JUCHEPI GROUP (PTY) LTD.
PRIVACY NOTICE
Effective date: 16 September 2026
Responsible Party: Juchepi Group (Pty) Ltd
Registration Number: 2024/476642/07
Physical Address: 76 De Waal Street, Brackendowns, Alberton, Gauteng, 1448, South Africa
Email: info@juchepigroup.com
1. Purpose of this notice
Juchepi Group (Pty) Ltd (“Juchepi Group”, “we”, “us” or “our”) respects the privacy of individuals and organisations whose personal information we process.
This Privacy Notice explains how Juchepi Group collects, uses, stores, shares, protects and disposes of personal information in accordance with the Protection of Personal Information Act 4 of 2013 (“POPIA”) and other applicable South African law.
This notice also provides the information required when Juchepi Group collects personal information from or about a data subject.
2. Scope
This notice applies to personal information processed through:
- the Juchepi Group website;
- website contact and enquiry forms;
- email, telephone and other business communications;
- quotations, proposals and contracts;
- consulting and project engagements;
- website and digital-development engagements;
- technology and operational projects;
- customer and prospect relationships;
- suppliers, contractors and service providers;
- invoicing, accounting and administration;
- marketing and business-development activities; and
- other ordinary business activities conducted by Juchepi Group.
Certain Juchepi Group products, platforms or trading divisions may have additional privacy notices appropriate to their specific processing activities.
Where a separate product-specific privacy notice applies, it should be read together with this notice.
3. Personal information we may collect
Depending on the relationship and purpose, we may process information including:
3.1 Identity and contact information
This may include:
- name and surname;
- business or organisation name;
- email address;
- telephone number;
- physical or business address;
- job title or role; and
- authorised representative information.
3.2 Business and professional information
This may include:
- employer or organisation;
- industry;
- business requirements;
- project information;
- professional correspondence;
- proposals;
- quotations;
- contracts; and
- other information necessary to establish or manage a business relationship.
3.3 Financial and transaction information
Where relevant, we may process:
- billing information;
- payment references;
- invoices;
- transaction records; and
- information required for accounting, tax or contractual purposes.
We do not request payment-card credentials through ordinary website contact forms.
3.4 Communications
We may retain communications sent to or received from you, including:
- email correspondence;
- website enquiries;
- meeting records;
- support requests;
- instructions;
- complaints; and
- other business communications.
3.5 Website and technical information
When you use our website, certain technical information may be processed automatically, such as:
- IP address;
- browser type;
- device type;
- date and time of access;
- pages requested;
- referring page;
- server and security logs; and
- cookie or similar technical information where applicable.
This information may be used for website operation, security, diagnostics, fraud prevention, performance and lawful analytics.
3.6 Marketing preferences
Where marketing is undertaken, we may record:
- whether you consented to receive marketing;
- the method and date of consent;
- your communication preferences;
- withdrawal of consent;
- unsubscribe requests; and
- objections to direct marketing.
4. Sources of personal information
We generally collect information directly from you.
We may also lawfully receive information from:
- your employer or organisation;
- an authorised representative;
- a customer or business partner making an introduction;
- suppliers or service providers;
- publicly accessible business information;
- company websites;
- public registers;
- professional directories; or
- another lawful source.
Where POPIA requires us to inform you that information was obtained from another source, we will do so unless a statutory exception applies.
5. Why we process personal information
Juchepi Group may process personal information to:
- respond to enquiries;
- communicate with prospective or existing clients;
- prepare proposals and quotations;
- enter into and perform contracts;
- deliver agreed services;
- manage projects;
- provide support;
- manage suppliers and contractors;
- administer accounts and payments;
- issue invoices;
- maintain business and financial records;
- operate and secure our website and systems;
- investigate security incidents or misuse;
- protect our legal rights;
- comply with legislation and regulatory obligations;
- establish, exercise or defend legal claims;
- maintain appropriate business records;
- manage customer relationships;
- improve our services and business operations; and
- conduct lawful marketing activities.
POPIA allows processing on grounds including consent, contractual necessity, legal obligations, protection of legitimate interests and the legitimate interests of the responsible party or a third party.
6. Voluntary and mandatory information
Some information is provided voluntarily, for example when you submit a general enquiry.
Other information may be required in order for Juchepi Group to:
- respond effectively to your request;
- prepare a quotation;
- conclude or perform a contract;
- provide a service;
- process a payment;
- issue an invoice; or
- comply with a legal obligation.
Where required information is not supplied, we may be unable to provide the requested service or complete the relevant transaction.
Fields that are mandatory on electronic forms should be clearly identified.
7. Direct marketing
Submitting an enquiry to Juchepi Group does not automatically mean that you have consented to receive marketing.
Where consent is required for electronic direct marketing, Juchepi Group will obtain it separately.
Marketing consent must be voluntary and separate from consent required to process an enquiry or provide a service.
You may withdraw marketing consent or object to direct marketing at any time.
Where Juchepi Group lawfully markets similar products or services to an existing customer under POPIA, the customer must be given a reasonable opportunity to object, free of charge, both when the information is collected and in subsequent marketing communications.
Electronic marketing communications will identify the sender and provide a practical means to request that marketing communications cease.
This follows section 69 of POPIA, which regulates unsolicited electronic direct marketing and restricts when consent may be requested and how existing-customer marketing may occur.
8. Cookies and website technologies
Our website may use cookies and similar technologies necessary for its operation, security and performance.
Where non-essential cookies, analytics or other tracking technologies require a choice or consent, they should be managed through the website’s cookie controls.
Further information is available in the Juchepi Group Cookie Policy.
9. Sharing personal information
Juchepi Group does not sell personal information.
We may disclose personal information where reasonably necessary to:
- employees or authorised personnel;
- contractors performing authorised work;
- professional advisers;
- legal advisers;
- accountants or auditors;
- hosting and cloud providers;
- email providers;
- IT and security service providers;
- accounting or administrative platforms;
- payment-service providers;
- other operators processing information on our behalf;
- law-enforcement bodies;
- regulators;
- courts; or
- another recipient where disclosure is authorised or required by law.
Where an operator processes personal information on our behalf, POPIA requires appropriate security measures to be addressed contractually and requires operators to notify the responsible party where unauthorised access or acquisition is suspected.
10. International or cross-border processing
Some service providers, technology platforms, hosting infrastructure or cloud services used by Juchepi Group may process or store information outside South Africa.
Where personal information is transferred outside South Africa, Juchepi Group will apply the requirements of section 72 of POPIA.
This may include ensuring that the recipient is subject to an adequate level of protection, appropriate binding obligations, consent where applicable, or another lawful basis permitted by POPIA.
11. Security
Juchepi Group takes appropriate and reasonable technical and organisational measures designed to protect personal information against:
- loss;
- damage;
- unauthorised destruction;
- unlawful access;
- unauthorised use; and
- unlawful processing.
Security measures are reviewed according to the nature of the information, foreseeable risks and the systems used to process it.
POPIA expressly requires responsible parties to identify reasonably foreseeable risks, establish safeguards, verify their implementation and update them when risks or deficiencies arise.
No internet-connected system can, however, be represented as completely immune from security risk.
12. Security compromises
If Juchepi Group has reasonable grounds to believe that personal information has been accessed or acquired by an unauthorised person, the incident will be assessed and handled in accordance with POPIA.
Where required, Juchepi Group will notify the Information Regulator and affected data subjects as soon as reasonably possible, subject to the circumstances and statutory exceptions.
POPIA section 22 expressly imposes this notification obligation.
13. Retention of personal information
Juchepi Group retains personal information only for as long as:
- necessary for the purpose for which it was collected;
- required or authorised by law;
- reasonably required for lawful business purposes;
- required under a contract;
- necessary for legal claims or evidence; or
- otherwise lawfully authorised.
Once Juchepi Group is no longer authorised to retain personal information, it will be securely deleted, destroyed or de-identified as reasonably practicable.
POPIA specifically requires records to be deleted, destroyed or de-identified once continued retention is no longer authorised.
Specific retention periods are governed by Juchepi Group’s internal Data Retention Schedule.
14. Accuracy
Juchepi Group takes reasonably practicable steps to ensure that personal information is complete, accurate, not misleading and updated where necessary for the purpose for which it is processed.
Data subjects are encouraged to notify us when information requiring correction has changed.
15. Your rights
Subject to POPIA and PAIA, you may have the right to:
- ask whether Juchepi Group holds personal information about you;
- request access to your personal information;
- request correction of inaccurate information;
- request deletion or destruction where Juchepi Group is no longer authorised to retain the information;
- object to certain processing;
- object to direct marketing;
- withdraw consent where processing depends on consent;
- request restriction of processing where applicable; and
- lodge a complaint with the Information Regulator.
POPIA expressly provides access, correction/deletion and objection rights.
Requests may require reasonable verification of the identity and authority of the requester before information is disclosed or changed.
16. Privacy requests
A request concerning your personal information may be submitted to:
Juchepi Group (Pty) Ltd
Email: info@juchepigroup.com
Address: 76 De Waal Street, Brackendowns, Alberton, Gauteng, 1448, South Africa
Our dedicated Privacy Requests page contains the request procedure and official prescribed forms.
Formal access-to-record requests under PAIA will be dealt with under Juchepi Group’s PAIA Manual.
17. Complaints to the Information Regulator
You may lodge a complaint with the Information Regulator if you believe your personal information has been processed unlawfully.
Information Regulator (South Africa)
Woodmead North Office Park
54 Maxwell Drive
Woodmead
Johannesburg
2191
Telephone: 010 023 5200
Toll Free: 0800 017 160
Email: enquiries@inforegulator.org.za
The Regulator’s current eServices platform also provides online facilities for POPIA complaints and security-compromise reporting.
18. Children’s personal information
The general Juchepi Group corporate website is not intended to collect personal information directly from children.
Where a Juchepi Group product or service lawfully processes children’s information, that processing will be governed by the applicable product-specific privacy notice and the requirements of POPIA concerning children’s personal information.
This is particularly important for SafeLink Kids, which will have its own detailed privacy and competent-person consent framework.
19. Changes to this Privacy Notice
Juchepi Group may update this Privacy Notice to reflect:
- changes in legislation;
- regulatory guidance;
- changes to our services;
- changes to our systems or suppliers; or
- improvements to our privacy practices.
The current version will be published on the Juchepi Group website together with its effective or last-updated date.
Material changes affecting existing processing may be communicated through an appropriate additional notice where required.
20. Contact
Questions about this notice or the processing of personal information may be sent to:
Juchepi Group (Pty) Ltd
Reg. No. 2024/476642/07
76 De Waal Street
Brackendowns
Alberton
Gauteng
1448
South Africa
Email: info@juchepigroup.com