Last updated: September 2025

TBAC South Africa Privacy Policy

TBAC South Africa (“the Company”, “we”, “our”, “us”) respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and protect your information when you interact with us, whether through our website, email, telephone, or in person.

We process personal information in accordance with the Protection of Personal Information Act, 4 of 2013 (“POPIA”), the 2025 Amended POPIA Regulations, and other applicable data protection laws.

By engaging with us, you acknowledge that you have read and understood this Privacy Policy. Where consent is required (e.g. for marketing), we will always obtain your explicit, prior consent which you may withdraw at any time.

  1. Information We Collect

We may collect the following categories of personal information:

1.1 Personal Information you provide directly

  • Name, surname, company details, contact details (email, phone, postal address)
  • Order and billing details
  • Payment and account information (excluding full card details, which are handled securely by our payment providers)
  • Any correspondence sent to us

1.2 Information collected automatically

  • IP address, device type, browser type, and access times
  • Website navigation patterns (pages visited, referring site)
  • Cookies and similar tracking technologies (see Clause 8 below)

1.3 Special Personal Information
We do not intentionally collect sensitive personal information (such as health or biometric data). If required for legal or contractual reasons, such information will only be processed in accordance with POPIA safeguards.

1.4 Children’s Information
Our services are not directed at children under 18. We do not knowingly collect their data without parental/guardian consent.

  1. How We Use Personal Information

We process your personal information for the following purposes:

  • To process and fulfil customer orders and deliver products
  • To respond to your enquiries and provide customer support
  • Managing supplier, distributor, and business partner relationships
  • To send you marketing communications, promotions, and updates (only with your consent)
  • To conduct market research and improve our products and services
  • To comply with legal and regulatory requirements
  • For audit, risk management, and compliance purposes

Further processing will only be done where it is compatible with the original purpose of collection.

  1. Sharing and Transfers
  • We may share your information with trusted service providers (operators) who process information on our behalf (e.g. logistics partners, IT providers, payment processors). These operators are contractually bound to comply with POPIA.
  • We may transfer personal information outside South Africa only where adequate protections are in place, or where you have consented, or as otherwise permitted by law.
  • Aggregated or anonymised data (not identifying you) may be shared for analytical purposes.
  1. Data Retention

We retain personal information only as long as necessary to fulfil the purposes outlined above, or as required by law. When information is no longer needed, it will be securely destroyed, deleted, or anonymised.

  1. Security Safeguards

We use appropriate technical and organisational safeguards to protect personal information, including:

  • Secure servers, encryption, firewalls, and SSL technology
  • Strict access controls and password protection
  • Staff confidentiality agreements and training
  • Regular monitoring and audits

Data Breaches

If your personal information is compromised, we will:

  • Notify the Information Regulator of South Africa via the official e-Services Portal, and
  • Notify you as soon as reasonably possible, providing details of the breach and protective measures.
  1. Your Rights

You have the following rights under POPIA:

  • Access: Confirm whether we hold your personal information.
  • Correction: Request corrections or updates to your personal information.
  • Deletion/Destruction: Request deletion or destruction of information that is unnecessary, inaccurate, excessive, or unlawfully held.
  • Objection: Object to the processing of your personal information, including for direct marketing.
  • Withdraw Consent: Withdraw your consent at any time (e.g. unsubscribe from marketing).
  • Lodge a Complaint: Submit a complaint to the Information Regulator if you believe your rights have been infringed.

Submitting Requests

You may exercise your rights free of charge via any of these channels:

  • Email
  • Telephone (including recorded calls)
  • WhatsApp
  • In person at our offices

Proof of identity may be required. We will respond within a reasonable period as required by POPIA.

  1. Cookies and Tracking

We use cookies and similar technologies to:

  • Enable website functionality
  • Remember preferences
  • Improve website performance and user experience
  • Conduct analytics and measure marketing effectiveness

Non-essential cookies (e.g. for advertising) will only be activated with your consent. You may manage cookies through your browser or via our cookie settings tool.

  1. Links to Third-Party Websites

Our website may include links to other websites. We are not responsible for their privacy practices and encourage you to read their privacy policies.

  1. Changes to this Policy

We may update this Privacy Policy from time to time. Updates will be posted on our website with a “last updated” date. If changes are significant, we will notify you directly.

  1. Contact Us

Information Officer

Tshepi Muleya

Marketing Manager

Email: info@tbac.co.za

Information Regulator (South Africa)
Website: https://www.justice.gov.za/inforeg/
Complaints email: complaints.IR@justice.gov.za