Privacy Notice

This Notice explains how Elcaro Group collects, uses, stores, and protects your personal information in accordance with the Protection of Personal Information Act, 2013 (POPIA).

Last updated: June 2026

1. Responsible Party

Elcaro Group ("we", "us", "our") is the responsible party for the personal information processed through this Website. For privacy-related enquiries or to exercise your rights, contact us at inquiries@elcaro.co.za.

2. What Information We Collect

We collect personal information that you voluntarily provide when you:

  • Submit a service or solution inquiry form;
  • Contact us by email or other channels listed on the Website;
  • Subscribe to or interact with our communications (where offered).

This may include your name, email address, telephone number, company name, division of interest, selected services or solutions, and the content of your message.

We may also collect limited technical information when you visit the Website, such as browser type, device information, pages viewed, and referral source. This may include information collected through cookies or similar technologies as described below.

3. How We Use Your Information

We use personal information only for lawful purposes related to our business, including to:

  • Respond to your inquiries and route them to the appropriate division;
  • Communicate with you about services or solutions you have expressed interest in;
  • Improve the Website and our client engagement processes;
  • Comply with legal, regulatory, and record-keeping obligations;
  • Detect and prevent fraud, abuse, or security incidents.

We will not use your personal information for purposes incompatible with those above without notifying you where required by law.

4. Legal Basis for Processing

Under POPIA, we process personal information where:

  • You have consented to the processing;
  • Processing is necessary to take steps at your request before entering into a contract;
  • Processing is required to comply with a legal obligation; or
  • Processing is necessary for a legitimate interest of Elcaro Group, provided this does not override your rights.

5. Sharing of Information

We may share personal information with:

  • Divisions within the Elcaro Group relevant to your inquiry;
  • Service providers who assist us with hosting, email delivery, or website operations, under appropriate confidentiality and security obligations;
  • Regulators, courts, or law enforcement where required by law.

We do not sell your personal information.

6. Cross-Border Transfers

Where personal information is transferred outside South Africa, we will ensure that appropriate safeguards are in place as required by POPIA before the transfer occurs.

7. Information Security

We implement reasonable technical and organisational measures to protect personal information against unauthorised access, loss, misuse, or alteration. These measures include access controls, secure communications where appropriate, and contractual safeguards with third-party processors.

No method of transmission over the internet is completely secure. While we strive to protect your information, we cannot guarantee absolute security.

8. Retention

We retain personal information only for as long as necessary to fulfil the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements. Inquiry records are typically retained for a period consistent with our business and legal obligations, after which they are securely deleted or anonymised.

9. Cookies

The Website may use cookies and similar technologies to support basic functionality and to understand how visitors use the site. You can control cookies through your browser settings. Disabling cookies may affect certain Website features.

10. Your Rights Under POPIA

Subject to applicable law, you have the right to:

  • Request access to personal information we hold about you;
  • Request correction or deletion of inaccurate or outdated information;
  • Object to processing in certain circumstances;
  • Withdraw consent where processing is based on consent;
  • Lodge a complaint with the Information Regulator (South Africa).

To exercise these rights, email inquiries@elcaro.co.za. We may request proof of identity before responding. A legally permissible fee may apply to access requests.

11. Children's Information

The Website and our business services are directed at organisations and business users. We do not knowingly collect personal information from children under 18 without appropriate consent.

12. Changes to This Notice

We may update this Privacy Notice from time to time. The current version will always be available on this page with an updated date. We encourage you to review it periodically.

13. Contact

For any privacy-related questions, contact Elcaro Group at inquiries@elcaro.co.za.