Privacy & Cookies Policy

Introduction

The Protection of Personal Information Act, 2013 (“POPIA”) came fully into effect on 1 July 2021. Nevill Labels (Pty) Ltd (“Nevill Labels”, “we”, “us”, “our”) is committed to the protection of your personal information as well as the privacy of data in our possession. This policy explains what personal information we collect, why we collect it, how we use it, and how we safeguard it.

In addition to serving as our privacy policy, this document also serves as our data subject notification as contemplated in section 18 of POPIA. It informs you of what personal information we collect, why we collect it, how we use it, and what measures are in place to protect it.

What is Processing?

Any activity related to the collection, usage, storage, sharing, destruction, updating, or changing the format of any personal information. Our core processing function is limited to the services we offer, namely Labelling. If personal information is combined and the combined data is used, this shall be limited to instances set out in this statement.

We may combine your personal information and use the combined information for any of the purposes stated in this Privacy Policy.

Although we strive to obtain your consent, in some cases, if you use our services, website, or engage with us in any capacity, we will process your personal information for a legitimate reason.

What personal information do we process?

We collect and process personal information that includes but is not limited to the following:

• Personal identifiers like: age, financial history, personal views, beliefs, gender | physical address, birth, identity number, contact information, biometric, passport number, language, race, correspondence, employment history, education, E-mail address, online identifier, telephone number, ethnic origin, marital status, nationality, Personal opinions
• Devices and online identifiers and related information;
• Credit information;
• Payment-related information;
• Closed-circuit television and camera footage through the Nevill Labels premises, for the safety of the Nevill Labels’ staff and visitors;
• Health information in cases of employees;

When will we process your personal information?

We will process your personal information for lawful purposes relating to our business if one or more of the following applies:

• you have consented thereto;
• a person legally authorised by you, the law, or a court, has consented thereto;
• it is necessary to conclude or perform under a contract we have with you;
• the law requires or permits it; or
• it is required to protect or pursue your, our, or a third party’s legitimate interest.

When and from where do we obtain personal information about you?

We may collect personal information about you from the following sources:

• directly from you
• from public records.
• from areas where you have deliberately made it public (e.g., social media);
• from your interactions with our websites, digital platforms, or marketing channels;
• from our business partners, distributors, and service providers; or
• from any other third party authorised to share your personal information with us.

We process your personal information for the following reasons:

• to provide and distribute our products/services;
• to manage supplier, distributor, and customer relationships;
• to process orders, payments, and logistics;
• to market our products and promotions responsibly;
• Identify and take reasonable steps to prevent fraudulent use and access to our systems/platforms;
• to respond to your enquiries and feedback;
• to comply with legal, regulatory, and tax obligations;
• To ensure that we have your up-to-date information;
• for research, market analysis, and product development;
• for identity verification and access control; and
• for general business administration and record keeping.

We will only share your personal information if one or more of the following applies:

• you have consented to the sharing;
• it is necessary to conclude or perform under a contract with you;
• it is required by law; or
• it is necessary to protect legitimate interests.

We may share personal information with:

• authorised distributors, logistics partners, and service providers;
• professional advisors such as auditors, consultants, and legal counsel; and
• government authorities and regulators, where required by law.

Cross-border transfers of personal information

We use Cloud service providers; we may thus transfer personal information out of South Africa, as a result of the use of cloud services. Although this may be the case, we strive to ensure that:

• the recipient is subject to data protection laws or agreements ensuring an adequate level of protection;
• the transfer is necessary for a contract with you or a third party in your interest; or
• you have consented to the transfer.

All transfers will comply with the safeguards required by POPIA.

How we secure your personal information

We take appropriate and reasonable technical and organisational measures to protect your personal information from loss, unauthorised access, and misuse. These measures include:

• securing IT and communication systems;
• restricted access controls and password protection;
• physical security for premises and record storage;
• safe disposal or destruction of records; and
• compliance with industry-accepted security standards.

How long do we keep your personal information?

We will retain your personal information only for as long as necessary to:

• comply with legal or contractual obligations;
• fulfil the purposes stated in this Privacy Policy;
• meet record-keeping or tax requirements; or
• protect our legitimate business interests.

Where appropriate, personal information will be anonymised or securely destroyed once it is no longer required.

Our Cookie Policy

Cookies are small text files placed on your device when you visit our website. They help us improve your experience, analyse website traffic, and ensure our website functions correctly.

You may adjust your browser settings to disable cookies, but some website features may not function properly as a result.

We use cookies to:

• recognise repeat visitors and personalise content;
• measure and improve website performance;
• monitor and prevent fraudulent activity; and
• analyse trends and marketing performance.

Your duties and rights regarding your personal information

You have the right to request access to the personal information we have about you by contacting us. This includes requesting:

• confirmation that we hold your personal information.
• a copy or description of the record containing your personal information; and
• the identity or categories of third parties who have had access to your personal information.

We will attend to requests for access to personal information within a reasonable time. You may be required to pay a reasonable fee to receive copies or descriptions of records, or information about third parties. We will inform you of the fee before attending to your request.

Please note that the law may limit your right to access information.

You have the right to request us to correct or delete the personal information we have about you if it is inaccurate, irrelevant, excessive, out of date, incomplete, misleading, obtained unlawfully or we are no longer authorised to keep it. You must inform us of your request in writing. It may take up to 15 business days for the change to reflect on our systems. We may request documents from you to verify the change in personal information.

A specific agreement that you have entered into with us may determine how you must change your personal information provided at the time when you entered into the specific agreement. Please adhere to these requirements. If the law requires us to keep the personal information, it will not be deleted upon your request. The deletion of certain personal information may lead to the termination of your business relationship with us.

You may object on reasonable grounds to the processing of your personal information.

We will not be able to give effect to your objection if the processing of your personal information was and is permitted by law; you have provided consent to the processing and our processing is done according to your consent or the processing is necessary to conclude or perform under a contract with you.

Where you have provided your consent for the processing of your personal information, you may withdraw your consent. If you withdraw your consent, we will explain the consequences to you. We may proceed to process your personal information even if you have withdrawn your consent if the law permits or requires it. It may take up to 15 business days for the change to reflect on our systems; during this time we may still process your personal information. You must inform us of any objection in writing. 

You have a right to file a complaint with us or any Regulator with jurisdiction about an alleged contravention of the protection of your personal information by us. We will address your complaint as far as possible.

The contact details for the Information Regulator are as follows:

How can you get in touch with us?

For any queries in relation to this letter or our processing of your personal information in general, you can contact our Information Officer at the following details:

Information Officer

Name:                                   Eridge Franklyn Nevill

Email:                                    Malcolm@Nevill.co.za

Telephone:                          011 683 3820

Physical Address:              Nevill Labels (Pty) Ltd

                                                23 Mandy Road

                                                Rueven,

                                                Johannesburg

We may update this Privacy Policy from time to time if the law or our business practices require it. The version displayed on our website at the time of your interaction with us will apply.