1. Who we are
CESBE Group (Pty) Ltd (“CESBE”, “we”, “us”) is a civil engineering and construction company registered in South Africa. For the purposes of the Protection of Personal Information Act, 4 of 2013 (“POPIA”), CESBE Group (Pty) Ltd is the responsible party. Our Information Officer is Roché van Niekerk, reachable at roche@cesbegroup.co.za.
2. What this policy covers
This policy covers personal information processed through our website (cesbegroup.co.za), our WhatsApp business channel (CESBE Group, +27 65 754 7484, operated on the WhatsApp Business Platform), and the operational systems behind them that we use to run our sites, plant, fuel, deliveries and attendance records.
3. What we collect
Depending on how you interact with us, we may process: your name and contact details (including your WhatsApp number); messages you send to our WhatsApp channel and our replies; photographs you submit through that channel (for example delivery notes, tally sheets, fuel and meter readings, plant and asset photos); attendance and clocking records if you work for or with us; and technical records created when systems process the above (timestamps, message identifiers).
4. Why we collect it
We process this information to run our operations: capturing site records (deliveries, tally sheets, fuel issued, plant events), keeping attendance and payroll accurate, responding to queries, meeting our legal duties (tax, employment, health and safety), and protecting our people and property. We do not sell personal information, and we do not use this channel for marketing.
5. Legal grounds
We process personal information where it is necessary for the performance of a contract (including employment), to comply with the law, or to pursue our legitimate operational interests as described above, in each case as permitted by POPIA.
6. Who processes it on our behalf
We use reputable service providers as operators under POPIA: Meta Platforms (WhatsApp Business Platform), and the cloud systems that run our records and workflows (including n8n, Google Workspace and monday.com). Some providers store information outside South Africa; where they do, we rely on their contractual and security safeguards as contemplated by section 72 of POPIA. WhatsApp messages are end-to-end encrypted in transit between you and our business number.
7. How long we keep it
We keep records only as long as they are needed for the purposes above and as required by law (for example company, tax and employment record-keeping periods), after which they are deleted or de-identified.
8. Your rights
Under POPIA you may ask us: what personal information we hold about you; to correct or delete it where appropriate; and to object to processing in certain circumstances. Contact our Information Officer at roche@cesbegroup.co.za. You may also lodge a complaint with the Information Regulator (South Africa) — enquiries@inforegulator.org.za.
9. Security
We restrict access to personal information to people who need it for their work, protect our systems with authentication and access controls, and review those controls as our systems change.
10. Changes to this policy
We may update this policy from time to time. The current version will always be available at cesbegroup.co.za/privacy, with its effective date shown at the top.