POPIA Policy
Effective Date: November 2025 Company: Emcol (Pty) Ltd (“Emcol”, “we”, “our”, “us”) Website: https://www.emcol.co.za
1. Purpose of This Policy
Emcol (Pty) Ltd respects your right to privacy and complies with the (“POPIA”). This policy explains how we collect, store, protect, and use personal information. It outlines the principles we follow to ensure lawful processing and the rights of individuals whose personal data we handle (“data subjects”).2. Scope
This Policy applies to all personal information collected and processed by Emcol, including that of clients, employees, suppliers, contractors, and website visitors. It covers both digital and manual data processing performed by Emcol or its authorised representatives.3. Definition of Personal Information
Under POPIA, “personal information” refers to any information relating to an identifiable, living person or legal entity. This includes, but is not limited to:- Full name, identity number, or registration number
- Contact details (email, phone, physical address)
- Employment, financial, or educational details
- Biometric data, correspondence, or online identifiers (e.g., IP addresses)
4. Lawful Processing Principles
Emcol processes personal information lawfully, fairly, and transparently. We adhere to the following POPIA principles:
- We take responsibility for ensuring compliance with POPIA.
- Data is collected only for valid, lawful purposes and processed with consent where required.
- Information is collected for specific, clearly defined objectives.
- Data will not be processed in ways incompatible with its original purpose.
- We ensure that all personal information is accurate, complete, and up to date.
- Data subjects are informed when their information is collected and for what purpose.
- Reasonable measures protect personal information against loss, damage, or unauthorised access.
- Individuals may access and correct their personal data held by Emcol.
5. Collection and Use of Personal Information
Emcol collects personal information only when necessary for legitimate business operations, such as:- Providing and managing services or training programmes
- Processing job applications and maintaining employment records
- Maintaining client, supplier, and partner relationships
- Complying with contractual, legal, or regulatory obligations
6. Security Safeguards
Emcol employs technical and organisational measures to protect personal information against:- Loss, damage, or destruction
- Unauthorised access or disclosure
- Alteration or unlawful processing
7. Retention of Personal Information
Personal information is retained only as long as necessary to fulfil its original purpose or as required by law. Once it is no longer needed, information is securely deleted or anonymised.8. Rights of Data Subjects
Under POPIA, you have the right to:- Be informed when your personal information is collected
- Request access to your personal information held by Emcol
- Request correction, updating, or deletion of inaccurate data
- Object to the processing of your personal information under certain circumstances
- Lodge a complaint with the Information Regulator (South Africa)
9. Cross-Border Transfers
When personal information is transferred outside South Africa (e.g., for cloud storage or international partnerships), Emcol ensures that the receiving party upholds equivalent data protection standards consistent with POPIA.10. Contact Us
This POPIA Policy was last updated in November 2025.