Privacy Policy | Machinery For Africa

Effective Date: 29 September 2025

PRIVACY POLICY – MACHINERY FOR AFRICA

At Machinery For Africa (“Company”, “we”, “us”, or “our”), we are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, and protect your personal data when you access our website https://machineryforafrica.com (the “Website”) or use our services (“Services”). If you have any questions or concerns regarding this Privacy Policy, please contact us at David@machineryforafrica.com.

1. INFORMATION WE COLLECT

We may collect the following categories of personal information when you interact with the Website or our Services:

• Identity and Contact Data – name, email address, phone number, company, location.

• Transaction Data – enquiries, orders, purchase history, payment references.

• Technical Data – IP address, browser type/version, device identifiers, operating system, referring URLs, pages viewed, cookies.

• Usage Data – interactions with listings, forms, media downloads, navigation patterns, location data.

• Marketing & Communications Data – marketing preferences, subscription status.

• Any other information voluntarily provided in enquiries or correspondence.

We do not knowingly collect special category data (e.g., health, biometric, religious, or political data) unless legally required or explicitly provided for a defined purpose.

2. HOW WE USE YOUR INFORMATION

We use your personal information for legitimate business purposes, contractual obligations, legal compliance, or with your consent. Specifically, we may:

• Respond to enquiries and provide requested services.

• Manage orders, payments, logistics, and delivery of machinery or equipment.

• Maintain business and transactional records.

• Administer competitions, promotions, or special offers.

• Improve our Website, Services, product listings, and user experience.

• Perform analytics (e.g., traffic, engagement, conversion, inventory relevance), including cookie and tracking analytics.

• Conduct profiling and marketing activities to tailor communications and offers.

• Detect, prevent, or investigate fraud, abuse, or unlawful activity.

• Comply with legal, regulatory, tax, and accounting obligations, including cross-border compliance.

• Enforce our Terms & Conditions and protect our rights, property, and safety.

• Communicate updates, alerts, or marketing (where legally permitted).

We only process data where a lawful basis applies: consent, performance of a contract, compliance with legal obligations, legitimate interests, or protection of vital interests.

3. SHARING YOUR INFORMATION

We may share your information in limited circumstances:

• Service Providers – trusted third parties (hosting, IT support, analytics such as Google Analytics, communication platforms including WhatsApp and email services, CRMs, payment processors, logistics, marketing tools) under contractual obligations of confidentiality and data protection.

• Business Transfers – as part of any merger, acquisition, asset sale, restructuring, or financing.

• Legal and Compliance – where required by law, regulation, subpoena, court order, or governmental request.

• Protection of Rights – to enforce agreements, investigate fraud or security incidents, or protect safety.

• With Your Consent – where you explicitly authorise a disclosure.

We do NOT sell or rent your personal information to third parties.

4. INTERNATIONAL TRANSFERS

Your data may be processed in countries outside your local jurisdiction, including the European Union (EU), United States (US), and other jurisdictions. Where applicable (e.g., GDPR), we implement appropriate safeguards such as Standard Contractual Clauses (SCCs), POPIA compliance measures, and other contractual clauses to protect transferred data.

5. DATA RETENTION

We retain personal information only as long as necessary to fulfil the purposes outlined in this Privacy Policy or to comply with legal obligations (tax, accounting, regulatory, contractual enforcement). Example retention schedules include enquiry data retained for 2 years and transaction data retained for 5 years. When data is no longer required, it is securely deleted, anonymised, or segregated until deletion is feasible (e.g., during backup cycles).

6. SECURITY OF YOUR INFORMATION

We implement appropriate technical and organizational measures (access controls, encryption in transit, least privilege, monitoring) to protect your personal information against unauthorized access, alteration, disclosure, or destruction. Examples of safeguards include firewalls, regular backups, pseudonymisation of data where possible, and limiting access to authorized personnel only. No method of transmission or storage is completely secure; use of the Website is at your own risk.

7. CHILDREN’S PRIVACY

Our Services are not directed to individuals under 18. We do not knowingly collect personal information from anyone under 18. If we become aware that data from a minor has been collected, we will take steps to delete it promptly. Parents/guardians may contact us to request removal.

8. COOKIES & TRACKING TECHNOLOGIES

We (and third parties) may use cookies, pixels, scripts, and similar technologies to:

• Enable core site functionality (essential cookies).

• Remember preferences and improve navigation (functional cookies).

• Perform analytics and measure performance (performance cookies).

• Deliver relevant marketing and advertising (targeting/advertising cookies).

You can adjust browser settings to block or delete cookies. We use consent banners to obtain your permission for non-essential cookies. Doing so may impact certain site features.

9. YOUR RIGHTS (GDPR / POPIA / OTHER)

Depending on your jurisdiction, you may have rights to:

• Access – request a copy of personal data we hold about you.

• Rectify – request corrections to inaccurate or incomplete data.

• Erase – request deletion where no longer necessary (subject to legal retention limits).

• Restrict – limit processing under certain conditions.

• Object – to processing based on legitimate interests or direct marketing.

• Portability – request transfer in a structured, commonly used format.

• Withdraw Consent – where processing is based on consent.

• Lodge a Complaint – with a supervisory authority (e.g., Information Regulator SA, or EU data authority).

Submit requests to: David@machineryforafrica.com. We may verify identity before fulfilling requests.

We aim to respond to GDPR requests within 30 days and POPIA requests within a reasonable time frame. You have the right to complain to the South African Information Regulator at contact@inforegulator.org.za or visit https://www.justice.gov.za/inforeg/ and to the relevant EU data protection authority.

10. DIRECT MARKETING & OPT-OUTS

If you receive marketing communications, you can opt out via unsubscribe links or by emailing us. We may still send transactional or service-related notices.

11. THIRD-PARTY LINKS

Our Website may link to external sites. We are not responsible for their privacy practices. Review third-party policies before providing data.

12. DATA ACCURACY & UPDATES

Please notify us of changes to your personal information so we can keep records accurate and current.

13. LEGAL BASES SUMMARY (GDPR)

• Contract: responding to enquiries, fulfilling orders.

• Legitimate Interests: improving services, security, fraud prevention, analytics, marketing to existing clients.

• Legal Obligation: tax, compliance, regulatory reporting.

• Consent: newsletters, optional cookies, certain international transfers.

14. POPIA PRINCIPLES

We observe lawfulness, minimality, purpose specification, further processing limitation, information quality, openness, security safeguards, and data subject participation.

15. DATA BREACH RESPONSE

In the event of a data breach likely to result in risk to individuals, we will assess impact, mitigate, notify regulators (where required), and inform affected individuals where legally mandated. Under GDPR, notification to regulators must be made within 72 hours of becoming aware of the breach. Under POPIA, notification will be made as soon as reasonably possible.

16. DO-NOT-TRACK

At present, the Website does not respond to browser DNT signals. If standards emerge requiring action, we will update this Policy.

17. UPDATES TO THIS POLICY

We may update this Privacy Policy periodically. The “Effective Date” reflects the latest revision. Material changes will be communicated by prior notice on the Website or direct email where appropriate. Previous versions of this Policy will be archived and accessible for reference.

18. CONTACT US

Machinery For Africa

Krugersdorp, South Africa

Email: David@machineryforafrica.com

Phone: +27 83 625 3695

If you have questions, concerns, or complaints about this Policy or our data practices, contact us using the details above. You may also contact the South African Information Regulator at contact@inforegulator.org.za or visit https://www.justice.gov.za/inforeg/. For EU residents, you may contact the relevant data protection authority listed at https://edpb.europa.eu/about-edpb/board/members_en.