Your privacy is our concern

Alpha Leonis Trading (Pty) Ltd
Website: https://www.alphaleonis.co.za

Last updated: 10/12/2025

---

1. Who we are

This Privacy Policy explains how Alpha Leonis Trading (Pty) Ltd (“Alpha Leonis”, “we”, “us”, “our”) collects, uses and protects personal information when you use our website at https://www.alphaleonis.co.za and when you contact us in relation to our industrial chemical products and services. ALC Website Content (1)

We are a South African company registered as Alpha Leonis Trading (Pty) Ltd, registration number 2017 / 472298 / 07. ALC Website Content (1)

We are the “responsible party” for purposes of the Protection of Personal Information Act 4 of 2013 (“POPIA”), South Africa’s main data protection law.

This policy applies to:

• Visitors to our website
• People who contact us via our contact form, email or telephone
• Representatives of our customers, suppliers and business partners

It does not apply to information we process as an operator on behalf of another responsible party under a separate contract.

---

2. What “personal information” means under POPIA

Under POPIA, “personal information” includes any information that relates to an identifiable, living natural person, and where applicable, an identifiable, existing juristic person (for example a company).

This includes, for example:

• Names and surnames
• Business titles and employer details
• Email addresses and telephone numbers
• Physical, postal or business addresses
• Online identifiers (IP addresses, device identifiers)
• Any other information that can reasonably identify a person or company

---

3. What information we collect

3.1 Information you provide to us directly

When you use our site or engage with us, we may collect:

• Contact details – name, surname, company name, job title, email address, telephone number
• Enquiry details – the content of messages you send via our contact form or by email, including product interests and technical questions
• Business relationship data – purchase history, quotations, contracts, and correspondence relating to supply of chemicals and raw materials

This information typically comes from:

• Our website contact form
• Direct emails
• Telephone calls and other business communications ALC Website Content (1)

3.2 Information collected automatically

When you visit our website, we may automatically collect:

• Technical data – IP address, browser type and version, time zone setting, operating system
• Usage data – pages viewed, time spent on pages, referral source

This may be collected via server logs and standard web analytics tools (for example, anonymous or aggregated statistics).

3.3 Information from third parties

We may receive limited personal information from:

• Our hosting provider and IT support partners (e.g. security logs)
• Other business partners or suppliers who introduce you to us

We only collect what we reasonably need for the purposes described below.

---

4. Why we process your personal information (purposes and legal bases)

We process personal information in line with POPIA’s conditions for lawful processing, including accountability, purpose specification, processing limitation, information quality, openness, security safeguards and data subject participation. GetTerms+1

We mainly process your personal information for the following purposes:

1. Responding to enquiries
   • To read, understand and respond to your queries about our products, sectors (e.g. mining, agriculture, water treatment), logistics and documentation. ALC Website Content (1)
   • Lawful grounds: performance of a contract or steps taken at your request; our legitimate interests in running our business.
2. Providing products and services
   • To prepare quotations, manage orders, communicate about deliveries, and service your account as a customer or supplier.
   • Lawful grounds: performance of a contract; compliance with legal obligations; legitimate interests.
3. Business administration and record-keeping
   • To maintain business records, manage supplier and customer relationships, and comply with tax, regulatory and corporate obligations.
   • Lawful grounds: legal obligations; legitimate interests.
4. Improving our website and services
   • To understand how our website is used, maintain security and performance, and improve content and navigation.
   • Lawful grounds: legitimate interests in maintaining and improving our services.
5. Direct marketing (limited and respectful)
   • To send you information about products, sectors or opportunities that may be relevant to you in a business context, where permitted under POPIA’s direct marketing rules.
   • Lawful grounds: consent (where required) and/or legitimate interests, subject to your right to opt out at any time.

We do not sell your personal information.

---

5. Cookies and similar technologies

Our website may use cookies and similar technologies to:

• Remember your preferences
• Improve site performance and security
• Produce aggregated statistics about traffic and usage

You can usually control cookies at browser level (for example, blocking or deleting them), but this may affect some website functions.

If we implement more advanced analytics or marketing cookies in future, we will update this policy and, where needed, request your consent.

---

6. Sharing your personal information

We may share your personal information with:

• Website hosting and IT service providers (e.g. our hosting company and technical support)
• Email and communications providers
• Professional advisers (lawyers, accountants, auditors)
• Logistics and transport partners where necessary to arrange deliveries and regulatory documentation
• Regulators and authorities, including the Information Regulator, where we are legally required to do so or where you have asked us to assist with a complaint

Where a third party processes personal information for us, they act as an “operator” under POPIA and must follow our instructions, keep the information confidential and protect it appropriately.

We do not share your personal information with unrelated third parties for their own marketing purposes.

---

7. Cross-border transfers

Some of our service providers (for example, email or cloud hosting providers) may process personal information on servers located outside South Africa.

Where this happens, we take reasonable steps to ensure that the recipient is subject to a law, binding corporate rules, contract or other mechanism that provides an adequate level of protection, as required by POPIA for cross-border data transfers. Scytale+1

---

8. How we protect your information

We take appropriate, reasonable technical and organisational measures to safeguard personal information against loss, unauthorised access, alteration or destruction, in line with POPIA’s security safeguard condition.

These measures include, where appropriate:

• Secure servers and restricted access to systems
• Use of passwords and access controls
• Keeping software up to date and applying security patches
• Limiting access to personal information to personnel and operators who need it for legitimate business purposes

No system can be guaranteed as 100% secure, but we aim to maintain security at a level appropriate to the risk.

---

9. How long we keep your information

We keep personal information only for as long as it is reasonably necessary for the purposes described in this policy, or as required by law, including:

• Commercial records for as long as required by tax and corporate law
• Contract, order and communication records for the duration of the relationship and a reasonable period afterwards, in case of queries or legal claims
• Enquiry records for a reasonable period to follow up on your request and maintain continuity of service

When we no longer need personal information, we will delete or de-identify it, unless we are required by law to keep it for longer.

---

10. Your rights under POPIA

Under POPIA, you have the right to: LegalClarity

1. Be informed
   • To know what personal information we hold about you, why we process it and with whom it is shared.
2. Access your personal information
   • To request confirmation of whether we hold personal information about you, and to obtain a copy, subject to lawful grounds and applicable fees.
3. Request correction
   • To ask us to correct or complete personal information that is inaccurate, outdated, incomplete or misleading.
4. Request deletion
   • To request that we delete personal information in certain circumstances, where we no longer need it or we have processed it unlawfully (subject to legal retention requirements).
5. Object to processing
   • To object to our processing of your personal information where it is based on our legitimate interests and you feel your rights and interests outweigh ours.
6. Object to direct marketing
   • To object at any time to the processing of your personal information for direct marketing, including profiling related to such marketing. If you object, we will stop sending you marketing communications.
7. Withdraw consent
   • Where we rely on your consent, you may withdraw it at any time. This will not affect the lawfulness of processing that took place before withdrawal.
8. Lodge a complaint
   • To complain to the Information Regulator if you believe we have interfered with the protection of your personal information.

You can exercise your rights by contacting us using the details in section 12 below.

---

11. Links to other websites

Our website may include links to other websites (for example, manufacturers, logistics partners, or industry resources). These websites are not controlled by us.

We are not responsible for the privacy practices or content of third-party sites, and we encourage you to read their privacy policies before providing them with personal information.

---