Introduction and scope
Macsteel Service Centres SA (Pty) Limited is a registered company that provides steel products and related services (“MSCSA" or “we" or “us" or “our").
MSCSA is committed to protecting and respecting your privacy. We strive to ensure that our use of your Personal Information is lawful, reasonable, and relevant to our business activities, with the ultimate goal of improving our services and your experience.
us, and our successors-in-title; and
you, namely a registered user who accesses the Website, regardless of the device which you use to access it, which device is capable of using, or enabled to use, the Website including, but not limited to, internet-connected mobile devices and tablets (“Access Device“).
2. What is Personal Information?
“Personal Information" refers to private information about an identifiable person, which includes your name and surname, gender, date of birth, contact details (e.g. your e-mail address), physical address and employment details.
Other information which might be “Personal Information” may include:
“Device and Device event information”: We may collect information such as your IP address, unique device identifier, the nature of the Access Device which you used to access the Website (e.g. a tablet or smart phone, and which type thereof), the geographic location from which you accessed the Website (i.e. the geographic location of your Access Device), hardware model and settings, operating system type and version, browser language, system activity, crashes;
“log information”: When you use the Website, we may automatically collect and store certain information in server logs (i.e. our web servers automatically record and maintain a log of their activities when users access the Website), which may include your “activity information”, such as details of how, when and for how long you accessed the Website and what features you utilised;
“profile information“: We may collect and Process information and usage data per profile to make targeted recommendation to that profile when logged in to and using the Website; and
“location information”: We may use various technologies to determine your actual location, such as geographical data from your Access Device (which is usually based on the IP location).
When will we Process your Personal Information?
In addition to paragraph 4 below, Personal Information may be Processed by us in several ways, including, when:
you register to use the Website;
you access, browse or make use of Website;
you submit your Personal Information to us for any other reason; and
you contact us, by email or telephonically, with any queries.
How we collect your Personal Information
We collect your Personal Information in two ways, namely:
actively from you; and
passively from your Access Device when you use the Website.
Active collection from you
We may require you to submit certain information in order for you to register for the Website and we may collect Personal Information from you by asking you specific questions and by permitting you to communicate directly with us, for example via e-mail, feedback forms, site comments and forums.
If you contact us, we may keep a record of that correspondence.
The information we may actively collect from you may include your:
identifying information (e.g. your name, surname, employment information);
contact details (e.g. e-mail address); and
any other information which we may request from you from time to time.
Passive collection from your Access Device
We passively collect some of your Personal Information from the Access Device which you use to access and navigate through the Website, using various technological means, for instance, using server logs to collect and maintain log information.
The information which we may passively collect from your Access Device may include your identifying information, contact details, Access Device and Access Device event information, activity information, log information, telephony log information, location information and any other information which you permit us, from time to time, to passively collect from your Access Device.
How we use your Personal Information
We use the information we collect to provide, maintain, and improve the Website, to develop new services, and to protect us, our services and our users.
We may use your Personal Information:
to retain and make information available on the Website;
to create your user account and ensure that it doesn’t duplicate an existing user account on the Website;
to maintain and update our customer, or potential customer, databases;
as a registered user, to send you notifications and authenticate your identity when you view and access the Website;
to establish and verify your identity on the Website;
to diagnose and deal with technical issues and customer support queries and other user queries, such as problems with our server, determine the optimal and fastest route for your Access Device to use in connecting with the Website, and administer, maintain and secure the Website;
to provide you with the latest information about our goods and services, provided you have agreed to receive such information;
to conduct market research surveys, product research and development;
to communicate with you;
to compile non-personal statistical information about browsing habits, click patterns and access to the Website;
to improve the Website, analyse trends and administer the Website, including requesting feedback on any information made available on or by means of the Website (the “Content") and our services, products, address any issues and liaise with users in that regard;
to keep a record of our communications with you and your communications with us;
to fulfil any contractual obligations we may have to you or to any third party;
to compile and use statistical information about you and other users and their access to and use of the Website, browsing habits, click-patterns, preferences, and demographics which we may use to develop, provide and improve the Website, including, recommendations to users and tailoring information and Content for users;
to compile, use, disclose and trade with non-personal statistical information about our users and their access to and use of the Website, browsing habits, click-patterns, preferences, demographics which we may use to develop, provide and improve the Website and our products and services. Please note that the information referred to in this paragraph 5.2.17 is aggregate information about our users which has de-identified users’ personal information such that it cannot be linked back to identify you. We will not disclose your identifiable personal information to anyone without your permission;
for security, administrative and legal purposes;
for customer relations; and
other activities not specifically mentioned which are lawful, reasonable, relevant to our business activities and the minimum necessary and adequate in order for us to provide the Website.
We will obtain your permission, or otherwise establish a clear lawful basis, before collecting or using your Personal Information for any other purpose.
Compulsory information and consequences of not sharing with us
Only your e-mail address, name and surname, contact details and such other information as we specify from time to time, constitutes compulsory information. Device and Device event information, log information and unique application numbers, as detailed in clause 2.2 above, are automatically collected. All other information is optional. If you do not agree to share your compulsory information with us, then you will not be able to enjoy all the features and functionality of the Website.
Sharing of your Personal Information
You agree and consent that your Personal Information may be shared under the following circumstances:
to our employees, suppliers, service providers and agents if and to the extent that they need to know that information in order to process it for us and/or to provide services for or to us, such as hosting, development and administration, technical support and other support services. We will authorise any information processing done by a third party on our behalf, amongst other things by entering into written agreements with those third parties governing our relationship with them and containing confidentiality and non-disclosure provisions. Such persons may be disciplined, their contracts terminated or other appropriate action taken if they fail to meet their obligations;
in order to enforce or apply the Terms or any other contract between you and us;
in order to protect our rights, property or safety or that of our customers, employees, contractors, suppliers, service providers, agents and any other third party;
in order to mitigate any actual or reasonably perceived risk to us, our customers, employees, contractors, agents or any other third party;
to governmental agencies, exchanges and other regulatory or self-regulatory bodies if we are required to do so by law or if we reasonably believe that such action is necessary to:
comply with the law or with any legal processes;
protect and defend the rights, property or safety of us, our affiliates or our customers, employees, contractors, suppliers, service providers, agents or any third party;
protect the rights, property or safety of members of the public (if you provide false or deceptive information about yourself or misrepresent yourself as being someone else, we may proactively disclose such information to the appropriate regulatory bodies and/or commercial entities).
We may use your Personal Information to compile profiles for statistical purposes.
We will get your permission before disclosing your Personal Information to any third party for any other purpose
Storage and transfer of your Personal Information
We store your Personal Information:
on our servers; or
on the servers of our third party service providers, such as IT systems or hosting service providers. In this event, we will ensure that we have entered into written contract that require such third party service providers to secure the integrity and confidentiality of Personal Information in its possession by taking appropriate, reasonable technical and organisational measures.
We reserve the right to transfer to and/or store your Personal Information on servers in a jurisdiction other than where it was collected, and such jurisdiction may not have comparable data protection legislation.
If the location that such Personal Information is transferred to does not have substantially similar laws which provide for the protection of Personal Information, we will take reasonably practicable steps to ensure that your Personal Information is adequately protected in that jurisdiction.
We take reasonable technical and organisational measures to secure the integrity of retained information, using accepted technological standards to prevent unauthorised access to or disclosure of your Personal Information, and protect your Personal Information from misuse, loss, alteration or destruction.
From time to time, we review our information collection, storage and processing practices, including physical security measures, to keep up to date with good practice.
See paragraph 7.2.2 regarding measures to protect the information which is provided to employees, agents and contractors on a need-to-know basis.
We also create a back-up for operational and safety purposes.
We will promptly notify you if we become aware of any unauthorised use, disclosure or processing of your Personal Information.
Even by taking the above measures when Processing your Personal Information, we do not guarantee that your Personal Information is 100% secure. Subject to the provisions of this clause 9.6, as far as the law allows, we will not be liable for any loss, claim and/or damage arising from any unauthorised access, disclosure, misuse, loss, alteration or destruction of Personal Information.
Retention of your Personal Information
We retain all Personal Information which we collect from you unless there is a valid technical, legal or business reason for us to delete, destroy or de-identify it (“retained information”).
We may keep all retained information for as long as you continue to access the Website, Content or goods and/or services for as long as reasonably necessary or until you contact us and ask us to destroy the retained information.
we are required or permitted by law, a code of conduct, or a contract with you to keep it;
we reasonably need it for lawful purposes related to our functions and activities;
we reasonably need it for evidentiary purposes; or
you agree to us keeping it for a specified further period.
Keeping your Personal Information updated and correct
Where required by law, we take reasonable steps to ensure that your Personal Information is accurate, complete, not misleading, and up to date.
We also acknowledge that you may have rights of access to, and the right to rectify, your Personal Information, and rights to object to the Processing of your Personal Information in certain circumstances.
You must let us know if any information we have about you is incorrect, incomplete, misleading or out of date, by notifying us at the contact details set out in paragraph 20 below. If you have already registered on the Website, you can at a later stage modify some of the Personal Information you have included in your profile by logging in and recreating your profile with your updated Personal Information.
Where required by law, we will take reasonable steps to correct or update the relevant information accordingly having regard to the purpose for which the information was collected or used.
You give up your rights
Sometimes the law says that we have a duty to make you aware of some information or other matters, unless you agree that we do not need to do these things (this is called a waiver of rights). In these cases, you agree that where the law requires us to make you aware of something (to inform or notify you) or to do something else, we do not have to do this. As you agree to this clause 12.1, we will not have this duty anymore and will not need to make you aware of the information or other matters.
The Website is not targeted at children under the age of 18. We will not knowingly collect information from persons in this age group without permission to do so.
When you register on the Website, you may receive marketing communications from us.
You may refuse to accept, require us to discontinue, or pre-emptively block any approach or communications from us if that approach or communication is primarily for the purpose of direct marketing (“direct marketing communications”).
You may opt-out of receiving direct marketing communications from us at any time by requesting us (in any manner, whether telephonically, electronically, in writing or in person) to desist from initiating any direct marketing to you.
If you have opted out, we may send you written (which may include electronic writing) confirmation of receipt of your opt-out request, and discontinue sending you any further direct marketing communications.
Third party sites
To the extent allowed by law, we are not responsible for the privacy practices of a third party site to which there may be a link on the Website, or for any claims, loss or damage arising from these.
We are not liable if you suffer losses or damages when visiting third party websites by following a link to that website from the Website. You accept that there may be risks when you use such third party websites, and you do so at your own risk.
How to protect your Personal Information
People have different privacy concerns. Our goal is to be clear about what information we collect so that you can make meaningful choices about what you make available. For example, you may
request us to indicate what Personal Information of yours we have on our systems;
update your Personal Information on the Website or request us to or to destroy or delete your Personal Information (subject to paragraph 10);
object to any unlawful processing of your Personal Information; and
request that your Personal Information is deleted if it is no longer required for the purposes for which it was collected or required by MSCSA in terms of any applicable law, subject to paragraph 10; or
refuse the processing of your Personal Information for direct marketing purposes (see paragraph 15).
As far as the law allows, we may charge a fee for attending to any of your requests above and may also refuse to carry out any of your requests in whole or in part.
Consumer Protection Act, Protection of Personal Information Act and other laws
does or purports to limit or exempt us from any liability (including, without limitation, for any loss directly or indirectly attributable to our gross negligence or wilful default or that of any other person acting for or controlled by us) to the extent that the law does not allow such a limitation or exemption;
requires you to assume risk or liability for the kind of liability or loss, to the extent that the law does not allow such an assumption of risk or liability; or