Privacy Statement

1. Introduction

M-Sure respects your constitutional right of privacy and processes personal information lawfully and in a reasonable manner that does not infringe the privacy of data subjects, in compliance with applicable data processing legislation.

2. Purpose

This Privacy Statement establishes how M-Sure processes personal data collected from or provided by you in using this website.

3. Audience

This Privacy Statement applies to you as a data subject using this website.

4. Glossary of terms

Unless inconsistent with the context, the words and expressions in this Privacy Statement have the meanings assigned to them in the Glossary of Terms applicable to all policies, procedures, standards and guidelines adopted and published by M-Sure.

1. Data Subject means the person to whom the information relates;
2. Personal Information means information relating to a living person (including juristic) and includes, but not limited to race, gender, sex, marital status, financial, criminal and contact information, and excludes anonymous, de-identified, non-personal statistical, and public information;
3. Processing means the collection, receipt, recording, storing, distributing, updating, modifying, deleting, destroying or using of personal information;
4. We, us, our refers to M-Sure; and
5. You means the reader of this Privacy Statement.

5. M-Sure data protection statements

M-Sure:

1. is accountable for and processes personal data in compliance with the conditions and principles governing its lawful processing.
2. collects personal data for specific, explicitly defined and lawful purposes and does not further process personal data in a manner that is incompatible with those purposes.
3. only processes personal data that is adequate, relevant and not excessive for the purpose of the processing.
4. processes personal data transparently to the data subject and in a manner that is fair and does not infringe the privacy of the data subject.
5. does not process personal data unless it is lawfully justified to do so and where it relies on the justification of consent, such consent is freely given, specific, informed and is an unambiguous indication of the data subject’s wishes, indicated by a clear affirmative action.
6. collects personal data directly from the data subject unless it is permitted by law to collect the information from other sources.
7. takes appropriate measures to safeguard the integrity and confidentiality of personal data and to prevent its loss or damage, unlawful access and unauthorised destruction.
8. by written contract, binds third parties processing personal data on its behalf, to establish and maintain appropriate security safeguards as well as comply with the principles set out in this Privacy Statement.
9. puts in place an incident management process that ensures timely notification of data protection authorities, and, when needed, the data subjects of a compromise to their personal data as required by law.
10. processes personal data transparently to the data subject and takes reasonably practicable steps to ensure that the information is accurate and kept up to date.
11. permits and facilitates data subjects to access their personal data and corrects or deletes information that is inaccurate, as required by law.
12. facilitates data subject objections to the processing of their personal information as required by law.
13. retains personal data as required by law, or contract, or as may be reasonably required for lawful purposes, but not for any longer than is necessary to achieve the purpose for which the information was collected and processed.
14. avoids processing of special personal information unless necessary and in line with the authorisation requirements as required by law.
15. will not use personal data for the purpose of unsolicited electronic communication, nor for automatic decision-making, without the consent of the data subject.
16. only transfers personal data across borders to jurisdictions that effectively uphold the principles and conditions governing the protection of personal data established in the Republic of South Africa, alternatively if the data subject has consented to the transfer.
17. appoints an Information Officer/s authorised and empowered to fulfil the responsibilities stipulated in relevant legislation.

6. Cookies

1. Your Internet browser generally accepts cookies automatically, but you can often change this setting to stop accepting cookies. You can also delete cookies manually.
2. No longer accepting cookies or deleting cookies may prevent you from accessing and using the functionality available on our website. Cookies are necessary for the functionality of the website. If you wish to find out more about cookies you may do so at www.allaboutcookies.org.
3. Cookies are small text files placed on your device when you visit our website. The cookies do not contain personal information, but they do contain an identifier allowing us to associate your personal information with a certain device. These files serve a number of useful purposes for you, including:

1. tailoring our website’s functionality to you personally by letting us remember your preferences;
2. improving how our website performs;
3. allowing third parties to provide services to our website; and
4. helping us deliver targeted advertising where appropriate in compliance with the applicable laws.

7. Changes to the Privacy Statement

We may change this Privacy Statement adopted by M-Sure. If we change this Privacy Statement and it would materially affect your use of the website or your understanding of how we process your personal data, a notice will be published on our website indicating that a change has been made.