PRIVACY NOTICE
Your information, handled with care.
How Mhatu Minerals and Investments (Pty) Ltd collects, uses, shares and protects personal information, in line with the Protection of Personal Information Act 4 of 2013 (POPIA).
1. Who is responsible
The responsible party under POPIA is Mhatu Minerals and Investments (Pty) Ltd, Registration No. 2016/253038/07, 2 Bruton Road, Nicol Main Office Park, Block C, Bryanston, Johannesburg, 2191, South Africa. Office line: +27 60 682 7142.
Privacy requests and complaints go to legal@mhatuminerals.africa. They are handled by the company’s Information Officer, who is the head of the company as provided in POPIA.
2. What we collect
We collect personal information only when you give it to us, mainly through the enquiry form on the contact page or by writing to one of our mailboxes.
- Your name, company or organisation, email address and telephone number.
- The department and commodity or topic your enquiry relates to.
- The content of your message, and any documents you choose to send us.
- A one-way scrambled (hashed) form of your IP address, held briefly in a temporary file on the server, solely to limit repeated form submissions and prevent abuse. It is not used to identify you.
This website does not use cookies, analytics, advertising or tracking tools. Please do not send identity numbers, bank or card details, or health information through the form or by email. We do not need them to respond to an enquiry.
3. Why we use it
- To read your enquiry, route it to the right team and respond to you.
- To assess and follow up a commercial, investment, supply, partnership or project proposal you have raised.
- To keep a record of the engagement, including for legal, compliance and audit purposes.
- To protect the website and our systems from abuse.
We rely on your request to engage with us, our legitimate interest in running a business-to-business enterprise, and legal obligations. We do not use your information for unrelated marketing and we do not sell it.
4. Who sees it, and where it goes
Enquiries are emailed to the relevant Mhatu mailbox (general, investment, logistics, finance, legal, or a named contact) and are seen only by people who need them to respond.
We use service providers to host the website and to deliver email. They process information on our behalf under their own security obligations. We may also disclose information where the law requires, or to professional advisers, financiers or counterparties you have asked us to engage with.
The website loads fonts from Google (fonts.googleapis.com and fonts.gstatic.com). When a page loads, your browser connects to Google, which receives your IP address and browser details. Google may process this outside South Africa. Links to Google Maps and to other external sites open on those sites, which have their own privacy practices.
Where information is transferred outside South Africa, we do so only where the recipient is bound by law, binding rules or an agreement that gives protection substantially similar to POPIA, or as otherwise permitted by POPIA.
5. How long we keep it
Enquiry records are retained only as long as necessary for their purpose, subject to applicable legal, contractual and business requirements. When they are no longer needed they are deleted or de-identified. The rate-limiting file in section 2 is temporary and is cleared automatically.
6. How we protect it
We take reasonable technical and organisational measures to prevent loss, damage, unauthorised access and unlawful processing. The site is served over HTTPS, forms include spam and abuse controls, and access to enquiry mailboxes is limited. If a security compromise affects your personal information, we will notify you and the Information Regulator as POPIA requires.
7. Your rights
Under POPIA you may:
- ask whether we hold personal information about you, and request a copy;
- ask us to correct or delete information that is inaccurate, irrelevant, excessive, out of date or unlawfully obtained;
- object to our processing of your information on reasonable grounds;
- withdraw consent you have given, without affecting processing already done;
- lodge a complaint with the Information Regulator.
Email legal@mhatuminerals.africa with your request. We may ask you to confirm your identity first, and we will respond within a reasonable time.
8. Complaints to the Information Regulator
If you believe we have handled your information unlawfully and we have not resolved your concern, you may contact the Information Regulator (South Africa): website inforegulator.org.za; complaints complaints.IR@justice.gov.za; general enquiries inforeg@justice.gov.za.
9. Children
This website is intended for business and institutional users. It is not directed at children, and we do not knowingly collect information from anyone under 18.
10. Changes to this notice
We may update this notice from time to time. The effective date above shows the latest version. Material changes will be posted on this page.