Privacy Policy

1. Introduction

ECH Consultancy (Pty) Ltd, trading as ECH Consultancy, respects your privacy and is committed to handling personal information responsibly, securely and in accordance with applicable South African law.

This Privacy Policy explains what personal information we may collect, how we collect and use it, when it may be shared, how it is protected and what rights you may exercise.

The Protection of Personal Information Act 4 of 2013, commonly known as POPIA, establishes minimum requirements for the lawful processing of personal information by public and private bodies in South Africa.

By using this website, contacting us, requesting a quotation, placing an order or using our services, you acknowledge the practices described in this policy.

2. Responsible Party

For purposes of POPIA, the responsible party is:

• ECH Consultancy (Pty) Ltd
• Trading as: ECH Consultancy
• Address: 10 Bootha Plots, 2nd Road, Botha A/H, Randfontein, 1760
• Email: info@echconsultancy.co.za
• Telephone: 079 476 1900 / 079 872 3133
• Information Officer: To be confirmed
• Privacy enquiries: info@echconsultancy.co.za

The Information Officer should be formally registered with the Information Regulator before performing the duties associated with that role.

3. Personal Information We May Collect

Depending on how you interact with ECH Consultancy, we may collect:

• Your name and surname;
• Business or organisation name;
• Telephone number;
• Email address;
• Physical, billing, delivery or installation address;
• Details submitted through contact, quotation, order or enquiry forms;
• Product and service requirements;
• Property, site, equipment and project information;
• Appointment, inspection and service details;
• Correspondence and customer-support records;
• Quotations, invoices, orders and payment records;
• Photographs, plans or documents supplied for an assessment;
• Website usage, browser, device and IP-address information;
• Cookie and analytics information; and
• Other information you voluntarily provide.

Please do not submit unnecessary sensitive or special personal information through general website forms.

4. How We Collect Information

We may collect personal information:

• Directly from you;
• Through this website and its forms;
• During telephone, email or WhatsApp communication;
• When you request a quotation or assessment;
• When you place an order;
• During site inspections, installations, repairs or service visits;
• From an authorised representative of your business;
• From payment, delivery, supplier or service providers; and
• Automatically through cookies and similar website technologies.

5. How We Use Personal Information

We may process personal information to:

• Respond to enquiries;
• Prepare and issue quotations;
• Process orders and payments;
• Arrange deliveries, inspections, installations and servicing;
• Provide fire-protection and occupational health and safety services;
• Maintain service, inspection and compliance records;
• Communicate appointment, order and project updates;
• Provide technical guidance and customer support;
• Manage client and supplier relationships;
• Meet accounting, tax, insurance and legal obligations;
• Protect our website, systems and business against fraud or misuse;
• Improve our website, products and services;
• Send marketing communications where legally permitted; and
• Establish, exercise or defend legal claims.

6. Grounds for Processing

Depending on the circumstances, we may process personal information because:

• You have given consent;
• Processing is necessary to enter into or perform an agreement;
• Processing is required by law;
• Processing protects a legitimate interest of you or another person;
• Processing is necessary for our legitimate business activities; or
• You have deliberately made the information public.

Where we rely on consent, you may withdraw it at any time, subject to any legal or contractual limitations.

7. Marketing Communications

We may send you marketing or promotional communications where you have consented or where such communication is otherwise permitted by law.

You may opt out at any time by:

• Using the unsubscribe option provided in the communication;
• Replying with an opt-out request; or
• Contacting info@echconsultancy.co.za.

Opting out of marketing will not prevent us from sending necessary communications relating to an enquiry, quotation, order, appointment, service or existing agreement.

8. Cookies and Website Analytics

Our website may use cookies and similar technologies to:

• Enable essential website functionality;
• Remember preferences;
• Measure website performance;
• Understand how visitors use the website;
• Improve content and usability; and
• Support website security.

You can manage cookies through your browser settings. Disabling some cookies may affect how the website functions.

Where non-essential analytics or marketing cookies are used, an appropriate cookie notice or consent mechanism should be displayed.

9. Sharing Personal Information

We may share personal information with trusted third parties where reasonably necessary, including:

• Website and hosting providers;
• IT and cybersecurity providers;
• Payment processors;
• Accountants, auditors, insurers and professional advisers;
• Couriers and delivery providers;
• Manufacturers and suppliers;
• Approved subcontractors and technicians;
• Regulatory bodies; and
• Law-enforcement authorities where legally required.

These parties should receive only the information reasonably necessary to perform their function and must handle that information appropriately.

ECH Consultancy does not sell personal information to third parties.

10. International Transfers

Some cloud, email, website, analytics or technology providers may store or process information outside South Africa.

Where personal information is transferred internationally, we will take reasonable measures to ensure that the transfer complies with applicable legal requirements and that the information receives appropriate protection.

POPIA regulates the movement of personal information across South Africa’s borders.

11. Information Security

We use reasonable technical and organisational safeguards to protect personal information against:

• Loss;
• Unauthorised access;
• Misuse;
• Alteration;
• Unauthorised disclosure; and
• Destruction.

Safeguards may include access controls, passwords, secure hosting, software updates, backups and restricted access by authorised personnel.

No electronic system is completely secure, and we cannot guarantee absolute security.

12. Security Compromises

Where we become aware of a security compromise involving personal information, we will investigate the incident and take appropriate remedial steps.

Where required by law, we will notify the Information Regulator and affected individuals.

13. Retention of Information

We retain personal information only for as long as reasonably necessary to:

• Complete the purpose for which it was collected;
• Maintain service, inspection and maintenance histories;
• Meet contractual obligations;
• Comply with tax, accounting, safety and legal requirements;
• Resolve disputes; and
• Enforce agreements.

Information that is no longer required will be securely deleted, destroyed or de-identified, subject to applicable retention obligations.

14. Your Rights

Subject to applicable law, you may request to:

• Confirm whether we hold your personal information;
• Access the personal information we hold about you;
• Correct inaccurate or incomplete information;
• Request deletion or destruction where legally appropriate;
• Object to certain processing;
• Withdraw consent;
• Request that direct marketing stop; and
• Submit a complaint to the Information Regulator.

We may need to verify your identity before responding to a request.

Some requests may be limited where information must be retained by law or is required for an existing agreement, legal claim or legitimate purpose.

15. Children’s Information

Our products and services are not directed at children.

We do not knowingly collect personal information directly from children without appropriate authorisation from a parent, guardian or competent person where required.

16. Third-Party Links

This website may contain links to external websites or social-media platforms.

ECH Consultancy does not control and is not responsible for the content, security or privacy practices of third-party websites.

Visitors should review the privacy policies of those third parties before providing personal information.

17. Updates to This Policy

We may update this Privacy Policy to reflect changes to our business, website, technology or legal obligations.

The latest version will be published on this page together with a revised “Last updated” date.

18. Contact Us About Privacy

Privacy questions, objections and personal-information requests may be directed to:

• Information Officer
• ECH Consultancy (Pty) Ltd
• Email: info@echconsultancy.co.za
• Telephone: 079 476 1900 / 079 872 3133
• Address: 10 Bootha Plots, 2nd Road, Botha A/H, Randfontein, 1760