Popi Act

ORAH ENERGY POPI ACT Orah Energy Pty Limited (“Company”) is committed to respecting your privacy and committed to protecting your personal information as required in terms of the Protection of Personal Information Act 4 of 2013 as amended. This policy sets out the privacy practices for our Company. In this policy we state how we process personal information collected about you via your interactions with our online content, such as contact forms and tools, and/or provided directly by you. Please read this statement carefully to understand why information is being collected and what we do with that information because by accessing, browsing or otherwise using our website, you confirm that you have read, understood and agree to the terms of this Privacy Policy, and therefore, you agree to the collection and use of your information in accordance with this statement, until further notice or update of your preferences. Our website and services may contain links to other independent websites. These sites may ask you to provide information to them. Please be aware that such requests and information provided is not under our control, and we are not responsible for the privacy practices of those other sites. We encourage you to be aware when you leave our website to read the privacy statement of each and every website that you enter. We may change this policy from time to time by updating this policy. You should check this policy from time to time to ensure you are happy with any changes. INFORMATION COLLECTED AND USED 1. What type of information do we collect from you? When you access our website or any other third parties who host, maintain or support our delivery of services, may collect personal and technical information about you. The personal information we collect from you will typically include the following: - Full name and contact details (including your contact number, email and postal address). - Any phone number or email used to get in touch with us. Technical information The technical information collected is anonymous and will include the usage information about visits to our website (via ‘cookies’ which enables our website to remember information about you and your preferences). The technical information collected includes: - Internet Protocol (IP) address used to connect your device to the Internet. - URL click stream to and from our site (including date and time). - Device operating system and platform. - Device location data (if function is not disabled on your device). - Browser and plugin types and versions. - Login usernames. - Time zone settings. - Pages and/or products viewed and/or searched for. 1 - Time spent on certain page and page interaction information (such as scrolling, clicks and mouse-overs). - Methods used to land and exit from the website and/or page. - Page response times. - Download errors. Communication history between you and our Company, including a record of the email, telephone and postal correspondence created (i) when you contact us as part of a product or service query; (ii) during the contractual period of the delivery of services. . Where we need to collect personal information by law (for example, to meet our obligations to prevent fraud and money laundering) or under the terms of a contract we have with you, and you fail to provide that information when requested, we may not be able to (i) perform the existing contract and/or services as requested, (ii) enter in a contract and/or services as requested. In this case, we may have to cancel a contract or service you have with us, but we will notify you if this is the case at the time. 2. What are we going to do with your information? We will hold and use personal information about you in the following ways: - To fulfil our obligations to you when providing you with any of our services. - To share your information with others where necessary to fulfil our services or were acting as agent for a third party on your behalf. - To comply with our statutory and regulatory obligations, including verifying your identity, prevention of fraud and money laundering and to assess your credit worthiness. - Communicate with you during the course of providing our services, for example with your enquiries and requests. - Statistical purposes so we can analyse figures to help us manage our business and plan strategically for the future. - To provide you, or to enable third parties to provide you, with information about goods or services we feel may interest you: where you have provided permission for us to do so or, if you are an existing customer where we choose to contact you by electronic means (including newsletter and email) with information about our own goods and services similar to those which you have already obtained from us or negotiated to obtain from us. For those marketing messages you may unsubscribe at any time. - Track your use of our service, including your navigation of our website in order to improve the website performance and user experience. - To ensure that content from our website is presented in the most effective manner for you and for your device. - To notify you about changes to our service. 3. Storage and Retention and Destruction of Information. Orah Energy will ensure that the Data Subject’s Personal Information is stored electronically in a data base, which, for operational reasons, will be accessible to various employees within Orah Energy on a need to know and business basis, save that where appropriate, some of the Data Subject’s Personal Information may be retained in hard copy. All such Personal Information will be held and/or stored securely. In this regard Orah Energy will ensure that it performs regular audits regarding the safety and the security of all Data Subject’s Personal Information. Once the Data Subject’s Personal Information is no longer required due to the fact that the purpose for which the Personal Information was held has come to an end and expired, such Personal Information will be safely and securely archived for the required prescribed periods or longer should this be required by Orah Energy. Orah Energy thereafter will ensure that such Personal Information is permanently destroyed. 2 Access by Others. Orah Energy may from time to time have to disclose a Data Subject’s Personal Information to other parties, including organs of state, other departments or subsidiaries, product or third-party service providers, regulators and or governmental officials, service providers and/or agents; however, such disclosure will always be subject to an agreement which will be concluded between Orah Energy and the party to whom it is disclosing the Data Subject’s Personal Information to, which contractually obliges the recipient of this Personal Information to comply with strict confidentiality and data security conditions. Where Personal Information and related data is transferred to a country which is situated outside the borders of South Africa, the Data Subject’s Personal Information will only be transferred to those countries which have similar data privacy laws in place or where the recipient of the Personal Information is bound contractually to a no lesser set of obligations than those imposed by POPIA. Where a Data Subject is desirous of obtaining details of the Personal Information which Orah Energy may hold and which pertains to such Data Subject, then it must make application to Orah Energy in accordance with the provisions contained in this manual. 4. Records held by Orah Energy that are available on Request. In terms of various regulatory and operational requirements of Orah Energy, various records of Orah Energy are not automatically available and any request for access to such information will be assessed in accordance with Orah Energy’s internal policies and legislative requirements. These records include, but are not limited to, the following: Companies Act Record  Statutory Returns  Share Register  Memorandum of Incorporation Income Tax Record  PAYE Records  Skills Development Levies  Unemployment Insurance Fund  Workmen’s Compensation  Value Added Tax  Documentation issued to employees for Tax Purposes  Records of payment to SARS  All or any statutory compliance Labour/Employment Related Records  Employment Contracts  Employee Records  Pension Fund Records  Employment Equity Plan  Medical Aid Records  Training Manual and Records  Leave and Salary Records  Disciplinary Records  Skills Development Plan 3