This policy explains how ATAIH Africa handles personal information when you visit our website, contact us or use our services. It addresses the Protection of Personal Information Act, 2013 (POPIA).
1. Scope and contact
ATAIH Africa is responsible for personal information it collects for its own enquiries, orders and service administration through www.ataih.africa. For privacy questions or requests, email info@ataih.africa and mark your message “Privacy / Information Officer”. Additional privacy notices may apply to particular applications or services. This general website policy does not replace those notices.
2. Information we collect
Depending on how you interact with us, we may collect your name, email address, telephone number, business name, country, enquiry details and correspondence. When you place an order, we may also collect billing or address details, order references and payment status. If you create an account, we process the information needed to administer that account.
Our website and hosting systems may record technical information such as IP addresses, browser details, request times and security logs. We do not request document uploads through our general website. Please avoid entering unnecessary sensitive information in enquiry fields.
3. Why we use information
We use relevant information to respond to enquiries, prepare quotations, administer orders and accounts, provide agreed services, send service updates, resolve complaints, maintain records and protect the website against misuse. We limit processing to information reasonably needed for these purposes.
Where a field is required, it will be indicated on the relevant form. If you do not provide information necessary to respond to your request or deliver a service, we may be unable to proceed. Optional information is voluntary.
4. Our basis for processing
We process information on an appropriate lawful basis under POPIA. Depending on the purpose, this may be your consent, steps needed to enter into or perform an agreement with you, a legal obligation, or a legitimate interest recognised by law. Accepting our Terms and Conditions or acknowledging this policy does not provide blanket consent to every use of your information.
5. Marketing communications
Promotional emails, SMS or WhatsApp messages are handled separately from communications about your enquiry or order. Where consent is required, we will seek a separate, voluntary choice. Any existing-customer marketing will be subject to the conditions allowed by law. You can opt out using the method in a marketing message or by emailing us. Withdrawing marketing consent does not stop necessary service communications.
6. Third parties and payments
We may share relevant information with third parties that assist with hosting, communications, payment processing or delivering a service you requested, where sharing is necessary and lawful. We may also disclose information when legally required or necessary to establish or protect legal rights. Third parties processing information on our behalf must be subject to appropriate confidentiality and security obligations.
When you use an external payment page, the payment provider handles the information you enter under its own privacy and security terms. We may receive a transaction reference and payment result. Please do not send full card details by email or through our enquiry forms.
7. Cookies and browser storage
Website features may use cookies or similar browser storage for sessions, security, shopping cart functions and preferences. The terms acceptance popup, if enabled, stores a version-specific acceptance choice in your browser's local storage so that it can remember your choice. That browser record is not a marketing subscription.
You can manage cookies and clear local storage through your browser settings. Doing so may sign you out, clear preferences or cause the popup to appear again. Any optional analytics or advertising tracking requires a purpose-specific notice and, where required, a choice before it is activated. Acknowledging this policy does not itself authorise optional tracking.
8. Retention and security
We retain personal information for as long as reasonably needed for its stated purpose, applicable recordkeeping duties or legitimate legal requirements. When continued retention is no longer justified, information should be deleted, destroyed or de-identified. You may contact us for details about retention applicable to your information.
We are required to apply reasonable technical and organisational safeguards against unauthorised access, loss and misuse. No online system is completely risk-free. If a security compromise requires notification under POPIA, we will notify the Information Regulator and affected people as required by law.
9. Processing outside South Africa
If a third-party provider processes personal information outside South Africa, any transfer must meet POPIA's requirements, such as appropriate legal or contractual protection, valid consent, or another permitted basis. You may contact us for information about providers and locations relevant to your interaction with us.
10. Your privacy rights
Subject to applicable law, you may ask whether we hold personal information about you, request access, request correction of inaccurate information, or request deletion where retention is no longer authorised. You may object to processing where the law permits and withdraw consent where processing relies on consent. Withdrawal does not invalidate lawful processing already performed, and some information may still need to be retained under another lawful basis.
Send requests to info@ataih.africa. We may need to verify your identity before releasing or changing information. We will explain any applicable lawful fee, restriction or reason a request cannot be fulfilled.
11. Complaints
You may contact us with a privacy concern so we can investigate. You also have the right to complain directly to South Africa's Information Regulator. Current complaint procedures and contact details are available at inforegulator.org.za/complaints/.
12. Changes to this policy
We may update this policy when our practices or legal requirements change. The effective date above identifies the current version. Material changes in the purpose of processing will be communicated as required by law, and fresh consent will be sought where necessary.