1. Introduction

GH Legacy (Pty) Ltd (“we”, “us” or “our”) is committed to protecting your personal information and respecting your right to privacy. This Privacy Policy sets out how we collect, use, disclose and safeguard the personal information of users of our website at www.ghlegacy.co.za (the “Website”).

This Policy has been prepared in accordance with the Protection of Personal Information Act 4 of 2013 (“POPIA”) and any other applicable South African privacy laws. By using the Website, you acknowledge that you have read and understood this Policy.

2. Responsible Party

The responsible party for purposes of POPIA is:

Name: GH Legacy (Pty) Ltd

Website: www.ghlegacy.co.za

Email: heila@ghlegacy.co.za

Information Officer: Heila Rademan

3. Personal Information We Collect

We may collect and process the following categories of personal information:

Identifying information, such as your full names, identity or passport number, and date of birth.
Contact details, such as your postal address, email address and telephone number.
Information you provide when completing enquiry, registration or contact forms on the Website.
Financial information where relevant to a product, service or transaction you have requested.
Technical information, including your IP address, browser type, device information and pages visited, collected through cookies and similar technologies.
Any other information you voluntarily provide to us through the Website or in related correspondence.

4. How We Collect Personal Information

We collect personal information directly from you when you interact with the Website, complete online forms, subscribe to communications, or otherwise correspond with us. We may also collect information automatically through cookies and analytics tools, and from third parties where lawful and reasonably necessary.

5. Purposes for Which We Process Your Information

We process personal information for the following purposes:

To respond to enquiries and communicate with you.
To provide, administer and improve our products and services.
To comply with our legal, regulatory and contractual obligations.
To verify your identity and to prevent fraud or misuse of our services.
To send you marketing communications where you have consented or where we are otherwise permitted by law.
To analyse usage of the Website and to improve its functionality and user experience.

6. Lawful Basis for Processing

We process personal information on one or more of the following lawful bases recognised under POPIA: with your consent; for the conclusion or performance of a contract to which you are a party; because processing is necessary for compliance with a legal obligation; to protect your legitimate interests; or for the pursuit of our legitimate interests or those of a third party, subject to your rights.

7. Disclosure and Sharing of Personal Information

We do not sell your personal information. We may share personal information with:

Our employees, contractors and operators who require access in order to perform their duties, subject to appropriate confidentiality obligations.
Service providers who assist us with hosting, IT, communications, analytics, payment processing and related services.
Professional advisors, including attorneys, auditors and accountants, where necessary.
Regulatory, statutory or law enforcement bodies where required by law or pursuant to a lawful request.
Any other party to whom you have expressly consented to such disclosure.

8. Cross-Border Transfers

Where personal information is transferred outside of the Republic of South Africa, we will ensure that the transfer complies with section 72 of POPIA, including by procuring appropriate safeguards such as binding agreements or transferring only to jurisdictions that provide an adequate level of protection.

9. Retention of Personal Information

We retain personal information only for as long as is necessary to fulfil the purposes for which it was collected, or as required by law. When retention is no longer justified, we will destroy, delete or de-identify the information in a secure manner.

10. Security Safeguards

We have implemented reasonable technical and organisational measures to secure personal information against loss, unauthorised access, interference, modification or disclosure. While we take these measures seriously, no method of transmission over the internet or electronic storage is completely secure and we cannot guarantee absolute security.

11. Cookies and Similar Technologies

The Website uses cookies and similar technologies to enhance user experience, analyse traffic and remember your preferences. You may disable cookies through your browser settings, but doing so may affect the functionality of the Website.

12. Your Rights Under POPIA

Subject to POPIA, you have the right to:

Be notified that your personal information is being collected or has been accessed by an unauthorised person.
Request access to the personal information we hold about you.
Request correction, deletion or destruction of your personal information.
Object to the processing of your personal information on reasonable grounds.
Withdraw your consent at any time, where processing is based on consent.
Submit a complaint to the Information Regulator of South Africa.

To exercise any of these rights, please contact our Information Officer using the details provided above.

13. Direct Marketing

We will only send you direct marketing communications where you have consented to receive them or where we are otherwise permitted to do so by law. You may opt out of receiving marketing communications from us at any time by following the unsubscribe instructions in any communication, or by contacting us directly.

14. Children

The Website is not intended for children under the age of 18. We do not knowingly collect personal information from minors without the consent of a competent person. If you become aware that a minor has provided us with personal information without such consent, kindly contact us and we will take appropriate steps to delete the information.

15. Changes to This Policy

We may amend this Policy from time to time to reflect changes in our practices or in applicable law. The most recent version will be posted on the Website with the effective date. Your continued use of the Website after any amendments constitutes acceptance of the revised Policy.

16. Contact Us

Should you have any questions, concerns or requests relating to this Policy or your personal information, kindly contact us at:

GH Legacy (Pty) Ltd

Attention: The Information Officer

Email: heila@ghlegacy.co.za

Website: www.ghlegacy.co.za

17. Information Regulator

You may also lodge a complaint with the Information Regulator of South Africa:

Information Regulator (South Africa)

Website: https://inforegulator.org.za

Email: complaints.IR@justice.gov.za