Privacy Policy

This Privacy Policy applies to the website operated under the CBU Engineering name at cbuengineering.co.za. For purposes of the Protection of Personal Information Act 4 of 2013 (“POPIA”), CBU Engineering is the responsible party for personal information processed through this website.

References to “CBU Engineering”, “we”, “us” or “our” mean the business operating this website.

Depending on how you interact with us, we may collect:

• your name, surname, job title and company name;
• email address, telephone number and other contact details;
• location, site or delivery information supplied by you;
• details of equipment, components, repairs, projects or quotation requests;
• photographs, drawings, specifications, technical files and other documents you submit;
• communications between you and CBU Engineering;
• website usage information, including IP address, browser, device, pages visited, referring source and approximate location; and
• information required for security, fraud prevention, record-keeping or legal compliance.

Please do not submit personal information about another person unless you are authorised to do so.

We process personal information only where we have a lawful basis to do so. We may use it to:

• respond to enquiries and assess repair or engineering requirements;
• prepare quotations, proposals and project communications;
• provide, administer and improve our services;
• manage customer, supplier and business relationships;
• protect our website, systems, staff, customers and property;
• maintain operational, technical, financial and legal records;
• comply with applicable laws, lawful requests and regulatory duties; and
• send relevant business communications where permitted by law or where you have consented.

We do not sell personal information.

Technical information supplied for an assessment or project may include equipment photographs, drawings, specifications, measurements, failure information and operating data. We use this material to evaluate requirements, prepare a scope of work, provide services and maintain appropriate project records.

Unless separately agreed in writing, submitting information through the website does not itself create a confidential engineering engagement, appointment or contract. Where highly sensitive information is involved, please contact us before transmitting it.

Our website may use essential cookies needed for security, forms and normal website operation. Subject to the tools enabled on the website, we may also use limited analytics or preference cookies to understand website performance and improve the user experience.

Where consent is legally required, non-essential cookies should not be activated until consent is obtained. You can also control cookies through your browser. See our Cookie Policy for more information.

We may share information only where reasonably necessary with trusted service providers such as website hosting, email, IT support, security, cloud storage, professional advisers, contractors or other parties involved in providing requested services.

We may also disclose information where required by law, court order, lawful regulatory request, or where reasonably necessary to establish, exercise or defend legal rights. Service providers are expected to process information only for authorised purposes and to apply appropriate safeguards.

Some service providers may process or store information outside South Africa. Where this occurs, we take reasonable steps to ensure that the transfer is permitted under POPIA and that appropriate protection applies.

We use reasonable technical and organisational safeguards designed to protect personal information against loss, misuse, unauthorised access, alteration or disclosure. No online system or transmission can be guaranteed completely secure.

We retain information only for as long as reasonably required for the purpose collected, legitimate operational needs, contractual obligations, dispute resolution and applicable legal or record-retention requirements. Information may then be deleted, destroyed or de-identified.

Subject to POPIA and other applicable law, you may ask us to:

• confirm whether we hold personal information about you;
• provide access to that information;
• correct or update inaccurate or incomplete information;
• delete information where there is no lawful reason to retain it;
• object to certain processing or withdraw consent where consent is the basis relied on; and
• provide information about the parties to whom your information has been disclosed, where applicable.

We may need to verify your identity before acting on a request. You may also lodge a complaint with South Africa’s Information Regulator.

This website and our services are directed at businesses and adults. We do not intentionally collect personal information from children through the website. A parent or guardian who believes a child has submitted information may contact us to request appropriate action.

Our website may link to third-party websites. We do not control their privacy practices and recommend reviewing their policies.

We may update this Privacy Policy when our practices, technology or legal obligations change. The effective date shown above indicates the current published version.

Privacy enquiries and requests may be sent to cbu.eng01@gmail.com.

You may contact the Information Regulator (South Africa) through its official website at inforegulator.org.za.