deals with notification of security compromises.

You confirm that the personal information you provide is accurate, complete, and up to date.

Where you provide personal information on behalf of another person, employee, contractor, company, or client, you confirm that you are authorised to provide that information and that the relevant person has been informed of this Privacy Policy.

Our website, products, and services are intended for business, professional, training, and construction health and safety-related use.

Users under the age of 18 may not register or provide personal information unless assisted or authorised by a parent, guardian, or legally authorised representative.

Construction Safety Solutions may update this Privacy Policy from time to time to reflect changes in legal requirements, business operations, website functionality, or services.

The latest version will be displayed on our website. Continued use of the website after updates means you accept the revised policy.

For questions, access requests, correction requests, deletion requests, objections, or POPIA-related complaints, contact:

You may also lodge a complaint with the Information Regulator of South Africa if you believe your personal information has been processed unlawfully.