{"id":6462,"date":"2021-07-21T15:46:06","date_gmt":"2021-07-21T13:46:06","guid":{"rendered":"https:\/\/www.bosbrands.com\/za\/?page_id=6462"},"modified":"2025-10-08T08:13:17","modified_gmt":"2025-10-08T06:13:17","slug":"privacy-policy-popi-2","status":"publish","type":"page","link":"https:\/\/www.bosbrands.com\/za\/privacy-policy-popi-2\/","title":{"rendered":"Privacy Policy – POPI"},"content":{"rendered":"\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t

PRIVACY POLICY<\/h1>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

ABSTRACT<\/strong><\/p>

This document serves as the Privacy Policy (\u201cpolicy\u201d) of BOS BRANDS (PTY) LTD. We acknowledge that the protection and processing of personal information has become a global phenomenon and poses great risks. We acknowledge that the right to privacy enshrined in section 14 of the Constitution of the Republic of South Africa, 1996 (\u201cConstitution\u201d) forms the cornerstone of protection of personal information and must provide guidance on how we process personal information.<\/span><\/p>

Compliance with POPI is required as of 30 June 2021 and our team is committed to complying with its provisions in fulfilment of our clients\u2019 instructions. We acknowledge our clients\u2019 right to protection against the unlawful collection, retention, dissemination and use of personal information, subject to justifiable limitations that are aimed at protecting other rights and important interests.<\/span><\/p>

INDEX<\/span><\/p>

  1. KEY DEFINITIONS<\/span><\/li>
  2. INFORMATION OFFICER (INTERNAL)<\/span><\/li>
  3. INFORMATION REGULATOR (EXTERNAL)<\/span><\/li>
  4. ACTION PLAN AND INFORMATION POLICIES<\/span><\/li>
  5. DESCRIPTION OF BUSINESS ACTIVITIES<\/span><\/li>
  6. PROCESSING OF PERSONAL INFORMATION<\/span><\/li>
  7. RETENTION AND DELETION OF PERSONAL INFORMATION<\/span><\/li>
  8. GROUNDS FOR PROCESSING PERSONAL INFORMATION<\/span><\/li>
  9. GROUNDS FOR PROCESSING SPECIAL PERSONAL INFORMATION<\/span><\/li>
  10. YOUR RIGHTS<\/span><\/li>
  11. YOUR DUTY<\/span><\/li>
  12. FORMS\u00a0<\/span><\/li>
  13. CONDITIONS FOR THE LAWFUL PROCESSING OF PERSONAL INFORMATION<\/span>
    <\/span>13.1.\u00a0 ACCOUNTABILITY<\/span>
    <\/span>13.2.\u00a0 PROCESSING LIMITATION<\/span>
    <\/span>13.3.\u00a0 PURPOSE SPECIFICATION<\/span>
    <\/span>13.4.\u00a0 FURTHER PROCESSING LIMITATION<\/span>
    <\/span>13.5.\u00a0 INFORMATION QUALITY<\/span> 13.6.\u00a0 OPENNESS<\/span>
    <\/span>13.7.\u00a0 SECURITY SAFEGUARDS<\/span>
    <\/span>13.8.\u00a0 DATA SUBJECT PARTICIPATION<\/span><\/li>
  14. STEPS IN EVENT OF A COMPROMISE\u00a0<\/span><\/li>
  15. CROSS-BORDER TRANSMISSION OF PERSONAL INFORMATION <\/span><\/li>
  16. PERSONAL INFORMATION OF CHILDREN <\/span><\/li>
  17. ACCOUNT NUMBERS <\/span><\/li>
  18. NEWSLETTERS AND DIRECT MARKETING\u00a0<\/span><\/li>
  19. CONCLUSION<\/span>
    <\/span><\/li><\/ol>
    1. KEY DEFINITIONS<\/strong><\/li><\/ol>

      The following definitions contained in section 1 of POPI are of importance: ‘data subject’ means the person to whom personal information relates; ‘information officer’ means the person(s) as identified in this Policy;<\/span><\/p>

      \u2018personal information\u2019 means information relating to an identifiable, living, natural person, and where it is applicable, an identifiable, existing juristic person, including, but not limited to\u2013<\/span><\/p>

      (a) information relating to the race, gender, sex, pregnancy, marital status, national, ethnic, or social origin, colour, sexual orientation, age, physical or mental health, well- being, disability, religion, conscience, belief, culture, language, and birth of the person;<\/span><\/p>

      (b) information relating to the education or the medical, financial, criminal or employment history of the person;<\/span><\/p>

      (c) any identifying number, symbol, e-mail address, physical address, telephone number, location information, online identifier, or other assignment to the person;<\/span><\/p>

      (d) the biometric information of the person;<\/span><\/p>

      (e) the personal opinions, views, or preferences of the person;<\/span><\/p>

      (f) correspondence sent by the person that is implicitly or explicitly of a private or confidential nature or further correspondence that would reveal the contents of the original correspondence;<\/span><\/p>

      (g) the views or opinions of another individual about the person; and<\/span><\/p>

      (h) the name of the person if it appears with other personal information relating to the person or if the disclosure of the name itself would reveal information about the person;<\/span><\/p>

      (i) ‘processing’ means any operation or activity or any set of operations, whether or not by automatic means, concerning personal information, including-<\/span><\/p>

      (a) the collection, receipt, recording, organisation, collation, storage, updating or modification, retrieval, alteration, consultation or use;<\/span><\/p>

      (b) dissemination by means of transmission, distribution or making available in any other form; or<\/span><\/p>

      (c) merging, linking, as well as restriction, degradation, erasure or destruction of information;\u00a0<\/span><\/p>

      ‘record’ means any recorded information-<\/span><\/p>

      (a) regardless of form or medium, including any of the following: (i) Writing on any material;<\/span><\/p>

      (ii) information produced, recorded or stored by means of any tape-recorder, computer equipment, whether hardware or software or both, or other device, and any material subsequently derived from information so produced, recorded or stored;<\/span><\/p>

      (iii) label, marking or other writing that identifies or describes any thing of which it forms part, or to which it is attached by any means;<\/span><\/p>

      (iv) book, map, plan, graph or drawing;(v) photograph, film, negative, tape or other device in which one or more visual images are embodied so as to be capable, with or without the aid of some other equipment, of being reproduced;<\/span><\/p>

      (b) in the possession or under the control of a responsible party; (c) whether or not it was created by a responsible party; and (d) regardless of when it came into existence;<\/span><\/p>

      ‘responsible party’ means a public or private body or any other person which, alone or in conjunction with others, determines the purpose of and means for processing personal information;<\/span><\/p>

      \u2018special personal information\u2019 means information relating to the religious or philosophical beliefs, race or ethnic origin, trade union membership, political persuasion, health or sex life or biometric information or the criminal behaviour of a data subject.<\/span><\/p>

      1. INFORMATION OFFICER (internal)<\/strong><\/li><\/ol>

        Should you have any questions\/complaints\/suggestions regarding the processing of personal information, we encourage you to contact our firm\u2019s Information Officer(s):<\/span><\/p>

        Charl Smit 0795282311 charl@bosbrands.com<\/span><\/p>

        You are further invited to contact our Information Officer(s) regarding issues specifically pertaining to –<\/span><\/p>

        1. Any objection to the processing of your personal information<\/span><\/li>
        2. A request for the deletion\/destruction\/correction of your personal information or records; and\/or<\/span><\/li>
        3. The submission of a complaint relating to the processing of your personal information. <\/span><\/li><\/ol>

          Our Information Officer is responsible for encouraging and ensuring compliance with POPI, and will deal with requests relating thereto and work closely with the Information Regulator whenever necessary.<\/span><\/p>

          In addition thereto, our Information Officer will ensure that-<\/span><\/p>

          • a compliance framework is developed, implemented, monitored and maintained;<\/span><\/li>
          • a risk analysis is done every 6 months to ensure continued compliance with POPI;<\/span><\/li>
          • a manual as described in sections 14 and 51 of the Promotion of Access to Information Act 2 of 2000 is developed and maintained;<\/span><\/li>
          • training and awareness sessions are conducted every six months to current<\/span>
            <\/span> employees, and immediately to new employees, on the provisions and application of POPI; and<\/span><\/li>
          • to do all things necessary to ensure compliance with POPI and process requests relating thereto.<\/span><\/li><\/ul>

            Our Information Officer and Deputy Information Officers have been duly appointed by resolution and have been registered accordingly with the Information Regulator.<\/span>
            <\/span><\/p>

            1. INFORMATION REGULATOR (external)<\/strong><\/li><\/ol>

              Should you prefer not to contact our offices directly regarding any personal information related issues, you may forward your complaint\/request directly to the Information Regulator at: inforeg@justice.gov.za<\/span><\/p>

              1. ACTION PLAN AND INFORMATION POLICIES<\/strong><\/li><\/ol>

                We worked closely with our legal representatives to ensure compliance with POPI and the lawful and secure processing of your personal information. This process involved the following steps:<\/span><\/p>

                • Conducting a risk analysis and developing a POPI action plan;<\/span><\/li>
                • Obtaining the necessary board resolutions and appointing our Information Officer and Deputy Information Officer(s);<\/span><\/li>
                • Developing our POPI Policies (see below); and<\/span><\/li>
                • Implementing a strategy and a review process for continued compliance with POPI in future.<\/span><\/li><\/ul>

                  With the assistance of our legal representatives, we have developed and implemented the following policies regulating the processing of personal information in our business-<\/span><\/p>

                  Risk analysis<\/span><\/p>

                  We have identified certain areas that carry more risk than others, specifically relating to those wherein third parties are involved or where mass volumes of electronic data are stored, and have implemented further measures to ensure the security of personal information herein;<\/span><\/p>

                  These measures include cybersecurity checks and updates, and the implementation of Operator Undertakings (see below).<\/span><\/p>

                  • Privacy Policy<\/span>
                    <\/span>An external document (this document) available to outside parties explaining how we process personal information and regulating everything else POPI-related;<\/span>
                    <\/span><\/li><\/ul>

                    POPI Policy<\/strong><\/p>

                    An internal document specifically applicable to our employees wherein they acknowledge that they are aware of the provisions of POPI and undertake to comply with our Information Policies;<\/span><\/p>

                    Internal Guideline highlighting the principles applicable to processing of personal information in our business;<\/span><\/p>

                    Operator Undertakings<\/span><\/p>

                    We have worked closely with third parties who may have access or deal with any personal information held by us and inquired on whether they are aware of the provisions of POPI;<\/span><\/p>

                    These third parties have provided us with undertakings,confirming that they will only process personal information in line with the purpose that it was provided to them for and in line with the principles enshrined in POPI.<\/span><\/p>

                    DESCRIPTION OF BUSINESS ACTIVITIES<\/strong>
                    <\/span>
                    <\/span>We engage in the marketing and sale of Rooibos beverages. We have outsourced manufacturing and distribution. Our focus is to create and market our unique brand through our products to become a globally recognized, proudly South African beverage brand.<\/span>
                    <\/span><\/p>

                      1. PROCESSING OF PERSONAL INFORMATION<\/span>
                        <\/span>
                        <\/span>Section 18 of POPI requires from us to ensure you are aware of the following:<\/span>
                        <\/span><\/li><\/ol><\/li><\/ol>
                        • Your personal information may be processed by us in line with the purpose that it was provided by you for (see \u2018description of business activities\u2019 above) and will be used solely for this purpose; and<\/span>
                          <\/span><\/li><\/ul>
                          • The provision of your personal information is not mandatory, however, take caution that failure to provide us with your information as requested may severely prejudice (or completely prevent) our ability to provide our services.<\/span>
                            <\/span><\/li><\/ul>
                            1. By engaging our services, you therefore consent to us processing your personal information in line with the purpose for which it was provided to us.<\/span><\/li><\/ol>
                                1. RETENTION AND DELETION OF PERSONAL INFORMATION<\/span>
                                  <\/span> You are further advised that your records will be retained by us for a period 5 (five) years from the date of last entry on your file, as required by South African Revenue Service guidelines, after which it will be destroyed and\/or deleted and\/or destructed and\/or de-identified in a manner that prevents its reconstruction in an intelligible form. We will proceed to destroy and\/or delete and\/or destruct the hard copy records by shredding them. Most of our data is however stored in an electronic format.<\/span>
                                  <\/span><\/li>
                                2. GROUNDS FOR PROCESSING PERSONAL INFORMATION<\/span>
                                  <\/span>In conducting our Business Activities as described above, we will generally rely on the following grounds as listed in section 11 of POPI to process your personal information:<\/span>
                                  <\/span><\/li><\/ol><\/li><\/ol>
                                  • Consent;<\/span><\/li><\/ul>
                                    • Processing is necessary to carry out actions for the conclusion or performance of<\/span>
                                      <\/span>a contract;<\/span><\/li><\/ul>
                                      • Processing complies with an obligation imposed on us by law;<\/span>
                                        <\/span><\/li><\/ul>
                                        • To protect a legitimate interest of a data subject; or<\/span>
                                          <\/span><\/li><\/ul>
                                          • Processing is necessary for pursuing a legitimate interest of ours or of a third party to whom the information is supplied.<\/span><\/li><\/ul>
                                            1. GROUNDS FOR PROCESSING SPECIAL PERSONAL INFORMATION<\/strong><\/li><\/ol>

                                              POPI contains a general prohibition on the processing of special personal information, unless one of the exclusions in POPI apply. The categories of special personal information contained in POPI include-<\/span><\/p>

                                              • Religious or philosophical beliefs<\/span><\/li>
                                              • Race or ethnic origin;<\/span><\/li>
                                              • Trade union membership;<\/span><\/li>
                                              • Political persuasion<\/span><\/li>
                                              • Health or sex life or biometric information; and<\/span><\/li>
                                              • Criminal behaviour.<\/span><\/li><\/ul>

                                                We do not process special personal information in the ordinary course of business. The processing of the above information involves greater risk, and in the unlikely event that you require us to do so on your behalf, we will take special care to protect this information. Our security measures implemented are discussed under \u201cSECURITY SAFEGUARDS\u201d below. We have worked closely alongside our legal representatives and IT service providers to identify any risks associated herewith and have implemented the below measures to combat these risks.<\/span>
                                                <\/span>
                                                <\/span>10. YOUR RIGHTS<\/strong>
                                                <\/span><\/p>

                                                Kindly be advised that, as a data subject, you have the right to<\/span><\/p>

                                                10.1.\u00a0 Be informed that your personal information is being collected;<\/span>
                                                <\/span>10.2.\u00a0 Be informed that your personal information has been accessed by an unauthorised person<\/span>
                                                <\/span>10.3.\u00a0 Establish whether we hold your personal information and request access thereto;<\/span>
                                                <\/span>10.4.\u00a0 Request deletion, destruction or correction of your personal information;<\/span>
                                                <\/span> 10.5.\u00a0 Object to the processing of your personal information (on reasonable grounds);<\/span>
                                                <\/span>10.6.\u00a0 Object to the processing of your personal information for purposes of direct marketing;<\/span>
                                                <\/span>10.7.\u00a0 Not be subject to a decision based solely on the automated processing of your personal information;<\/span>
                                                <\/span>10.8.\u00a0 Submit a complaint to the Information Regulator;<\/span>
                                                <\/span>10.9.\u00a0 Institute civil proceedings regarding an alleged interference with your personal information.<\/span>
                                                <\/span><\/p>

                                                1. YOUR DUTY<\/strong><\/li><\/ol>

                                                  In order for us to properly execute our mandate and provide the best assistance possible, we kindly request that you provide us with your accurate and complete personal information required by us to fulfil our mandate. Lastly, we kindly request that you update us of any changes to your personal information for us to endorse same in our records.<\/span><\/p>

                                                  1. FORMS<\/strong><\/li><\/ol>

                                                    Kindly contact our Information Officer to inquire on the following forms:<\/span><\/p>

                                                    • Objection to processing of personal information;<\/span><\/li>
                                                    • Request for correction or deletion of personal information;<\/span><\/li>
                                                    • Consent in respect of direct marketing; and<\/span><\/li>
                                                    • Complaint regarding an interference with personal information.\u00a0<\/span><\/li><\/ul>

                                                      Once received, you are encouraged to complete these forms and present them to our Information Officer, alternatively the Information regulator, whichever may be applicable.<\/span><\/p>

                                                      1. CONDITIONS FOR THE LAWFUL PROCESSING OF PERSONAL INFORMATION<\/strong>
                                                        <\/span><\/li><\/ol>

                                                        Our team is committed to the fulfilment of the following conditions imposed by POPI:<\/span>
                                                        <\/span>13.1\u00a0 ACCOUNTABILITY<\/span>
                                                        <\/span>13.2\u00a0 PROCESSING LIMITATION<\/span>
                                                        <\/span>13.3\u00a0 PURPOSE SPECIFICATION<\/span>
                                                        <\/span>13.4\u00a0 FURTHER PROCESSING LIMITATION<\/span>
                                                        <\/span>13.5\u00a0 INFORMATION QUALITY<\/span>
                                                        <\/span>13.6\u00a0 OPENNESS<\/span>
                                                        <\/span>
                                                        <\/span>13.7\u00a0 SECURITY SAFEGUARDS<\/span>
                                                        <\/span>
                                                        <\/span>13.8\u00a0 DATA SUBJECT PARTICIPATION<\/span>
                                                        <\/span><\/p>

                                                        Our approach in fulfilment of each of the above is discussed below.<\/span><\/p>

                                                        13.1. ACCOUNTABILITY<\/strong><\/p>

                                                        We are committed to ensuring that your personal information will only be processed in accordance with the provisions of POPI and in line with the purpose for which it was supplied to us<\/span><\/p>

                                                        13.2. PROCESSING LIMITATION<\/strong> Personal information will only be-<\/span><\/p>

                                                        • Processed lawfully and in a reasonable manner;<\/span><\/li>
                                                        • Processed for a specific purpose and reason for which it was supplied to us; and<\/span><\/li>
                                                        • Collected directly from the data subject, subject to justifiable limitations in execution of our services insofar as allowed by POPI.<\/span><\/li><\/ul>

                                                          As mentioned above, personal information will only be processed by us on one of the following grounds listed in POPI<\/span><\/p>

                                                          • Consent;<\/span><\/li>
                                                          • Processing is necessary to carry out actions for the conclusion or performance of a contract;<\/span><\/li>
                                                          • Processing complies with an obligation imposed on us by law;<\/span><\/li>
                                                          • To protect a legitimate interest of a data subject; or<\/span><\/li>
                                                          • Processing is necessary for pursuing legitimate interests of ours or of a third party to whom the information is supplied.<\/span><\/li><\/ul>

                                                            13.3. PURPOSE SPECIFICATION<\/strong><\/p>

                                                            Data subjects will always be made aware of the purpose for which their personal information is being processed.<\/span>
                                                            <\/span>
                                                            <\/span>As mentioned above, section 18 of POPI requires from us to ensure you are aware that your personal information may be processed by us in execution of our services to you and will be used solely for this purpose. By engaging our services, you therefore consent to us processing your personal information in line with the purpose for which it was provided to us.<\/span>
                                                            <\/span>
                                                            <\/span>Personal information will always be collected directly from the data subject, unless <\/span> \u00a0<\/span><\/p>

                                                            • The information has been made public;<\/span><\/li>
                                                            • The data subject has provided consent to collect the personal information otherwise;<\/span><\/li>
                                                            • The collection from a third party would not prejudice a legitimate interest of the data subject;<\/span><\/li>
                                                            • The collection of the information from another source is necessary for the conduct of legal proceedings or to maintain a legitimate interest of ours or of a third party to whom the information is supplied;<\/span><\/li>
                                                            • The collection directly from the data subject would prejudice a lawful purpose of<\/span>
                                                              <\/span>the collection; or<\/span><\/li>
                                                            • Compliance is not reasonably practicable in the circumstances of the particular case. Data subjects will be notified by us once their personal information is collected, unless <\/span><\/li>
                                                            • Consent has been granted for the collection thereof;<\/span><\/li>
                                                            • Failure to notify would not prejudice a legitimate interest of the data subject;<\/span><\/li>
                                                            • It is collected for purposes of legal proceedings;<\/span><\/li>
                                                            • Notification would prejudice a lawful purpose of the collection;<\/span><\/li>
                                                            • Notification is not reasonably practicable in the circumstances of the particular <\/span>case; or<\/span><\/li>
                                                            • The information will not be used in a form in which the data subject may be<\/span>
                                                              <\/span> identified, or unless the information is merely for historical, statistical or research purposes.<\/span><\/li><\/ul>

                                                              13.4. FURTHER PROCESSING LIMITATION<\/strong>
                                                              <\/span>
                                                              <\/span>In line with the previous paragraph (\u2018PURPOSE SPECIFICATION\u2019), any further\/subsequent processing of your personal information will still be done in accordance with original purpose and only when processing thereof is necessary in the circumstances described above.<\/span>
                                                              <\/span>
                                                              <\/span>13.5. INFORMATION QUALITY<\/strong>
                                                              <\/span>
                                                              <\/span>Upon collecting your personal information, our staff will take all steps necessary to ensure the correctness of your personal information. All of your personal information is stored securely for if and when we require same to be processed (refer to \u201cSecurity Safeguards\u201d below).<\/span>
                                                              <\/span>
                                                              <\/span>In order for us to properly assist our clients, we kindly request that you provide us with your accurate and complete personal information required by us to fulfil our services. Lastly, we kindly request that you update us of any changes to your personal information for us to endorse same in our records.<\/span>
                                                              <\/span>
                                                              <\/span>13.6. OPENNESS<\/strong>
                                                              <\/span>
                                                              <\/span>Your personal information will be stored in a secure system, as explained later on under \u2018SECURITY SAFEGUARDS\u2019. Our goal with this Privacy Policy is to ensure that a data subject is made aware of:<\/span>
                                                              <\/span><\/p>

                                                              • What information is collected and from where;<\/span><\/li>
                                                              • Our business\u2019 name, address and contact details;<\/span><\/li>
                                                              • The purpose for which their personal information is collected;<\/span><\/li>
                                                              • Whether or not the supply of personal information is mandatory or voluntary;<\/span><\/li>
                                                              • Consequences of failure to provide personal information<\/span><\/li>
                                                              • Any particular law authorising the collection of personal information<\/span><\/li>
                                                              • Their right to access or rectify the information;<\/span><\/li>
                                                              • Their right to object to the processing of their personal information; and<\/span><\/li>
                                                              • Their right to lodge a complaint to the Information Regulator and the details of the Information Regulators<\/span><\/li><\/ul>

                                                                13.7. SECURITY SAFEGUARDS<\/strong><\/p>

                                                                In order to protect our clients\u2019 personal information, our team will-<\/span><\/p>

                                                                • Implement reasonable, appropriate, technical and organisational measures; and<\/span><\/li>
                                                                • Notify data subjects and the Information Regulator of any security compromises as soon as reasonably possible and state:<\/span>
                                                                  <\/span> o Possible consequences;<\/span>
                                                                  <\/span> o Steps taken to address the compromise;<\/span>
                                                                  <\/span> o Recommendation To data subject on what steps to take;<\/span>
                                                                  <\/span> o Identity of\u00a0 person who accessed the information(if known).<\/span><\/li><\/ul>

                                                                  Kindly refer to \u2018STEPS IN EVENT OF A COMPROMISE\u2019 in paragraph 10 below.<\/span><\/p>

                                                                  We have implemented the following physical and software\/electronic safeguards<\/span><\/p>

                                                                  • Electronic data:<\/span><\/li><\/ul>

                                                                    o Our Wi-Fi network is password protected and secure, allowing only certain identified devices to connect;<\/span><\/p>

                                                                    o Data encryption;<\/span><\/p>

                                                                    o Trusted antivirus software;<\/span><\/p>

                                                                    o Our data is backed up on a server that is protected and locked away securely;<\/span><\/p>

                                                                    o We use trusted and approved cloud-based software with high security standards;<\/span><\/p>

                                                                    o Strong Passwords That Are Reviewed Frequently;<\/span><\/p>

                                                                    o Regular Software Updates;<\/span><\/p>

                                                                    o Secured All Devices With Access Control And Lockscreens; o Regularcloud-based backups of data; and<\/span><\/p>

                                                                    o Employee Training And Awareness Programs.<\/span><\/p>

                                                                    We work closely alongside our IT service providers to ensure that our safeguarding mechanisms are frequently updated and reviewed.<\/span><\/p>

                                                                    • Physical safeguards:<\/span><\/li><\/ul>

                                                                      o Our Offices Are Further Equipped With –<\/span><\/p>

                                                                      \u25aa We are in a secure office building;<\/span><\/p>

                                                                      \u25aa All access points are securely locked;<\/span><\/p>

                                                                      \u25aa Access control is implemented via secret access codes; \u25aa Armed response 24 hours a day; and<\/span><\/p>

                                                                      \u25aa Security guards patrolling the office areas.<\/span><\/p>

                                                                      Furthermore, all our agreements with third party operators have been reviewed and\/or Operator Undertakings have been provided to ensure compliance by third parties with POPI.<\/span><\/p>

                                                                      13.8. DATA SUBJECT PARTICIPATION<\/strong><\/p>

                                                                      Data subjects can request confirmation from us on whether we hold personal information and\/or the correct personal information. Data subjects can further request for such information to be deleted or destroyed.<\/span><\/p>

                                                                      Our team will not process special personal information unless expressly provided for in POPI and unless specifically necessary for the purpose for which it was provided to us for.<\/span><\/p>

                                                                      1. STEPS IN EVENT OF A COMPROMISE<\/strong><\/li><\/ol>

                                                                        The following steps will be taken by us in the unlikely event of a data breach\/information compromise:<\/span><\/p>

                                                                        1. Notify our service provider;<\/span><\/li>
                                                                        2. Attempt to establish (internal analysis)-<\/span><\/li><\/ol>

                                                                          2.1. Whether there was in fact a breach;\u00a0<\/span><\/p>

                                                                          2.2. What data, if any, was compromised;\u00a0<\/span><\/p>

                                                                          2.3. Which parties were affected; and\u00a0<\/span><\/p>

                                                                          2.4. The extent of the compromise.<\/span><\/p>

                                                                          1. Draft an internal report with the assistance of our IT service providers;<\/span><\/li>
                                                                          2. Notify affected persons of the breach;<\/span><\/li>
                                                                          3. Notify the Information Regulator of the breach;<\/span><\/li>
                                                                          4. Notify our insurers;<\/span><\/li>
                                                                          5. Cooperate with our service providers and data subjects to prevent any processing of the compromised data; and<\/span><\/li>
                                                                          6. Review our safeguarding structures to prevent a recurrence.<\/span>
                                                                            <\/span><\/li><\/ol>
                                                                            1. CROSS-BORDER TRANSMISSION OF PERSONAL INFORMATION<\/strong><\/li><\/ol>

                                                                              In conducting our business activities, we may transmit personal information to other countries. We do not transfer special personal information to foreign countries. The processing of the above information involves greater risk, and as such we take special care to protect this information. Our security measures implemented are discussed under \u201cSECURITY SAFEGUARDS\u201d below. We have worked closely alongside our legal representatives and IT service providers to identify any risks associated herewith and have implemented applicable measures to combat these risks.<\/span><\/p>

                                                                              We will ensure that the cross-border transmission of your information complies with the standards set out in POPI, alternatively a higher standard as required in the destination countries (for example, the General Data Protection Regulation applicable in the European Union)<\/span><\/p>

                                                                              We will not send your personal information abroad unless –<\/span><\/p>

                                                                              • Consent has been provided;<\/span><\/li>
                                                                              • It is required to perform in terms of a contract; or<\/span><\/li>
                                                                              • The foreign laws are equally or more strict than those contained in POPI<\/span><\/li><\/ul>
                                                                                1. PERSONAL INFORMATION OF CHILDREN<\/strong>
                                                                                  <\/span>
                                                                                  <\/span>We do not process personal information of any children in the ordinary course of our business. We acknowledge that the processing of the above information involves great risk and such information may only be processed where consent has been provided by a competent person (parent or guardian) or where otherwise authorised by POPI.<\/span>
                                                                                  <\/span><\/li>
                                                                                2. ACCOUNT NUMBERS<\/strong><\/li><\/ol>

                                                                                  We will never sell, obtain or disclose your account number (whether this relates to any sort of bank account details, credit card numbers or credit application numbers) to any person without your consent.<\/span><\/p>

                                                                                  1. NEWSLETTERS AND DIRECT MARKETING<\/strong>
                                                                                    <\/span>
                                                                                    <\/span> As a client of ours, we would like to send you correspondence related to our products and\/or services that we provided to you. We will only correspond with you if you are an existing or prospective customer, or if you provided consent. Communications will only be sent if we obtained your contact details in the context of the sale of our products or services and for the purpose of marketing our own similar products or services. Communications received from us will always clearly identify us as the sender and provide you with a reasonable opportunity to unsubscribe at any time.<\/span>
                                                                                    <\/span><\/li><\/ol>

                                                                                    We have always used an \u2018opt in\u2019 policy for clients and will continue to do so in line with POPI. This option is provided when clients sign up or order from our website or online store.<\/span><\/p>

                                                                                    1. CONCLUSION<\/strong>
                                                                                      <\/span>
                                                                                      <\/span>Our Team is committed to complying with POPI and we acknowledge our clients\u2019 right to protection against the unlawful collection, retention, dissemination and use of personal information, subject to justifiable limitations that are aimed at protecting other rights and important interests.<\/span><\/li><\/ol>

                                                                                      Kindly contact our Information Officer for any queries relating to the processing of personal information.<\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"

                                                                                      PRIVACY POLICY ABSTRACT This document serves as the Privacy Policy (\u201cpolicy\u201d) of BOS BRANDS (PTY) LTD. We acknowledge that the protection and processing of personal information has become a global phenomenon and poses great risks. We acknowledge that the right to privacy enshrined in section 14 of the Constitution of the Republic of South Africa, […]<\/p>\n","protected":false},"author":8,"featured_media":0,"parent":0,"menu_order":20,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_acf_changed":false,"_seopress_titles_title":"POPI Privacy Policy | BOS Brands South Africa","_seopress_titles_desc":"BOS Brands complies with South Africa\u2019s POPI Act. Learn how we collect, use, and protect your personal data when you shop online with BOS.","_seopress_robots_index":"","_seopress_robots_follow":"","_seopress_robots_imageindex":"","_seopress_robots_snippet":"","_seopress_robots_primary_cat":"","_seopress_robots_breadcrumbs":"","_seopress_robots_freeze_modified_date":"","_seopress_robots_custom_modified_date":"","_seopress_robots_canonical":"","_seopress_social_fb_title":"","_seopress_social_fb_desc":"","_seopress_social_fb_img":"","_seopress_social_fb_img_attachment_id":0,"_seopress_social_fb_img_width":0,"_seopress_social_fb_img_height":0,"_seopress_social_twitter_title":"","_seopress_social_twitter_desc":"","_seopress_social_twitter_img":"","_seopress_social_twitter_img_attachment_id":0,"_seopress_social_twitter_img_width":0,"_seopress_social_twitter_img_height":0,"_seopress_redirections_value":"","_seopress_redirections_enabled":"","_seopress_redirections_enabled_regex":"","_seopress_redirections_logged_status":"","_seopress_redirections_param":"","_seopress_redirections_type":0,"_seopress_analysis_target_kw":"","_seopress_news_disabled":"","_seopress_video_disabled":"","_seopress_video":[],"_seopress_pro_schemas_manual":[],"_seopress_pro_rich_snippets_disable_all":"","_seopress_pro_rich_snippets_disable":[],"_seopress_pro_schemas":[],"_mi_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0,"site-sidebar-layout":"default","site-content-layout":"default","ast-site-content-layout":"default","site-content-style":"default","site-sidebar-style":"default","ast-global-header-display":"","ast-banner-title-visibility":"","ast-main-header-display":"","ast-hfb-above-header-display":"","ast-hfb-below-header-display":"","ast-hfb-mobile-header-display":"","site-post-title":"disabled","ast-breadcrumbs-content":"","ast-featured-img":"","footer-sml-layout":"","ast-disable-related-posts":"","theme-transparent-header-meta":"default","adv-header-id-meta":"","stick-header-meta":"default","header-above-stick-meta":"","header-main-stick-meta":"","header-below-stick-meta":"","astra-migrate-meta-layouts":"set","ast-page-background-enabled":"default","ast-page-background-meta":{"desktop":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"ast-content-background-meta":{"desktop":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"footnotes":""},"class_list":["post-6462","page","type-page","status-publish","hentry"],"acf":[],"_links":{"self":[{"href":"https:\/\/www.bosbrands.com\/za\/wp-json\/wp\/v2\/pages\/6462","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.bosbrands.com\/za\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/www.bosbrands.com\/za\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/www.bosbrands.com\/za\/wp-json\/wp\/v2\/users\/8"}],"replies":[{"embeddable":true,"href":"https:\/\/www.bosbrands.com\/za\/wp-json\/wp\/v2\/comments?post=6462"}],"version-history":[{"count":0,"href":"https:\/\/www.bosbrands.com\/za\/wp-json\/wp\/v2\/pages\/6462\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.bosbrands.com\/za\/wp-json\/wp\/v2\/media?parent=6462"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}