Privacy Policy

Sanodea Group — POPIA-Aligned (Republic of South Africa)

1. Introduction

Sanodea Group (“Sanodea”, “we”, “us”, or “our”) is committed to the lawful, transparent, and secure processing of personal information in accordance with the Protection of Personal Information Act, 2013 (POPIA).

This Privacy Policy sets out how personal information is collected, used, processed, stored, and protected when you access or interact with the Sanodea Group Platform.

2. Responsible Party

Sanodea Group acts as the Responsible Party (as defined under POPIA) in respect of all personal information processed through this Platform.

We determine the purpose and means of processing in accordance with applicable data protection principles and regulatory requirements.

3. Categories of Personal Information Collected

3.1 Information Provided Directly by You

Full name and surname
Email address and contact details
Company, role, and business-related information
Any information submitted via contact forms, enquiries, or correspondence

3.2 Information Collected Automatically

IP address
Device type, browser type, and operating system
Website interaction data (pages visited, session duration, navigation patterns)
Analytical and diagnostic data

4. Purpose of Processing

Personal information is processed strictly for legitimate business purposes, including:

Responding to enquiries and communications
Facilitating advisory engagement and relationship management
Providing relevant insights, updates, and thought leadership
Improving Platform performance, functionality, and user experience
Supporting business development and strategic engagement activities

All processing is conducted in a lawful, reasonable, and purpose-specific manner.

5. Lawful Basis for Processing (POPIA Compliance)

Processing of personal information is undertaken in accordance with POPIA principles, including:

Consent — where explicitly provided
Legitimate Interest — for business development and platform optimisation
Contractual Necessity — where a formal engagement exists
Legal Obligation — where required by applicable laws or regulations

6. Data Sharing & Disclosure

Sanodea Group does not sell, rent, or commercially trade personal information.

Personal information may be disclosed only where necessary:

To authorised third-party service providers (e.g., hosting, analytics, IT infrastructure)
To professional advisors (legal, financial, compliance) where required
Where disclosure is mandated by law, regulation, or court order

All third parties are contractually required to:

Maintain confidentiality
Implement appropriate security safeguards
Process information strictly for authorised purposes

7. Cross-Border Data Transfers

Given Sanodea Group’s international operating footprint, personal information may be transferred and processed outside the Republic of South Africa.

Such transfers are conducted:

In compliance with POPIA provisions
Subject to appropriate safeguards ensuring an adequate level of data protection
Through contractual or technical mechanisms aligned with international best practice

8. Data Security

Sanodea Group implements appropriate technical and organisational measures to protect personal information against:

Unauthorised access or disclosure
Loss, misuse, or alteration
Cybersecurity threats and operational vulnerabilities

However, users acknowledge that:

No method of transmission over the internet or electronic storage is completely secure.

9. Data Retention

Personal information is retained only for as long as necessary to:

Fulfil the purpose for which it was collected
Support ongoing business or advisory relationships
Comply with legal, regulatory, or contractual obligations

Information is securely disposed of when no longer required.

10. Data Subject Rights (POPIA)

In accordance with POPIA, you have the right to:

Access your personal information
Request correction, update, or deletion
Object to or restrict processing
Withdraw consent (where applicable)
Lodge a complaint with the Information Regulator (South Africa)

All requests must be submitted via the contact details below and will be handled in accordance with applicable timelines and verification requirements.

11. Cookies & Tracking Technologies

The Platform may utilise cookies and similar technologies to:

Enhance user experience and functionality
Analyse traffic patterns and user behaviour
Support performance optimisation and analytics

Users may control or disable cookies through their browser settings.
Disabling cookies may impact certain Platform functionalities.

12. Amendments to this Policy

Sanodea Group reserves the right to amend or update this Privacy Policy at any time.

Updated versions will be published on the Platform. Continued use constitutes acceptance of the revised Policy.

13. Contact & Information Officer

For all privacy-related enquiries, data subject requests, or POPIA compliance matters:

Email: [email protected]

Sanodea Group may designate an Information Officer in accordance with POPIA to oversee compliance and data protection governance.