Privacy policy

1. Who we are

Gistra Consulting (“Gistra”, “we”, “our” or “us”) is a construction company based in South Africa. We respect your privacy and protect your personal information in line with the Protection of Personal Information Act 4 of 2013 (POPIA).

This policy explains what personal information we collect through this website, why we collect it, who we share it with and what your rights are. By using this website you agree to the use of your information as described here.

2. Information we collect

You can browse this website without giving us any personal information. We only collect personal information when you choose to give it to us, for example when you fill in the contact form, apply for a job or email or phone us. This may include:

• your name and surname
• your email address and telephone number
• your company name and physical or postal address
• anything else you include in a form, CV or message

Like most websites, our hosting provider also automatically records basic technical information when you visit, such as your IP address, browser type and the pages you view.

We only collect the information we need for the purposes below.

3. How we use your information

We use your information to:

• respond to your enquiries and requests
• provide our services and communicate with you about projects or services
• consider your job application
• keep this website secure and working properly, and improve it
• comply with our legal obligations

We will not use your information for direct marketing unless you have agreed to it, and you can ask us to stop at any time.

4. Sharing your information

We do not sell, rent or trade your personal information. We only share it:

• with trusted service providers who help us run this website and our business, such as our website host (Cloudflare) and the service that delivers contact form messages to us (Formspree). They may only use it to provide their service to us.
• with government, regulators or law enforcement where the law requires it, or where it is necessary to protect our rights, property or the safety of others.

Some of these providers store information on servers outside South Africa. Where this happens, we only use providers that protect personal information to a standard similar to POPIA.

5. How long we keep it

We keep your personal information only for as long as we need it for the purpose it was collected, or for as long as the law requires. After that we delete or destroy it, or remove anything that identifies you.

6. How we protect it

We take reasonable technical and organisational measures to protect your personal information against loss, misuse, unauthorised access, disclosure or alteration.

If we have reason to believe that your personal information has been accessed or acquired by an unauthorised person, we will notify the Information Regulator and you as soon as reasonably possible, unless a law enforcement body asks us not to because it would impede a criminal investigation. We will give you enough information to protect yourself against the possible consequences.

7. Cookies

Cookies are small files that a website stores in your browser. This website does not use cookies for advertising or to track you. If we add cookies in future, for example to measure website traffic, we will update this policy. You can set your browser to refuse cookies or to warn you when a cookie is sent.

8. Your rights

Under POPIA you have the right to:

• ask whether we hold personal information about you and request a copy of it
• ask us to correct, update, delete or destroy information that is inaccurate, out of date, incomplete, excessive or that we are no longer allowed to keep
• object to us processing your information on reasonable grounds, unless the law requires the processing
• object to direct marketing at any time
• withdraw your consent at any time. This does not affect processing that happened before you withdrew it, or processing the law allows without your consent.
• not be subject to a decision based only on automated processing that has legal consequences for you
• lodge a complaint with the Information Regulator of South Africa (www.inforeg.org.za)
• institute civil proceedings regarding an alleged interference with the protection of your personal information

To exercise any of these rights, contact us using the details below. We may ask you to confirm your identity first.

9. Links to other websites

This website may link to other websites, and some images on it are loaded from other services. We do not control those websites or services, and they have their own privacy policies.

10. Contact us

If you have questions about this policy or how we handle your personal information, please contact our Information Officer:

Gistra Consulting
Unit 5, Heron Park, 80 Corobrick Road, Riverhorse Valley, Durban, 4036, South Africa
Email: info@gistra.co.za
Phone: 083 495 1182

11. Changes to this policy

We may update this policy from time to time. Changes are posted on this page and take effect when they are published. Please check this page regularly.