Privacy Policy

1. Who we are

Buffalo Smart Security (Pty) Ltd (registration number 2026/240698/07) is the responsible party for the personal information described in this policy.

• Address: 25921 Ngondlana Street, Asanda Village, Strand, 7140, Western Cape
• Phone: 062 421 8375
• WhatsApp: 071 589 7265
• Email: margaridamarenga@gmail.com

This policy covers this website and enquiries made to us. Personal information processed while we deliver security services at a client’s site — for example visitor and vehicle access records or CCTV footage — is handled under the agreement we have with that client.

2. Information we collect

We only collect information you choose to give us, and basic technical information described below.

• Consultation form: your name, email address, phone number, the type of property or business, the security services you are interested in and any message you add.
• Phone, WhatsApp and email: your contact details and whatever you tell us when you call, message or email us.
• Technical information: like most websites, the server that hosts this site may automatically record basic technical details such as your IP address, browser type and the pages requested, to keep the site secure and working.
• Visit statistics: we count visits to see which pages are useful. For each page view we record the page, the website that referred you (if any), the type of device (phone, tablet or computer) and a one-way code made from your connection details and the date. The code changes every day, cannot be turned back into your IP address, and is not used to identify you or follow you over time. Your IP address itself is not stored for statistics.

Please do not send us special personal information (such as health information) or information about children through the website.

3. How we use your information

• To respond to your enquiry and discuss your security requirements.
• To arrange site assessments and prepare quotations or proposals you have asked for.
• To provide, manage and communicate about services you have agreed to.
• To keep this website secure and to meet our legal obligations.

We process your information because you have asked us to (consent), because it is necessary to take steps towards an agreement with you, or because we have a legitimate interest in responding to enquiries and running our business, as POPIA allows. We do not sell your personal information, and we will not send you marketing messages unless you have agreed to receive them.

4. Cookies and tracking

This website does not use analytics, advertising or tracking cookies, and it does not track you across other websites. The visit statistics described above work without cookies and are kept on our own website, not shared with analytics companies. The only cookie is a sign-in cookie used by our own staff when they log in to manage the website; visitors never receive it. The fonts and images on this site are served from our own website rather than from third-party services. If this changes, we will update this policy first.

5. Who we share information with

We only share personal information where it is needed to respond to you or deliver our services, or where the law requires it. This may include:

• Service providers who help us operate, such as our website host and our email provider (Google Gmail). They may only use the information to provide their service to us.
• WhatsApp (Meta), if you choose to contact us on WhatsApp. Your use of WhatsApp is also governed by WhatsApp’s own privacy policy.
• Law enforcement or regulators, where we are legally required to share information.

6. Information stored outside South Africa

Some of the services we use, such as email and WhatsApp, may store information on servers outside South Africa. Where this happens, we rely on providers that are bound by data-protection laws or agreements offering protection comparable to POPIA, as section 72 of POPIA requires.

7. How long we keep it

We keep personal information only for as long as we need it for the purpose it was collected for, or as long as the law requires. Requests sent through the consultation form are stored in our website’s secure database, which only our authorised staff can access, and a copy is emailed to our business inbox so we can reply quickly. Enquiries that do not lead to an agreement are deleted when they are no longer needed.

8. How we protect it

We take reasonable technical and organisational measures to keep personal information secure and to prevent its loss, misuse or unauthorised access. If we believe your personal information has been accessed by someone without authority, we will let you and the Information Regulator know, as POPIA requires.

9. Your rights

Under POPIA you have the right to:

• ask whether we hold personal information about you, and request a copy of it;
• ask us to correct or delete information that is inaccurate, out of date or no longer needed;
• object to us processing your information, including for direct marketing;
• withdraw your consent at any time, where we rely on consent;
• lodge a complaint with the Information Regulator.

To use any of these rights, contact our Information Officer at margaridamarenga@gmail.com or call 062 421 8375. We may need to confirm your identity before acting on a request.

10. Complaints

If you are unhappy with how we have handled your personal information, please contact us first so we can try to put it right. You may also complain to the Information Regulator (South Africa) at inforeg.org.za.

11. Changes to this policy

We may update this policy from time to time. The latest version will always be on this page, with the date it was last updated.