1.1 Oxalys South Africa (registration number 2020/081806/07) (“Oxalys”, “we”, “us” or “our”) collects and processes the personal information of anyone who communicates with us through, or registers on, our website, or makes use of any of our services (“you” or “your”).
1.2 By reading this policy, you will understand what we do with your personal information, or the personal information of third parties who have consented to you giving their personal information to us (“consenting third parties”). It is important that you read and understand this policy if you would like to use our services.
1.3 Personal information may include very sensitive information, which you and consenting third parties probably want to keep private. South Africa’s Constitution provides that everyone has the right to privacy. This includes a right to protection against the unlawful collection, retention, dissemination and use of personal information.
1.4 We only collect and process personal information for a lawful purpose, such as performing services you requested from us or for performing our legal obligations. If not for one of these purposes, we will request your consent for collecting and processing your personal information. Because of the sensitivity of some personal information, we ensure that the way we process your personal information complies fully with the Protection of Personal Information Act, 4 of 2013 (“POPIA”).
1.6 You also promise that, where you upload or provide us with consenting third parties’ personal information e.g. your additional users (employees or representatives), young people or work seekers, you will have obtained them for a lawful purpose or that they have freely given consent to do so. If we require it, you will provide us with evidence of having obtained the required consent.
- Purposes of processing
We collect your personal data in order to:
2.1 Manage and respond to requests from you made on the website, for example request for a demo, information, newsletter or appointment.
2.2 Adapt the paths and content offered to you;
2.3 Personalise our communication via our client marketing programme, in order to carry out marketing operations, brand promotion and to have a better understanding of your needs and wishes;
2.4 Adapt our products and services to best meet your requirements;
2.5 Personalise the commercial offers and relational messages to your attention;
2.6 Inform you of special offers and any new services created by Oxalys;
2.7 Manage our relationship with our clients before, during and after the purchase of Oxalys solutions:
2.7.1 Knowing and managing the preferences of prospects and clients;
2.7.2 Sending you newsletters, promotions and offers or contacting you by phone;
2.7.3 Qualifying the prospect and client database;
2.7.4 Segmentation operations based on the history of actions carried out on our websites and your browsing habits in order to send targeted communications;
2.7.5 Predicting and anticipating future behaviour;
2.7.6 Compiling statistics and commercial scores, and conducting reporting;
2.7.7 Managing unsubscription requests for newsletters, promotions and satisfaction surveys.
2.7.8 Taking into account the right of modification/rectification/deletion;
2.8 Improving the quality of our services and providing training in particular:
2.8.1 Carrying out studies and analyses of questionnaires and comments from prospects and clients;
2.8.2 Complaints management.
2.9 Securing and improving your use of the Oxalys group’s websites. in particular:
2.9.1 Improving browsing;
2.9.2 Implementing security and fraud prevention.
2.10 Taking into account, processing and monitoring your choices and requests regarding the processing of your personal data, in order to meet our legal and regulatory obligations in this respect.
You and consenting third parties have the right to have your personal information processed lawfully. Your rights include the right:
3.1 to be notified that your personal information is being collected, or that your personal information has been accessed or acquired by an unauthorised person e.g. where a hacker may have compromised our computer system;
3.2 to find out whether we hold your personal information and to request access to your personal information;
3.3 to request us, where necessary, to correct, destroy or delete your personal information;
3.4 to object, on reasonable grounds, to the processing of your personal information;
3.5 to object to the processing of your personal information for purposes of direct marketing, including by way of unsolicited communications;
3.6 not to be subject, in certain circumstances, to a decision which is based solely on the automated processing of your personal information;
3.7 to submit a complaint to the Regulator if you believe that there has been interference with the protection of your personal information or if you believe that an independent adjudicator who may be resolving your complaint against us, has not decided the matter correctly; and
3.8 to institute civil proceedings against us if you believe that we have interfered with the protection of your personal information.
- How we collect your personal information
4.1 When we collect your personal information, we will collect information such as your company registration number or identity number, e-mail address, names, home or work physical addresses and telephone numbers.
4.2 The nature of our service may require us, in certain instances, to collect your information from third parties. You consent to us contacting these third parties directly (or indirectly through a process that you will facilitate) and permit us to collect your personal information from them.
4.3 We will not intentionally collect and process the personal information of a child unless we have the permission of a competent person.
4.4 Where you provide us with your users’ or consenting third parties’ personal information you confirm that they have consented to the processing of their personal information such as their identity number, e-mail address, names, home or work physical addresses, telephone numbers and academic records.
- How we use your personal information
5.2 We will ensure that your personal information is processed in a lawful manner and that we do not infringe on your privacy rights.
- Where we store your personal information
6.1 Protecting your personal Information is very important to us. We store your personal information on our, or our service providers’, servers located in countries that have privacy levels that comply with or are better than POPIA.
6.2 If we ever outsource the processing of your personal information to a third-party operator, we will ensure that the operator processes and protects your personal information using reasonable technical and organisational measures that are equal to or better than ours.
6.3 In the event that we transfer or store your personal information outside South Africa, we will take all steps reasonably necessary to ensure that the third party who receives your personal information is subject to a law, binding corporate rules or binding agreement which provides an adequate level of protection.
7.1 Cookies are small software programmes that install themselves on your computer or your mobile device. They are intended to make your experience of visiting and navigating through our website easier and more pleasant. Cookies and web tokens may collect personal information such as the identity of your computer or mobile device and your location.
7.2 If you do not want cookies or web tokens to be installed on your computer or mobile device, please do not use our website. This means that you will not be able to use our services. By using our website, you consent to cookies and web tokens being installed on your computer or mobile device.
- Information Security
We promise that we will secure the integrity and confidentiality of your personal information in our possession or under our control. We will do this by taking appropriate, reasonable technical and organisational measures to prevent loss of, damage to, or unauthorised destruction of your personal information; and unlawful access to or processing of your personal information.
- How to contact us
10.2 Our physical address is Block A, Inanda Business Park, 98 Albertyn Avenue, Sandton, Gauteng.