Privacy Policy

Who is responsible for your information?

This Privacy Notice applies to personal information collected through this website and related enquiry correspondence. The SAFLog Group operates under the ownership of the Thintamakhosi Empowerment Trust, with SAFLog Holdings (Pty) Ltd (registration number 2015/186476/07) (the Company, SAFLog, we, or us), as its holding company. The Group comprises of independently operated entities:

• SAFLog Train Services CC (registration number 2007/145918/23)
• SAFreight Logistics Pty Ltd (registration number 1998/024659/07)
• SAFLog Consulting Services Pty Ltd (registration number 2001/018302/07)
• SAFreight Port Logistics Pty Ltd (registration number 2018/214565/07)

The entities collectively operate under the SAFLog corporate identity. Each entity remains a separate legal entity and is responsible for processing activities of personal information. Personal information includes information about identifiable living individuals and, where applicable, existing juristic persons under the Protection of Personal Information Act 4 of 2013 (POPIA).

For privacy enquiries and rights requests, contact The Information Officer: info@saflog.co.za, 0861 723 564 or 011 608 0247/1423, at Building SS 10, Modderfontein Industrial Complex, Cnr Detonators Link & Clocktower, Modderfontein, 1609.

Information you may provide

When you contact the Company through this website, you may choose to provide information such as:

• Your name, work contact details, organisation and role.
• The details of your enquiry, including a freight, service, site or partnership requirement.
• Information and documents you choose to attach to an enquiry.

Required information and collection sources

Providing enquiry information is generally voluntary. Fields marked as required are needed to assess or respond to your request; without them, we may be unable to do so. If a law requires particular information, we will identify that requirement when collecting it. Submit only information relevant to your enquiry. If you provide another person’s information, ensure you have a lawful basis to share it and make this notice available to them.

Children’s and special personal information

Do not submit children’s information or sensitive information such as health, biometric or criminal-history information through general enquiry forms unless we specifically request it through an appropriate process. Where such processing is necessary, the Company must establish the applicable POPIA authorisation and safeguards, including a competent person’s consent where required, before processing.

How information may be used

Information submitted through the website may be used to receive, assess and respond to your enquiry; communicate with you; route a request to the relevant team; and protect the website and its submission services from misuse. Confirm any further purposes before publication.

Lawful grounds and further use

We process personal information only on an applicable lawful ground under POPIA. For ordinary enquiries, the relevant interests are responding to requests and securing the website. We collect only adequate, relevant and non-excessive information. Any further use must be compatible with the original purpose or separately justified under POPIA, with an updated notice where required.

Direct marketing

Submitting an enquiry does not automatically subscribe you to marketing. If we conduct electronic direct marketing, we will obtain the required consent or rely only on POPIA’s qualifying existing-customer exception: contact details obtained in a sale, marketing of our own similar products or services, and a free, simple opportunity to object both at collection and in every message. Each message will identify the sender and provide a working opt-out contact or mechanism. Any permitted once-off request for consent must follow the prescribed requirements and must not be repeated after consent has been withheld. You may withdraw marketing consent or opt out at any time.

Service providers and cross-border processing

We may disclose enquiry information to personnel who need it to respond and for hosting, email-delivery and file-storage providers operating the website on our behalf. Operators must act under authorised instructions, keep information confidential and maintain appropriate security measures under written contracts; they must notify us immediately of suspected unauthorised access or acquisition. We may also disclose information where lawfully required by a court or regulator, or where necessary on a lawful ground to obtain professional advice or establish, exercise or defend legal rights. Disclosure is limited to what is necessary for the relevant purpose.

We may transfer personal information to recipients outside South Africa only where a condition in section 72 of POPIA is met, such as an applicable law, binding corporate rules or binding agreement providing adequate, substantially similar protection and onward-transfer safeguards, or another permitted statutory ground.

Retention and security

We retain personal information only for as long as necessary for its stated purpose, unless further retention is required or authorised by law, required by a contract, reasonably needed for lawful purposes related to our activities, or lawfully consented to. Retention criteria include resolving the enquiry, applicable record-keeping obligations and reasonably necessary evidence for legal claims. When retention is no longer authorised, we will securely destroy, delete or de-identify the information as soon as reasonably practicable. We implement and maintain appropriate, reasonable technical and organisational safeguards, review and update safeguards as needed. No internet transmission or storage system can be guaranteed to be completely secure.

Security compromises

Where there are reasonable grounds to believe personal information has been accessed or acquired by an unauthorised person, we will notify the Information Regulator and affected data subjects as soon as reasonably possible after discovery, subject to POPIA’s permitted exceptions and delays. Notices will explain possible consequences, remedial measures and recommended protective steps, and identify the unauthorised person if known. Suspected incidents may be reported to the Information Officer using the contact details above.

Your rights and choices

Subject to POPIA and applicable access-to-information law, you may ask whether we hold your personal information and request access; request correction or deletion of inaccurate, irrelevant, excessive, outdated, incomplete, misleading or unlawfully obtained information; and request destruction or deletion of records we are no longer authorised to retain. You may object on reasonable grounds relating to your particular situation to processing based on legitimate interests, unless legislation provides for that processing and object to direct marketing. Where we rely on consent, you may withdraw it at any time. Send requests to the Information Officer using the details above. Any refusal or lawful fee will be explained.

You may report directly to the Information Regulator (South Africa); contacting us first is not a prerequisite for a POPIA complaint. Use the Regulator’s complaints service. General contact: enquiries@inforegulator.org.za; telephone 010 023 5200.

Cookies, external websites and changes

Links to external websites are governed by those websites’ own privacy practices. We may update this notice to reflect lawful changes to processing or legal requirements. The published notice will show its last-updated date.