PRIVACY POLICY

Last updated: October 2026

Colsec (Pty) Ltd (“Colsec”, “we”, “us” or “our”) respects your privacy and is committed to processing personal information lawfully, reasonably and transparently. This policy explains how we handle personal information when you use our website, contact us, or engage with us as a customer, supplier, retailer, brand owner, distributor, service provider or other business partner.

1. WHO WE ARE

Colsec (Pty) Ltd is the responsible party for the personal information described in this policy. Our principal place of business is Bernhard Road, Cresta, Johannesburg, South Africa. You can contact us at info@colsec.co.

2. INFORMATION WE MAY COLLECT

Depending on how you interact with us, we may collect:

• identity and contact details, including your name, telephone number, email address and business address;

• business details, including your company, role, registration or tax information and information relevant to a potential commercial relationship;

• enquiry, order, account, delivery and transaction information where relevant;

• correspondence, support requests, complaints and feedback;

• website and device information, including IP address, browser, device, pages viewed, referring source and cookie or consent preferences; and

• any other information you voluntarily provide to us.

We generally collect information directly from you. We may also receive information from an authorised representative, a customer or supplier, our retail and brand partners, service providers, publicly available business sources, or website analytics tools where lawful.

3. WHY WE USE PERSONAL INFORMATION

We may process personal information to:

• respond to enquiries and communicate with you;

• assess, establish and manage customer, supplier, retailer, wholesale and brand relationships;

• prepare quotations, process orders, coordinate delivery, manage accounts and provide support;

• maintain accurate business, tax, accounting and legal records;

• operate, secure, analyse and improve our website and services;

• prevent fraud, misuse and security incidents;

• protect our rights and the rights of others;

• comply with legal and regulatory obligations; and

• send relevant business or marketing communications where permitted, with a clear opportunity to opt out.

We rely on one or more lawful grounds under the Protection of Personal Information Act 4 of 2013 (“POPIA”), including your consent where required, the performance of a contract or steps requested before entering into a contract, compliance with a legal obligation, protection of a legitimate interest, or our legitimate interests balanced against your rights and reasonable expectations.

4. WHEN WE SHARE INFORMATION

We may share personal information only where reasonably necessary with:

• service providers that support hosting, Odoo systems, email, communications, information technology, security, analytics, warehousing, logistics, payments or professional advice;

• brand, retail, wholesale, distribution or commercial partners where necessary to fulfil an enquiry, order, support request or agreed service;

• regulators, law-enforcement bodies, courts or other authorities where required or permitted by law; and

• a successor or prospective buyer in connection with a lawful business reorganisation or transaction, subject to appropriate safeguards.

We do not sell personal information. Service providers are expected to use personal information only for the agreed purpose and to protect it appropriately.

5. CROSS-BORDER PROCESSING

Some service providers or systems may process information outside South Africa. Where this occurs, we take reasonable steps to ensure that the transfer is permitted by POPIA and that the recipient is subject to an adequate law, binding agreement or other safeguard that provides an appropriate level of protection.

6. RETENTION

We keep personal information only for as long as reasonably necessary for the purpose for which it was collected, to maintain required business or legal records, to resolve disputes, or to enforce agreements. When information is no longer required, we securely delete, destroy or de-identify it where reasonably practicable.

7. SECURITY

We use reasonable technical and organisational safeguards designed to protect personal information against loss, unauthorised access, interference, alteration, disclosure or destruction. No website, transmission or storage system is completely secure, and we cannot guarantee absolute security.

8. YOUR RIGHTS

Subject to POPIA and other applicable law, you may ask us to confirm whether we hold personal information about you, request access to it, ask us to correct or delete inaccurate or unlawfully retained information, object to certain processing, withdraw consent where processing is based on consent, or ask us to stop direct marketing.

To exercise a right, email info@colsec.co. We may need to verify your identity before responding. You may also lodge a complaint with South Africa’s Information Regulator at inforegulator.org.za.

9. COOKIES AND ANALYTICS

Our website uses essential technologies required for security, session management and core functionality. Optional analytics or marketing technologies are disabled until you make a consent choice where required. Please read our Cookie Policy for details and for information on managing your choices.

10. CHILDREN

Our website and services are intended for business and adult audiences and are not directed at children under 18. If you believe a child has provided personal information to us without appropriate authorisation, please contact us.

11. THIRD-PARTY WEBSITES

Our website may link to websites operated by retailers, brand owners or other third parties. Their privacy practices are governed by their own policies. We are not responsible for the privacy or security practices of third-party websites.

12. CHANGES TO THIS POLICY

We may update this policy when our practices, services or legal obligations change. The revised version will be posted on this page with an updated date. Material changes may also be communicated through another appropriate channel.

13. CONTACT US

Privacy enquiries and requests may be sent to:

Colsec (Pty) Ltd

Bernhard Road, Cresta, Johannesburg, South Africa