Privacy Policy

Last updated: 23 September 2026

Who we are

Eshisiwe Supplies and Projects (Pty) Ltd, registration number 2019/095755/07 (“Eshisiwe”, “we”, “us”), is responsible for personal information processed for its business activities. This notice applies to enquiries and communications through eshisiwe.co.za, email and telephone.

For privacy enquiries, contact info@eshisiwe.co.za or call 071 826 3309 / 061 489 4257. Please mark your message “Privacy enquiry” for the attention of the Information Officer.

Information you share with us

When you request information or a quotation, we receive the details you provide, such as your name, business or organisation, email address, telephone number, product requirements and correspondence. If an enquiry progresses to an order, we may also need billing, delivery and transaction details.

Please provide only information relevant to your request. Avoid including identity documents, payment-card details, sensitive information or children’s personal information in a general enquiry. If you provide another person’s details, ensure you are authorised to do so.

Why we use personal information

We use relevant information to answer enquiries, prepare quotations, communicate about products, manage orders and customer relationships, maintain appropriate business records, resolve queries and protect our services against misuse. We do not need every optional form field to respond, but we may be unable to assist if essential contact details or product requirements are missing.

Processing must have a lawful basis under the Protection of Personal Information Act, 2013 (POPIA). Depending on the circumstances, this may include your consent, steps needed to conclude or perform a contract, a legal duty, or a legitimate interest that is balanced against your privacy rights. Sending an enquiry does not automatically subscribe you to marketing.

Website information and cookies

Hosting and security systems may record technical information such as IP addresses, browser details, pages requested and access times to operate and protect the website. Cookies are small files a website can store on your device; you can manage or remove them through your browser settings.

Where optional analytics, advertising or other third-party services are introduced, we will provide the relevant notice and any consent choices required before using them. External websites linked from this site have their own privacy practices.

Spam verification

Our enquiry form uses Google reCAPTCHA to help prevent abuse. Google may process device, browser, network and interaction information, use cookies, and process information outside South Africa. Its Privacy Policy and Terms of Service apply. You can contact us by email or telephone if you prefer.

Sharing and service providers

Information may be shared only where relevant to the purpose, for example with providers supporting website hosting, email, IT, accounting or an order’s fulfilment and delivery. These providers should receive only the information needed for their work and handle it under appropriate confidentiality and data-protection arrangements. Information may also need to be disclosed where required by law or to establish, exercise or defend a legal claim.

Where a service involves processing outside South Africa, an appropriate legal basis and safeguards under POPIA are required before the transfer.

Retention and security

We aim to retain information only for as long as it is needed for the purpose for which it was collected, applicable record-keeping duties or a legitimate dispute-related need. Website enquiries are saved privately in WordPress and sent to our enquiry mailbox. Authorised administrators review these records and delete them when they are no longer needed. The period depends on the type of record and circumstances. When retention is no longer justified, information should be securely deleted or de-identified.

Reasonable organisational and technical measures are required to protect personal information against unauthorised access, loss and misuse. No electronic system can guarantee absolute security. Where a security compromise requires notification under POPIA, the affected people and the Information Regulator must be notified as required by law.

Your choices and rights

Subject to applicable legal requirements and exceptions, you may ask whether we hold your personal information, request access, ask for correction or deletion, object to certain processing, or withdraw consent where processing relies on consent. Withdrawing consent does not invalidate lawful processing that occurred before withdrawal, and some information may still need to be retained on another lawful basis.

Send your request to info@eshisiwe.co.za. We may need proportionate proof of identity or authority before disclosing or changing a record. Please tell us if your contact details change.

Questions or complaints

You may contact us about a concern and may also complain directly to South Africa’s Information Regulator. The Regulator’s POPIA complaints email is POPIAComplaints@inforegulator.org.za. Current contact details and complaint guidance are available at inforegulator.org.za.

Updates to this notice

This notice may be updated as the website, business activities or legal requirements change. The revision date above identifies the latest published version.

Reference: Protection of Personal Information Act 4 of 2013.