POPI & PRIVACY POLICY

GSR’S POLICY IN ACCORDANCE WITH THE PROTECTION OF PERSONAL INFORMATION ACT, 4 OF 2013

1.         GSR recognises the importance of protecting its clients’ privacy in respect of its personal information (as this phrase is defined in the POPI Act) collected by GSR in respect of agreement(s) between them. In adopting this Privacy Policy, GSR wishes to balance its legitimate business interests and their clients’ reasonable expectations of privacy. Accordingly, GSR will take appropriate and reasonable technical and organisational steps to prevent unauthorised access to, or disclosure of their clients’ personal information. However, GSR does not guarantee that their clients’ personal information shall be 100% secure, and their clients accept that reality.

2.         Where there are reasonable grounds to believe that their clients’ personal information has been accessed or acquired by any unauthorised person, GSR will notify their clients and the Information Regulator which is appointed in terms of the POPI Act, and provide all information available in respect thereof.

3.         GSR’s clients hereby agree to the terms and conditions set out in this Policy document, and in particular (but without derogating from the generality of the aforesaid) agrees that GSR may “collect, collate, process and/or store” their personal information (as this term is defined in the POPI Act) (“process”) for, amongst other things, the purposes of providing them with the services and acting in terms of the agreement(s) between them.

4.        GSR reserves the right to vary the terms of this Policy document in accordance with the agreement(s) between the parties in terms hereof. It is GSR’s clients’ responsibility to be aware of and familiarise himself/herself/itself with the most recent version of these Terms and Conditions and this Policy document.

5.         GSR will limit the types of personal information it processes to only that to which their clients have consented to by providing same to GSR, and which is necessary for GSR’s legitimate business interests, and rendering the services.

6.         GSR’s clients hereby acknowledge that all personal information processed by GSR may be stored by it and used for the purposes of the agreement(s) in place between them.

7.         GSR will not disclose any of their clients’ personal information to third parties, except when it has their clients’ permission to do so or where it is required to do so in terms of law. GSR’s clients hereby agree that his/her/its personal information may be shared as required in terms of their agreement(s) with GSR and to enable GSR to render the services.

8.         GSR’s clients have the right to request that GSR correct, destroy or delete any of his/her/their personal information (that is inaccurate, irrelevant, excessive, out of date, incomplete, misleading, obtained unlawfully or that GSR is no longer authorised to retain) that GSR has processed in accordance with the agreement(s) in place.

9.         GSR’s clients have the right to withdraw its consent for GSR to process its personal information at any time. However the withdrawal of such consent can only be made on the condition that the withdrawal of such consent does not affect the processing of the personal information before the withdrawal of such consent; or that the withdrawal of such consent does not affect GSR’s legitimate interests or the legitimate interests of a third party to whom the information is supplied; or that the withdrawal of such consent does not affect the agreement(s) and/or the services to be rendered.

10.       GSR’s clients have the right to object to the processing of his/her/its personal information at any time, on reasonable grounds relating to its particular situation, unless the processing is required by law and provided that that the objection does not affect the processing of the personal information before the objection; or that the objection does not affect GSR’s legitimate interests or the legitimate interests of a third party to whom the information is supplied; or that the objection does not affect the agreement(s) and/or the services to be rendered.

11.       GSR’s clients have the right to object to the processing of his/her/its personal information, at any time, if the processing is for purposes of unsolicited direct marketing and they have not given his/her/its consent for that processing.

12.       GSR’s clients have the right to not have his/her/its personal information processed for purposes of direct marketing by means of unsolicited electronic communications from third parties unknown to it.

13.       GSR’s clients have the right not to be subjected to a decision which is based solely on the basis of the automated processing of its personal information intended to provide a profile of him/her/it, and have the right to submit a complaint to the Information Regulator regarding an alleged interference with the protection of personal information processed in accordance hereof. The Information Regulator’s contact details will be published by the Government in due course in terms of the POPI Act.

14. If you have any questions or concerns arising from this privacy policy, please contact us.