Privacy Policy
Your privacy matters to us. This policy explains how Randcore (Pty) Ltd collects, uses, and protects your personal information.
Last updated: 10 March 2025
1. Introduction
Randcore (Pty) Ltd ("Randcore", "we", "us", or "our") is committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website randcore.co.za or engage with our services.
We are a South African company and comply with the Protection of Personal Information Act 4 of 2013 (POPIA). As a responsible party under POPIA, we ensure that all personal information is processed lawfully and in a reasonable manner that does not infringe on your privacy.
By using our website or services, you consent to the collection and use of your information in accordance with this policy. If you do not agree with the terms of this policy, please do not access our website or use our services.
2. Information We Collect
2.1 Information You Provide Directly
We collect information that you voluntarily provide when you:
- Contact us: Name, email address, phone number, company name, and message content via our contact forms
- Request a quote: Project requirements, budget range, and business information
- Subscribe to updates: Email address for newsletter communications
- Express investment interest: Name, contact details, investor type, and investment preferences
- Engage our services: Billing information, business registration details, and project-specific data
2.2 Information Collected Automatically
When you visit our website, we may automatically collect:
- Device information: Browser type, operating system, device type
- Usage data: Pages visited, time spent on pages, click patterns
- Location data: General geographic location based on IP address
- Referral data: How you arrived at our website
2.3 Information from Third Parties
We may receive information about you from:
- Business partners and referral sources
- Publicly available sources for B2B marketing purposes
- Analytics providers (Google Analytics)
3. How We Use Your Information
We use the information we collect to:
- Provide services: Deliver the technology solutions and services you have requested
- Communicate: Respond to enquiries, provide quotes, and send project updates
- Improve our offerings: Analyse website usage to enhance user experience and services
- Marketing: Send relevant information about our services (with your consent)
- Legal compliance: Meet our legal and regulatory obligations
- Security: Protect against fraudulent or illegal activity
We will not use your personal information for purposes incompatible with those listed above without obtaining your additional consent.
4. Legal Basis for Processing
Under POPIA, we process your personal information based on one or more of the following legal grounds:
- Consent: You have given us explicit consent to process your information for specific purposes
- Contractual necessity: Processing is necessary to fulfil a contract with you or to take steps at your request before entering a contract
- Legal obligation: Processing is necessary for compliance with South African law
- Legitimate interests: Processing is necessary for our legitimate business interests, provided these do not override your rights and freedoms
5. Data Sharing & Disclosure
We do not sell your personal information. We may share your information with:
5.1 Service Providers
Third-party vendors who assist us in operating our business, such as hosting providers, email services, and analytics platforms. These providers are contractually bound to protect your information.
5.2 Business Partners
Where you have engaged services that involve collaboration with our technology partners, we may share relevant project information with your consent.
5.3 Legal Requirements
We may disclose your information if required to:
- Comply with applicable laws, regulations, or legal processes
- Respond to lawful requests from public authorities
- Protect our rights, privacy, safety, or property
5.4 Cross-Border Transfers
Some of our service providers may be located outside South Africa. Where we transfer personal information across borders, we ensure adequate safeguards are in place as required by POPIA Section 72.
6. Data Security
We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. These measures include:
- SSL/TLS encryption for data in transit
- Secure hosting infrastructure with access controls
- Regular security assessments and updates
- Employee training on data protection practices
- Incident response procedures
While we strive to protect your information, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security but are committed to maintaining industry-standard protections.
7. Your Rights Under POPIA
As a data subject under POPIA, you have the following rights:
- 1Right to Access: Request confirmation of whether we hold your personal information and obtain a copy of it.
- 2Right to Correction: Request that we correct or update inaccurate or incomplete personal information.
- 3Right to Deletion: Request that we delete your personal information where there is no compelling reason for its continued processing.
- 4Right to Object: Object to the processing of your personal information for direct marketing purposes.
- 5Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent.
- 6Right to Lodge a Complaint: Lodge a complaint with the Information Regulator if you believe your rights have been infringed.
To exercise any of these rights, please contact us using the details provided below. We will respond to your request within a reasonable timeframe, typically within 30 days.
9. Data Retention
We retain your personal information only for as long as necessary to fulfil the purposes for which it was collected, including:
- Contact enquiries: 2 years from last interaction
- Client records: 7 years after contract completion (as required by SARS)
- Marketing preferences: Until you unsubscribe or withdraw consent
- Analytics data: 26 months (Google Analytics default)
After the retention period, personal information is securely deleted or anonymised.
10. Policy Updates
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. When we make material changes, we will:
- Update the "Last updated" date at the top of this policy
- Post a notice on our website
- Where appropriate, notify you directly via email
We encourage you to review this policy periodically to stay informed about how we protect your information.
Contact Us
If you have any questions about this Privacy Policy, wish to exercise your rights, or have concerns about how we handle your personal information, please contact us:
Phone
062 524 6155Registered Address
Randcore (Pty) Ltd
Johannesburg, Gauteng
South Africa
Information Regulator (South Africa)
If you are not satisfied with our response to your complaint, you have the right to lodge a complaint with the Information Regulator:
Website: inforegulator.org.za
Email: [email protected]