Privacy Policy

Last updated: 9 September 2026

This policy explains how Brands for Africa Group (“Brands for Africa”, “we”, “us”, “our”) collects, uses, shares, and protects your personal information when you visit this website or contact us through it. It is written to meet our obligations under South Africa’s Protection of Personal Information Act, 2013 (POPIA) and, where it applies to you, the EU / UK General Data Protection Regulation (GDPR).

For the purposes of these laws, Brands for Africa Group is the responsible party / data controller for the personal information described below.

1. Information we collect

Information you give us

When you submit the enquiry form on this site we collect the details you provide:

• your name and company;
• your email address;
• your phone number (if you choose to provide it);
• the enquiry type you select; and
• the content of your message.

If you contact us directly by email, we also receive whatever information is in that correspondence.

Information collected automatically

Our hosting provider records standard server logs when pages are requested — for example your IP address, browser type and version, the pages viewed, and the date and time of access. This information is used for security, diagnostics, and to keep the site running reliably.

Cookies and similar technologies

This website does not set advertising or third-party tracking cookies. It may use strictly necessary storage in your browser to remember display preferences (such as light or dark theme); this stays on your device and is not sent to us. If we introduce analytics or other non-essential technologies in future, we will update this policy and, where the law requires it, ask for your consent first.

2. How and why we use your information

We process personal information only for these purposes:

• To respond to your enquiry and to take steps, at your request, before entering into a possible business relationship. Lawful basis: your consent in submitting the form, our legitimate interest in responding to prospective partners and investors, and/or steps prior to a contract.
• To operate, secure, and improve the website — including preventing and investigating misuse. Lawful basis: our legitimate interests in running a safe, functional service.
• To comply with legal obligations and to establish, exercise, or defend legal claims where necessary. Lawful basis: compliance with the law and our legitimate interests.

We do not use your information for automated decision-making that produces legal or similarly significant effects, and we do not sell your personal information.

3. Who we share it with

We share personal information only as needed, with:

• Service providers who process it on our behalf and under contract — such as our website hosting and email providers — and only for the purposes set out above;
• Professional advisers (for example legal, accounting, or insurance advisers) where reasonably necessary;
• Authorities or other parties where we are required or permitted by law, or to protect our rights, safety, or property; and
• A successor entity in connection with a merger, acquisition, or restructuring of our business.

4. International transfers

We are based in South Africa. Some of our service providers may store or process personal information in other countries, including outside South Africa and the European Economic Area. Where we transfer personal information across borders we take reasonable steps to ensure it receives a comparable level of protection — for example by relying on a recipient bound by laws or binding rules that provide adequate protection, or on Standard Contractual Clauses or an equivalent lawful transfer mechanism.

5. How long we keep it

We keep enquiry information only for as long as needed for the purpose it was collected. Where an enquiry does not lead to an ongoing relationship, we retain it for up to 36 months from your last contact with us and then delete or anonymise it, unless a longer period is required by law or is necessary to establish, exercise, or defend a legal claim. Server logs are kept for a short period and then overwritten in the ordinary course.

6. How we protect it

We use reasonable technical and organisational measures appropriate to the sensitivity of the information — including encryption of the site in transit (HTTPS), access controls, and limiting access to those who need it. No method of transmission or storage is completely secure, and we cannot guarantee absolute security; if a breach affecting your information occurs, we will act in line with our legal obligations, including notifying you and the relevant regulator where required.

7. Your rights

Subject to the conditions and exceptions in the applicable law, you have the right to:

• access the personal information we hold about you and be told how it is processed;
• correct or update information that is inaccurate or incomplete;
• delete information where it is no longer needed or was processed unlawfully;
• object to or restrict our processing in certain circumstances, including processing based on legitimate interests;
• withdraw consent at any time where we rely on consent (this does not affect processing already carried out);
• data portability — to receive certain information in a structured, commonly used, machine-readable format (GDPR); and
• lodge a complaint with a supervisory authority (see section 10).

To exercise any of these rights, email us at info@brandsforafrica.co.za. We will respond within the timeframe set by the applicable law (generally 30 days), and we will not charge a fee unless the law allows it (for example, for manifestly unfounded or excessive requests). We may need to verify your identity before acting on a request.

8. Children

This website is intended for business and investment audiences and is not directed at children. We do not knowingly collect personal information from anyone under 18. If you believe a child has provided us with information, please contact us and we will delete it.

9. Third-party links and changes to this policy

This site may link to third-party websites (for example brand or partner sites). We are not responsible for their content or privacy practices; please review their own policies.

We may update this policy from time to time. When we do, we will change the “Last updated” date above and, for material changes, take reasonable steps to bring them to your attention.

10. Contact us and how to complain

Questions, requests, or complaints about this policy or your personal information can be sent to our Information Officer:

If you are not satisfied with our response, you may lodge a complaint with the relevant regulator:

• South Africa — the Information Regulator (South Africa), inforegulator.org.za, email POPIAComplaints@inforegulator.org.za.
• EU / EEA — your national data protection authority.
• United Kingdom — the Information Commissioner’s Office (ICO), ico.org.uk.