Privacy Policy

1. Introduction

Woman of Steel Manufacturing Pty Ltd ("we", "us", or "our") respects your privacy and is committed to protecting your personal information in accordance with the Constitution of the Republic of South Africa, 1996, and the Protection of Personal Information Act, 2013 (Act No. 4 of 2013) ("POPIA"). This Privacy Policy explains what personal information we collect through our website at womanofsteel.co.za (the "Website"), why we collect it, how we use it, and the rights you have over your data.

By using the Website, browsing our product catalogue, requesting a quote, submitting an enquiry, or creating an account, you consent to the collection, processing, and sharing of your personal information as described in this policy.

2. The Responsible Party & Information Officer

For the purposes of POPIA, Woman of Steel Manufacturing Pty Ltd is the "responsible party" that determines the purpose and means of processing your personal information. Our Information Officer can be contacted for any privacy-related requests at:

• Company: Woman of Steel Manufacturing Pty Ltd
• Address: 60 Moore St, Wadeville, Johannesburg, 1429
• Email: matthew@womanofsteel.co.za
• Phone: +27 72 300 3492

3. Personal Information We Collect

We collect the following categories of personal information depending on how you interact with the Website:

3.1 When you request a quote

• Full name, company name, email address, and phone number
• Product details, quantities, dimensions, and delivery location
• Any additional requirements you provide

3.2 When you submit an enquiry

• Full name, email address, phone number, and your message

3.3 When you create an account

• Email address and password (stored securely and encrypted)
• Full name, phone number, and company name stored in your profile
• Communication preferences: newsletter, WhatsApp, and SMS opt-in choices

3.4 When you sign in with Google

• Your Google account email address and basic profile information (such as name) as made available by Google

3.5 Information collected automatically

• Usage data such as pages visited, time spent, referring URLs, and approximate location
• Device and browser information, IP address, and cookies (see Section 11)

4. How We Collect Your Information

We collect personal information directly from you when you complete a form, create an account, or adjust your communication preferences. We also collect information automatically through cookies and analytics tools when you visit the Website, as described in Section 11.

5. Purpose and Lawful Basis for Processing

We process your personal information for the following lawful purposes under POPIA:

• Quoting: to prepare and respond to your steel product quote requests
• Customer service: to respond to your enquiries and provide support
• Account management: to create and maintain your user account and profile
• Direct marketing: to send newsletters, WhatsApp, and SMS communications where you have opted in
• Order fulfilment: to process orders, arrange delivery, and manage stock availability
• Business operations: to maintain records for accounting, tax, and compliance purposes
• Security and fraud prevention: to protect the Website and detect misuse

We rely on your consent, the performance of a contract with you, compliance with a legal obligation, and our legitimate interests as lawful grounds for processing.

6. Special Categories of Personal Information

We do not knowingly collect special (sensitive) personal information such as race, ethnicity, political opinions, religious beliefs, health data, or biometric information. If you provide such information inadvertently, we will not process it without your explicit consent.

7. Sharing of Personal Information

We do not sell your personal information. We may share it with the following recipients where necessary for the purposes set out above:

• Our warehouse management system: your contact details and communication preferences are synchronised with our internal warehouse and customer management system to fulfil quotes and orders
• Service providers: hosting, email delivery, and analytics providers who process data on our behalf under written agreement
• Google: when you use Google sign-in, limited profile data is received in line with Google's policies
• Legal authorities: where required by law or to protect our rights and safety

All third parties are required to protect your information in line with POPIA.

8. Cross-Border Transfers

Some of our service providers (such as hosting and analytics) may process data outside South Africa. Where this occurs, we ensure appropriate safeguards are in place and that the transfer complies with POPIA's requirements for cross-border transfers of personal information.

9. Retention of Personal Information

We retain your personal information only for as long as necessary to fulfil the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements under South African law. Quote and enquiry records are retained for a period consistent with our record-keeping obligations, after which they are securely deleted or anonymised.

10. Security Safeguards

We take reasonable technical and organisational measures to protect your personal information against loss, theft, unauthorised access, disclosure, and alteration. These include encrypted password storage, access controls, and secure hosting. However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

11. Cookies and Tracking Technologies

The Website uses cookies and similar tracking technologies to operate the site, remember your preferences, and understand how visitors use it. We use analytics tools to collect aggregated usage data. You can control cookies through your browser settings; disabling them may affect some features of the Website.

12. Direct Marketing and Communication Preferences

We only send direct marketing communications (newsletter, WhatsApp, or SMS) to users who have explicitly opted in through their account communication preferences or at the point of submitting a quote or enquiry. In line with POPIA and the Electronic Communications and Transactions Act, 2002, you may opt out of marketing communications at any time by updating your preferences in your account or by contacting us using the details in Section 2.

13. Your Rights Under POPIA

You have the following rights regarding your personal information:

• Access: to request confirmation of what information we hold and a copy of it
• Correction: to request the correction or updating of inaccurate information
• Deletion: to request the deletion of your information, subject to legal retention requirements
• Objection: to object to the processing of your information for direct marketing
• Withdrawal of consent: to withdraw consent you have previously given
• Complaint: to lodge a complaint with the Information Regulator

To exercise any of these rights, contact our Information Officer at matthew@womanofsteel.co.za. We will respond within a reasonable time, and in the case of access requests, within the period prescribed by POPIA.

14. Children's Information

Our Website and services are intended for business and professional use. We do not knowingly collect personal information from children under the age of 18. If you believe a child has provided us with personal information, please contact us so we can delete it.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The "Last updated" date at the top indicates when the policy was last revised. Continued use of the Website after changes constitutes acceptance of the updated policy.

16. Complaints to the Information Regulator

If you are not satisfied with how we have handled your personal information, you have the right to lodge a complaint with the South African Information Regulator:

• Address: JD House, 74 Kerk Street, Johannesburg, 2001
• Email: inforeg@inforegulator.org.za
• Website: www.inforegulator.org.za