Privacy Policy / POPIA Policy

This Privacy Policy describes how Megaflow (“we”, “us”, “our”) collects, uses, discloses, stores, and protects your personal information when you use our Site or engage our services. We are committed to compliance with the Protection of Personal Information Act, 4 of 2013 (POPIA).

Last Updated: 08 October 2025

3.1 Definitions

  • Personal Information / Personal Data: Any information relating to an identifiable, living natural person or a juristic person, including but not limited to name, contact details, identity number, email, physical address, etc.

  • Data Subject: The person or entity whose Personal Information is processed.

  • Responsible Party: The entity that determines the purpose and means of processing Personal Information (Megaflow).

  • Operator: A person or third party who processes Personal Information on behalf of Megaflow.

  • Processing: Any operation or set of operations performed on Personal Information, whether or not by automated means (collection, recording, storing, updating, retrieval, use, disclosure, erasure, etc.).

3.2 Purpose & Lawful Basis for Processing

We process your Personal Information only when one or more of the following lawful bases apply:

  1. Consent: You have given clear consent for us to process your Personal Information for a specific purpose (e.g. newsletter, quotation).

  2. Performance of a Contract: Processing is necessary to perform a service agreement between you and Megaflow.

  3. Legal Obligation: Processing is necessary for compliance with a legal obligation (e.g. tax, regulatory reporting).

  4. Legitimate Interest: Where processing is necessary for our legitimate interests, and does not override your rights and interests.

We aim to collect only the minimum Personal Information necessary for each purpose (data minimization).

3.3 What Personal Information We Collect

Depending on your interactions, we may collect:

  • Identity & Contact Information: name, business name, email address, telephone number, postal address, physical address

  • Company / Juristic Person Information: registration number, business address, financial/accounting contacts

  • Technical / Device Information: IP address, browser type, device identifiers, operating system, referral URLs

  • Transaction / Service Information: order details, quotations, service history, invoices, site data

  • Communication Records: correspondence (email, phone logs)

  • Other Information: any other data you choose to provide (e.g. feedback, additional project details)

3.4 How We Collect Information

  • Directly from you: when you contact us, request a quote, fill in a form, register, or communicate.

  • Automatically: via technical means (cookies, server logs, analytics) when you browse the Site.

  • From third parties: e.g., public registers, reference checks, service providers or contractors.

3.5 Use of Cookies & Similar Technologies

We use cookies and similar technologies to enhance your experience, analyze usage, and manage the Site. You can control or disable cookies via your browser settings, though this may affect your ability to use certain features.

3.6 Disclosure to Third Parties

We may disclose your Personal Information to:

  • Service providers / contractors / operators (e.g. hosting, IT support, marketing, communication services)

  • Affiliates or partners, where necessary to render services

  • Legal or regulatory authorities, if required by law or court order

  • In the event of business transfers: if Megaflow is merged, sold, or restructured, your Personal Information may be transferred, subject to contractual safeguards

We require that operators and service providers protect personal data and use it only as we permit.

3.7 Cross-Border Transfers

Your Personal Information may be transferred to or stored in servers or service providers located outside South Africa. Where we do so, we ensure that adequate safeguards are in place (e.g. binding contractual terms, appropriate security, consent) to protect your privacy rights.

3.8 Data Retention

We retain Personal Information only as long as necessary for the purposes for which it was collected, or as required by law (e.g. for tax, accounting, legal claims). After that, data is securely deleted or anonymized.

3.9 Security

We implement reasonable technical and organizational measures to protect Personal Information against unauthorized access, disclosure, alteration, or destruction. However, no method is completely foolproof, and we cannot guarantee absolute security.

3.10 Your Rights as Data Subject

Under POPIA, you have certain rights, including:

  • Access: You can request confirmation whether we hold your Personal Information and obtain a copy.

  • Correction / Update: You can ask us to correct, update, or delete inaccurate, irrelevant, incomplete, or misleading information.

  • Deletion / Erasure: Request removal of your Personal Information when it’s no longer necessary or lawful to keep it.

  • Object to Processing: In certain circumstances, you may object to our processing (e.g. direct marketing).

  • Withdraw Consent: Where processing is based on consent, you may withdraw consent (without affecting processing already done).

  • Complaint: You may lodge a complaint with the Information Regulator (South Africa).

To exercise these rights, contact us at the details below. We will respond within a reasonable time, in line with POPIA.

3.11 Direct Marketing

If we wish to send you marketing communications (e.g. newsletters, promotions), we will obtain your prior consent (opt-in). You may unsubscribe or opt out at any time, free of cost.

3.12 Breach Notification

If a security breach arises that could compromise your Personal Information, we will notify you and the Information Regulator in accordance with POPIA’s requirements, and take reasonable steps to mitigate harm.

3.13 Changes to this Policy

We may update this Policy from time to time. Changes become effective when posted on the Site. We encourage you to revisit this page periodically. Continued use implies acceptance of the updated policy.

3.14 Contact / Information Officer

Megaflow (Pty) Ltd
Head Office: 18 Mangaanbaan, Alton, Richards Bay, KwaZulu-Natal
Telephone: +27 86 166 6223
Email: admin@megaflow.co.za

We appoint an Information Officer or designate a person responsible for POPIA compliance. You may contact that person via the above email for any queries, requests, or complaints.