Privacy Policy

CBU Holdings (Pty) Ltd (“CBU Holdings”, “we”, “us” or “our”) operates the group website at cbuholdings.com. This policy also applies to cbuholdings.co.za where that domain provides the same website or redirects visitors to it.

For purposes of the Protection of Personal Information Act 4 of 2013 (“POPIA”), CBU Holdings (Pty) Ltd is the responsible party for processing for which it determines the purposes and means.

Business address: 60 Inry St, Springbok, 8240, Northern Cape, South Africa. Our privacy contact and Information Officer details appear below.

This website introduces the CBU divisions. A division name does not, by itself, identify a separate legal entity. The entity handling your enquiry or providing a service will be identified in the relevant correspondence, quotation or agreement.

Depending on your interaction with us, we may process:

• Your name, job title, company and contact details.
• Enquiry details, service requirements and correspondence.
• Site, delivery or project information you provide.
• Photographs, drawings, specifications or documents you send us.
• Technical information processed by website infrastructure, such as IP address, request time, browser information and security logs.
• Information needed to administer a business relationship or meet applicable legal obligations.

We generally receive information directly from you by email, telephone or other communications. We may also receive it from an authorised representative, a relevant division handling your request, or infrastructure providers.

Please only provide information about others where you are authorised or otherwise legally entitled to do so.

We may use personal information to:

• Respond to your enquiry and direct it to the relevant team.
• Prepare quotations, proposals and service communications.
• Administer customer, supplier and business relationships.
• Operate, secure and maintain our websites and systems.
• Maintain necessary business and legal records.
• Comply with applicable laws and lawful requests.

Depending on the purpose, processing may be based on your consent, steps necessary to conclude or perform a contract, a legal obligation, or the legitimate interests of you, CBU Holdings or another party, where POPIA permits.

Providing enquiry information is generally voluntary. If you do not provide details needed to respond or prepare a quotation, we may be unable to assist. Where information is legally required, we will explain that requirement when collecting it.

Electronic direct marketing, if undertaken, must meet POPIA’s applicable requirements. You may object to direct marketing or withdraw marketing consent.

Information supplied about equipment, fabrication, transport, plant hire or other projects may be used to understand your requirements, route your enquiry and support an assessment or quotation.

Send only information necessary for the request. Before sharing commercially sensitive drawings, site-security information or other confidential material, contact the relevant team to agree an appropriate submission method and any additional confidentiality terms.

Sending an enquiry does not itself create a service contract. This does not remove our obligations to protect personal information under applicable law.

Website infrastructure may process technical request and security information to deliver pages, prevent abuse and diagnose errors. This may occur without cookies.

Cookies are small files stored on your device. Their use depends on the features and services enabled on the website. Where cookies or analytics tools are used, information about their purposes and available choices should be provided through the website’s cookie notice.

You can manage cookies through your browser settings. Blocking cookies may affect features that depend on them. This policy does not itself constitute consent to tracking or replace any consent required for particular processing.

We may share relevant information with the CBU team or entity best placed to handle your request, including CBU Engineering, where necessary and lawfully permitted. We limit sharing to information relevant to that purpose.

We may also use providers supporting hosting, website maintenance, communications, information security, professional advice and business administration.

Providers processing personal information on our behalf must be subject to appropriate confidentiality, security and processing obligations. An entity processing information for its own purposes may be a separate responsible party.

Information may be disclosed where required by law, a court order or a lawful regulatory request, or where lawfully necessary to establish, exercise or defend rights.

Hosting, communications or other providers may process information outside South Africa.

Any transfer must satisfy section 72 of POPIA, for example through adequate protection under applicable law or a binding agreement, your consent, or another permitted contractual or statutory ground.

You may contact us for information about overseas processing relevant to your personal information.

We must take appropriate, reasonable technical and organisational measures to protect personal information against loss, damage, unlawful access and unauthorised processing. No online transmission or system can be guaranteed completely secure.

Where there are reasonable grounds to believe personal information has been accessed or acquired by an unauthorised person, we will address notification to the Information Regulator and affected data subjects as required by POPIA.

Information is retained only for as long as necessary for its purpose or as otherwise lawfully permitted. Relevant factors include ongoing enquiries, contractual obligations, statutory record requirements and disputes. When retention is no longer justified, information should be securely deleted, destroyed or de-identified.

Subject to applicable law, you may:

• Request confirmation, free of charge, of whether we hold your personal information.
• Request access to your information and relevant disclosure records.
• Request correction or deletion of inaccurate, excessive, outdated or unlawfully obtained information.
• Object to processing where POPIA permits.
• Withdraw consent where processing relies on consent.
• Object to processing for direct marketing.
• Lodge a complaint with the Information Regulator.

Withdrawal of consent does not affect earlier lawful processing or processing supported by another lawful ground. We may verify your identity before responding. Access requests may be subject to applicable PAIA procedures, lawful fees and statutory exceptions.

This website is intended for business users and adults. It is not designed to solicit children’s personal information. If you believe a child has supplied personal information, contact us so that we can investigate and take appropriate action in accordance with POPIA.

Division links may take you to cbuengineering.co.za. Information submitted on that website is governed by its privacy policy and the responsible party identified there. Opening a link does not itself submit your enquiry information from Holdings to that website.

Other external services, including maps, may process information when you visit them. Review their privacy notices before supplying information.

We may revise this policy as practices or legal requirements change. The updated date identifies this version. Material changes will be communicated where required.

Address privacy requests to the Information Officer of CBU Holdings (Pty) Ltd using the details below. Written correspondence may also be delivered to 60 Inry St, Springbok, 8240, Northern Cape, South Africa, marked “For the attention of the Information Officer”.

Describe your request and provide enough information for us to respond. Do not send identity documents unless requested through an appropriate channel.

You may lodge a complaint directly with the Information Regulator (South Africa). Visit inforegulator.org.za for current complaint procedures and contact details. General enquiries: enquiries@inforegulator.org.za ; 010 023 5200.