Privacy Policy

This is the privacy policy of Stark Raving Rad  (Pty) Ltd  

This policy details how we collect, store, protect and use personal information – that is information that can be used to identify an individual or a company (juristic person).

Personal information includes:

• certain      information that is collected automatically when you visit our website,
• certain      information collected on registration;
• certain      information collected on submission; and
• optional      information that you provide to us voluntarily.

Additional information captured on the website that does not classify as personal information may also be collected and processed, including but not limited to:

• anonymised      information,
• de-identified      information that cannot be associated with an individual,
• statistical      information,
• information      that is public knowledge, which has been publicly and voluntarily      disclosed.

1. Lawful      Processing of Personal Information
   The conditions for the lawful processing of personal information by or      for a responsible party are the following, as per the Protection of      Personal Information Act of 2013 (POPIA):
   
    
   1. Accountability
   2. Processing       Limitation
   3. Purpose       Specification
   4. Further       Processing Limitation
   5. Information       Quality
   6. Openness
   7. Security       Safeguards
   8. Data       Subject Participation
2. General      Provisions
   
    
   1. This       policy applies to all personal information processed by the company and       its related entities.
   2. The       Information Officer shall take responsibility for compliance with this       policy.
   3. The       policy will be reviewed annually.
3. Lawful,      fair and transparent processing
   
    
   1. To       ensure its processing of data is lawful, fair and transparent, a Register       of Systems and Activities will be maintained.
   2. The       Register shall be reviewed at least annually.
   3. Individuals       have the right to access their personal data and any such requests made       to us shall be dealt with in a timely manner.
4. Lawful      Purposes
   
    
   1. All       data processed must be done on one of the following lawful bases:       consent, contract, legal obligation, public task or legitimate interests.
   2. We       shall note the appropriate lawful basis in the Register of Systems.
   3. Where       consent is relied upon as a lawful basis for processing data, evidence of       opt-in consent shall be kept with the personal data.
   4. Where       communications are sent to individuals based on their consent, the option       for the individual to revoke their consent will be clearly available and       systems should be in place to ensure such revocation is reflected       accurately.
5. Data      minimisation
   
    
   1. We       shall ensure that personal information collected is adequate, relevant       and limited to what is necessary in relation to the purposes for which it       is processed.
6. Accuracy
   
    
   1. We       shall take reasonable steps to ensure personal information is accurate.
   2. Please       update us via online forms, registrations, email or phone should your       information need to be corrected or updated.
   3. Where       necessary for the lawful basis on which data is processed, steps shall be       put in place to ensure that personal information is kept up to date.
7. Archiving      / Removal
   
    
   1. To       ensure that personal data is kept for no longer than necessary, archiving       policies are in place for each area in which personal data is processed.
   2. Archiving       policies are reviewed annually.
   3. The       archiving policy shall consider what data should/must be retained, for       how long, and why.
   4. Campaign       data is only retained and used for one year.
8. Security
   
    
   1. We       shall ensure that personal information is stored securely using modern       software and systems that are kept up-to-date.
   2. Access       to personal information shall be limited to personnel who need access and       appropriate security is in place to avoid unauthorised sharing of       information.
   3. When       personal information is deleted this will be done safely such that the       data is irrecoverable.
   4. Appropriate       back-up and disaster recovery solutions are in place.
   5. Vulnerability       assessments and hardening are performed on systems where personal       information is stored.
9. Breach
   
    
   1. In       the event of a breach of security leading to the accidental or unlawful       destruction, loss, alteration, unauthorised disclosure of, or access to,       personal data, we shall promptly assess the risk to people’s rights and       freedoms and if appropriate report this breach to the appropriate       authorities and subjects as required by law.
10. Cookies
    
     
    1. We       may use cookies in order to grant you a personalised experience when       dealing with us.
    2. You       may decline the installation of cookies; however, this may degrade your       website experience.
    3. Third       party cookies may be in use in order to deliver a service via our website       by means of a third-party online service – such as YouTube or Google       Analytics.
11. Collection      of Information
    
     
    1. We       will obtain your consent when collecting personal information for       processing purposes.
    2. On       registration for services or promotions, you may provide us with the       following information:
       1. Name        and surname
       2. Email        address
       3. Contact        numbers
       4. Physical        address
       5. Company        name
       6. Company        address
       7. Company        VAT number
       8. Company        contact person
       9. Company        phone number 
    3. By       using our website, we receive and may record details such as:
       1. Your        IP address
       2. Bounce        rate
       3. Page        time
       4. Cost        per Click
       5. Most        Visited Pages
       6. Device        Information 
    4. From       time to time, we may run promotional campaigns in which additional       details are collected. This information would be provided voluntarily by       you in order to participate or receive a prize delivery.
12. Purpose      of Collection
    
     
    1. We       may process your information for provision of services that you agreed to       when providing it to us.
    2. We       may process your information for billing purposes.
    3. We       may process your information for ongoing communication during the course       of regular business.
    4. We       may process your information for lawful marketing purposes.
13. Marketing      and Targeted Content
    
     
    1. We,       from time to time, may run targeted campaigns on social media and other       platforms. These campaigns would be subject to the privacy policies of       their respective platforms as well as this privacy policy.
14. Sharing      of Information
    
     
    1. We       will not sell personal information. No personal information will be       disclosed to anyone except as provisioned in this Policy.
    2. We       may disclose personal information if required by court order or to comply       with the law.
    3. Information       may be shared between the groups indicated on this policy in order to       provide a service to clients.
15. Cross      Border Transfers
    
     
    1. We       may transfer your information outside of the country in which it was       collected for processing.
    2. You       consent to us processing your personal information in a foreign country       where required for completion of our obligations.
16. Queries
    
     
    1. For       any queries relating to our policy, please contact us on jason@starkravingrad.co.za