Privacy Notice and POPIA Information

1. Scope of this notice

This notice applies to personal information processed by African Resolve Holdings through its public website, secure portals, email, telephone calls, meetings, proposals, quotations, supplier and subcontractor onboarding, project administration, event and workforce coordination, recruitment, commercial discussions and related business records.

It applies to information in electronic and physical form. Separate contractual, employment, project or platform terms may provide additional information for a particular relationship or processing activity.

2. Responsible party and Information Officer

The responsible party is African Resolve Holdings (Pty) Ltd, operating from Pretoria, Gauteng, South Africa. African Resolve Holdings determines why and how the information covered by this notice is processed.

Privacy, correction, objection and access requests may be directed to info@africanresolve.com.

3. Whose information African Resolve Holdings processes

Depending on the relationship, information may relate to:

website visitors and people who submit enquiries;
clients, prospective clients and their employees or representatives;
public institutions, private companies and other contracting organisations;
suppliers, manufacturers, distributors, subcontractors, consortium members and professional advisers;
directors, shareholders, employees, contractors, consultants, event staff, promotional personnel and applicants;
references, beneficiaries, authorised users and other people identified in project, tender or commercial records.

4. Information African Resolve Holdings may process

Category	Examples
Identity and contact information	Names, identity or registration numbers where required, email addresses, telephone numbers, physical addresses and signatures.
Professional and organisational information	Employer, job title, qualifications, experience, professional registrations, authority, directorships and organisational contact details.
Project and commercial information	Scopes, specifications, quantities, budgets, quotations, tender documents, pricing, correspondence, meeting records, delivery information and contract records.
Supplier and compliance information	Company records, tax and B-BBEE evidence, CSD information, licences, insurance, safety records, declarations, references, beneficial ownership and conflict disclosures.
Financial information	Invoices, payment records, banking details received through approved channels, credit information and records required for accounting, audit or fraud prevention.
Employment and deployment information	Applications, CVs, availability, attendance, payroll information, work allocation, performance records, emergency details and event or site deployment information.
Website and system information	IP address, approximate network location, browser and device data, referral information, pages viewed, form activity, authentication records, audit logs and security events.
Communications and evidence	Emails, messages, call notes, meeting minutes, photographs, submitted documents and records of decisions, approvals, delivery and handover.

Special personal information and children

African Resolve Holdings does not request special personal information or information about children through a general public enquiry unless it is lawful, relevant and necessary for a defined purpose. Examples may include health and safety information for a site deployment, demographic information required for lawful transformation reporting, or criminal and qualification checks required for a specific role or contract.

Do not submit identity documents, medical information, learner records or banking details through the general contact form. Where such records are required, African Resolve Holdings will identify an appropriate submission channel.

5. Where information comes from

Information may be obtained:

directly from the data subject or the organisation the person represents;
from clients, suppliers, consortium members, employers, references or authorised representatives;
from documents submitted for a quotation, tender, project, due-diligence review or contractual relationship;
from lawful public sources such as company registers, supplier databases, professional registers, tender portals, websites and published reports;
from technology, security, analytics, verification, communications and professional service providers;
from African Resolve Holdings' systems and records generated during the relationship.

6. Why information is processed

African Resolve Holdings may process information to:

respond to enquiries and assess technical, commercial, supply and project requirements;
prepare proposals, quotations, bids, delivery plans, agreements and supporting documents;
source products, compare suppliers, coordinate logistics and administer procurement;
perform supplier, subcontractor, personnel, conflict, reference, compliance and risk checks;
manage projects, service delivery, reporting, quality records, variations, invoicing, handover and support;
recruit, appoint, schedule, deploy and administer employees, contractors, event personnel and specialists;
manage relationships with clients, authorities, partners, suppliers, advisers and service providers;
maintain accounting, tax, governance, audit, insurance, safety and statutory records;
prevent fraud, misuse, unauthorised access and other threats to people, systems, property and information;
analyse website use, maintain functionality and improve content and services;
establish, exercise or defend legal rights and comply with lawful requests.

Lawful grounds

Processing is carried out where it is justified by consent; necessary to take steps requested before entering into an agreement; necessary to perform an agreement; required by law; necessary to protect a legitimate interest of the data subject; or necessary for the legitimate interests of African Resolve Holdings or a third party, provided those interests do not unjustifiably prejudice the data subject.

Required and voluntary information

General enquiries are voluntary. Information marked as required, requested during onboarding or required by a tender, contract, safety rule or law must be supplied for the relevant process. African Resolve Holdings may be unable to quote, contract, onboard, pay, deploy or deliver where necessary information is not provided or cannot be verified.

Software-assisted processing

African Resolve Holdings may use software tools to organise, validate, compare, classify or summarise business information. Decisions that materially affect a person or organisation are subject to appropriate human review and are not based solely on automated processing without the safeguards required by law.

Direct marketing

Operational messages about an enquiry, quotation, contract, project or account are not marketing messages. Electronic direct marketing is sent only where permitted by law, and each recipient may object or use the unsubscribe mechanism provided. An objection to direct marketing does not prevent necessary contractual, security or administrative communication.

7. Sharing, recipients and operators

Information is disclosed only where reasonably necessary for the stated purpose. Recipients may include:

authorised directors, employees, contractors and project personnel;
clients, prospective clients and contracting authorities where information forms part of a lawful proposal, tender, team submission or delivery process;
suppliers, manufacturers, logistics providers, specialists, subcontractors, consortium members and implementation partners;
accountants, auditors, attorneys, insurers, banks and other professional advisers;
hosting, email, communications, document, analytics, security, identity and business-system providers acting as operators;
regulators, courts, law-enforcement bodies and public authorities where disclosure is authorised or required.

African Resolve Holdings does not sell personal information to advertisers. Operators are selected according to the service, information and risk involved, and are expected to process information only for authorised purposes and apply appropriate safeguards.

Commercial confidentiality

Reasonable controls are applied to proposals, prices, designs, specifications and other confidential business information. Submission through the public website does not by itself create a non-disclosure agreement, fiduciary relationship, partnership or obligation to proceed. Sensitive commercial material should be exchanged through an agreed channel and, where appropriate, under written confidentiality terms.

8. Cross-border and cloud processing

Technology, hosting, email, analytics, communications, manufacturer and document services may process or store information outside South Africa. Cross-border transfers are made only where African Resolve Holdings considers the transfer lawful and reasonably appropriate safeguards are available, including applicable laws, contractual protections, consent or another permitted basis under POPIA.

9. Information security and security compromises

African Resolve Holdings applies safeguards appropriate to the information and operational risk, including where relevant:

role-based access, authentication and least-privilege controls;
secure hosting, encrypted connections, protected devices and controlled administrative access;
antiforgery, validation, audit logging, monitoring, backups and recovery controls;
confidentiality obligations, supplier controls and secure document-sharing procedures;
verification of sensitive instructions, including changes to banking or payment information;
incident investigation, containment, evidence preservation and corrective action.

No transmission or storage method is risk-free. Where African Resolve Holdings has reasonable grounds to believe personal information has been accessed or acquired by an unauthorised person, the incident is assessed and notifications are made to the Information Regulator and affected data subjects as required by POPIA.

10. Retention and destruction

Records are retained for the period required by their purpose, the relationship, contractual obligations, applicable law, audit requirements, dispute periods and legitimate evidentiary needs. Retention is not extended merely because storage is available.

Record type	Retention approach
General enquiries	Kept while the enquiry is active and for a reasonable follow-up, complaint, security and evidentiary period.
Quotations, proposals and due diligence	Kept for commercial follow-up, audit, conflict management and proof of the assessment or decision.
Contracts, tenders and project records	Kept for the contract or project period and the applicable legal, audit, warranty, limitation and record-keeping periods.
Accounting, tax and payment records	Kept for the periods required by South African tax, accounting and corporate law, generally at least five years where applicable.
Personnel and deployment records	Kept for employment, payroll, safety, client, dispute and statutory requirements.
Security, authentication and audit logs	Kept for a proportionate period needed to investigate misuse, support systems and demonstrate authorised activity.
Analytics and cookies	Kept according to the configured service retention periods and the purposes described in this notice and the cookie policy.

When information is no longer required, it is deleted, destroyed or de-identified in a manner appropriate to the record and storage medium, unless continued retention is required or permitted by law.

11. Data-subject rights

Subject to POPIA, PAIA and other applicable law, a data subject may:

ask whether African Resolve Holdings holds personal information about them;
request access to that information and information about its processing or disclosure;
request correction, completion, deletion or destruction of information that is inaccurate, irrelevant, excessive, out of date, incomplete, misleading, unlawfully obtained or no longer authorised to be retained;
object, on reasonable grounds, to processing based on legitimate interests;
object at any time to direct marketing;
withdraw consent where processing depends on consent, without affecting earlier lawful processing;
request review of a qualifying decision based solely on automated processing;
submit a complaint to the Information Regulator or pursue another remedy available by law.

Requests must contain enough information to identify the person and the relevant records. African Resolve Holdings may request proof of identity or authority, redact information relating to another person, charge a fee permitted by PAIA, or refuse a request where the law allows or requires it.

PAIA access requests

Formal requests for access to records are administered under the Promotion of Access to Information Act. Requests should identify the record, the right being exercised or protected, the preferred form of access and the requester's contact details. Official PAIA forms and guidance are available from the Information Regulator.

Contact the Information Officer Company and compliance information

12. Cookies, analytics and website technology

Essential cookies and browser storage may be used for security, authentication, antiforgery protection, session management and requested website functions. These technologies are necessary for secure and reliable operation of the relevant features.

When the Google Analytics measurement ID is configured, Google Analytics operates on public pages to measure visits, traffic sources, pages viewed, approximate network location, browser and device characteristics and interaction events. African Resolve Holdings uses this information to understand public interest, identify technical problems and improve content and navigation. The site does not configure Google Analytics for advertising personalisation.

The compact website notice records that the disclosure has been acknowledged; dismissing the notice does not switch analytics off. Visitors can restrict or delete cookies through browser controls and may use privacy or analytics-blocking tools. Further details appear in the cookie policy.

Third-party websites

Links to government portals, suppliers, professional bodies and other external websites are provided for convenience or verification. Those organisations process information under their own terms and privacy notices. African Resolve Holdings is not responsible for an external site's privacy practices or security.

13. Questions, objections and complaints

Privacy concerns should first be directed to the Information Officer so that the matter can be investigated and addressed. A person may also lodge a POPIA complaint or a PAIA complaint with South Africa's Information Regulator.

Official guidance, complaint procedures and forms are available from the Information Regulator.

14. Changes to this notice

African Resolve Holdings may revise this notice when its processing activities, systems, services or legal obligations change. The effective date identifies the version currently published on the website. Material changes are communicated through an appropriate website notice or direct communication where required.