Privacy policy

The Protection of Personal Information Act, 2013 (“POPI”)

The Protection of Personal Information Act, 2013 (“POPI”) came into complete commencement on 1 July 2021. In this regard, we have a number of obligations and duties in terms of POPI that we must comply with. The protection of your personal information is a high priority for us, and we have taken steps to ensure that your personal information is protected and remains private.

In addition to serving as our privacy policy, this document also serves as our data subject notification as contemplated in Section 18 of POPI. It will inform you of what personal information we collect, why we collect it, how we use it, and what safety measures are in place to protect it.

Where we refer to “process”, it means how we collect, use, store, make available, destroy, update, disclose, or otherwise deal with your personal information. As a general rule, we will only process your personal information if this is required to deliver or offer a service, provide a product or carry out a transaction.

We may combine your personal information and use the combined information for any of the purposes stated in this Privacy Policy.

In this document, any reference to “we”, “us”, or “our” is a reference to:

  • ACA Group (Pty) Ltd
  • ACA Threads (Pty) Ltd
  • Southern Sewing Thread (Pty) Ltd
  • Universal Thread Holding (Pty) Ltd

If you use our services, goods and/or products, you agree that we may process your personal information as explained in this Privacy Policy.

We may change this Privacy Policy from time to time if the law or our business practices require it. The version of the Privacy Policy displayed on our website at the time of your interaction with us will be applicable.

What is personal information?

“Personal information’’ means information relating to an identifiable, living, natural person, and where applicable, an identifiable, existing juristic person. This includes, but is not limited to:

  • Information relating to race, gender, sex, pregnancy, marital status, national/ethnic/social origin, colour, sexual orientation, age, physical or mental health, disability, religion, belief, culture, language, and birth.
  • Information relating to education, medical, financial, criminal, or employment history.
  • Identifiers like ID numbers, email/physical addresses, phone numbers, online identifiers, and location data.
  • Biometric information.
  • Personal opinions or preferences.
  • Confidential correspondence.
  • Opinions of others about the person.
  • Names if they are linked to other identifying information.

Is the supply of personal information voluntary or mandatory?

Some information is mandatory—required by law for us to collect. If you do not supply this, we cannot comply with legal obligations and may not be able to do business with you.

We collect personal information as required by the following legislation (including but not limited to):

  • Basic Conditions of Employment Act, No. 75 of 1997
  • Compensation for Occupational Injuries and Diseases Act, No. 130 of 1993
  • Employment Equity Act, No. 55 of 1998
  • Financial Intelligence Centre Act, No. 38 of 2001
  • Income Tax Act, No. 58 of 1962
  • Labour Relations Act, No. 66 of 1995
  • Unemployment Insurance Act, No. 63 of 2001
  • Occupational Health and Safety Act, No. 85 of 1993
  • Prevention of Organised Crime Act, No. 121 of 1998
  • And others

Some information is voluntary, but may be required for us to deliver products or services. Without it, we may not be able to do business with you.

When will we process your personal information?

We will only process your information for lawful business purposes if:

  • You have consented.
  • A legally authorised person or court has consented.
  • It is required for a contract.
  • The law permits or requires it.
  • It protects your, our, or a third party’s legitimate interest.

What is special personal information?

This refers to sensitive data including:

  • Biometric information
  • Philosophical beliefs
  • Sex life
  • Criminal behaviour
  • Political persuasion
  • Trade union membership
  • Ethnic origin
  • Race
  • Health
  • Religious beliefs

When will we process special personal information?

Only under specific circumstances, such as:

  • With your consent.
  • For HR/payroll compliance with labour law.
  • To protect or create a legal right or obligation.
  • For research/statistics where legal conditions are met.
  • Where you made the information public.
  • Where the law requires it.
  • For insurance or identification purposes.

When and from where do we collect your personal information?

We may collect personal information from:

  • You directly.
  • Public records or publicly available sources.
  • Your engagement with our services (emails, calls, surveys, etc.).
  • Third parties (with your consent).
  • Partners, legal representatives, service providers, insurers, banks, regulators, and others.

Why do we process your personal information?

To:

  • Provide goods/services.
  • Market to you.
  • Respond to enquiries/complaints.
  • Fulfil legal and compliance requirements.
  • Conduct research and credit/insurance risk assessments.
  • Process payments and deliver documentation.
  • Verify identity.
  • Administer loyalty/reward programmes.
  • Fulfil lawful business purposes.

How we use personal information for marketing

  • We may use your data to market our products/services via post, phone, SMS, email, or fax.
  • If required by law, we’ll only do so with your consent.
  • You may opt out of marketing communications at any time.

When, how, and with whom do we share personal information?

We will share information only when:

  • You consent.
  • It is needed for a contract.
  • The law requires it.
  • It serves a legitimate interest.

Will we transfer information to other countries?

Yes, but only if:

  • The other country has adequate data protection laws.
  • It is necessary for a contract.
  • You have consented.
  • It is in your interest and consent is not reasonably obtainable.

We will ensure legal safeguards are in place.

How we secure your personal information

We implement technical and organisational safeguards, including:

  • System monitoring.
  • Secure storage.
  • Controlled access to buildings/systems.
  • Proper disposal of records.
  • Compliance with industry best practices.

How long do we keep your personal information?

We keep it as long as:

  • Required by law.
  • Required by a contract.
  • You consent to it.
  • Needed for business or legal purposes.
  • Needed for statistical or research purposes.

We may retain it even after our relationship ends, e.g. for employment history purposes.

Our cookie policy

Cookies store small bits of data to personalise your experience on our website/apps. By using our site, you agree to the use of cookies.

Cookies may:

  • Identify your device.
  • Improve website experience.
  • Prevent fraud.
  • Provide analytics.

Your duties and rights regarding your personal information

You must:

  • Provide proof of identity when requesting changes.
  • Inform us of changes to your personal data.

You have the right to:

  • Access the personal data we hold about you.
  • Request confirmation, copies, or the identity of third parties who accessed your data.
  • Request correction or deletion of inaccurate or outdated information.
  • Object to processing (where legally permissible).
  • Withdraw your consent (where applicable).
  • Lodge a complaint with the Information Regulator.

Contact Details

Information Officer:
Name: Eckhard Marshing
Phone: +27 (0)21 981 1133
Email: admin@acagroup.co.za
Address: Corner Okavango Rd and Old Paarl Rd, Brackenfell, Cape Town, 7560

Information Regulator Contact Details:
Email: POPIAcomplaints@inforegulator.org.za
Postal Address: P.O. Box 31533, Braamfontein, Johannesburg, 2017
Physical Address: JD House, 27 Stiemens Street, Braamfontein, Johannesburg, 2001