Privacy & POPIA Policy

This Privacy Policy explains how MOBCO 4IR (Pty) Ltd, trading as Mobco4Ir ("MOBCO4IR", "we", "us"), collects, uses, stores, shares, protects and deletes personal information in connection with its website, online store, quotations, sales, customer support, partner and vendor programmes, distributor relationships, service delivery, marketing, recruitment and other business operations. It is intended to support compliance with South Africa's Protection of Personal Information Act, 4 of 2013 (POPIA), and related electronic-commerce and consumer-protection obligations.

MOBCO4IR acts as a responsible party when it determines why and how personal information is processed. Where MOBCO4IR processes information only on documented instructions from a customer or partner, the parties may separately define MOBCO4IR as an operator/processor in a written data-processing agreement.

1. Personal information we may collect

• Identity and profile data: name, surname, username, company, job title and customer/account identifiers.
• Contact data: email address, telephone number, delivery/billing address and business contact details.
• Transaction data: products/services purchased, quotations, purchase orders, invoices, payment status, returns, warranties and support history.
• Payment-related data: payment method, transaction references and limited payment metadata. Card credentials are handled by our payment service provider (PayFast) and are not stored by MOBCO4IR.
• Technical and usage data: IP address, browser/device information, timestamps, security logs, cookie identifiers, pages viewed and interactions with the site.
• Business and procurement data: customer requirements, tender/RFQ information, authorised contacts, supplier/distributor records and vendor opportunity information.
• Communications: emails, support requests, call notes, forms, surveys, complaints and consent/marketing preference records.
• Compliance data: information reasonably required for fraud prevention, sanctions/vendor screening, tax, accounting, regulatory, contractual or legal obligations.

2. Sources of information

Information may be collected directly from you; from your employer or authorised representative; through the MOBCO4IR website and store; from payment, delivery, cloud, security or support providers; from authorised distributors, OEMs, vendors and channel partners where necessary to fulfil a transaction or register an opportunity; and from lawful public or business sources.

3. Purposes and lawful grounds

• To create and administer accounts, carts, orders, quotations and customer records.
• To process payments, fulfil orders, arrange delivery, provide licences/subscriptions and perform contracts.
• To obtain vendor/distributor pricing, stock availability, deal registration, warranty/RMA support and technical escalation.
• To provide customer service, cybersecurity, cloud, software, ISP/networking or other contracted technology services.
• To prevent fraud, secure systems, maintain audit logs and protect MOBCO4IR, customers and partners.
• To comply with legal, tax, accounting, regulatory, warranty and record-keeping obligations.
• To improve the website, catalogue, customer experience and business operations using proportionate analytics.
• To send direct marketing where permitted by law, including where valid consent exists or the applicable existing-customer conditions are met, with a clear opt-out mechanism.

MOBCO4IR will process personal information only where there is a lawful justification under applicable law, including consent where required, contractual necessity, legal obligation, protection of legitimate interests, or another basis permitted by POPIA. Consent may be withdrawn where processing relies on consent, without affecting prior lawful processing.

4. Sharing with vendors, partners, distributors and service providers

MOBCO4IR operates within a technology channel ecosystem. Personal information may be disclosed on a need-to-know basis to authorised OEMs, software publishers, cybersecurity vendors, distributors, wholesalers, logistics/courier providers, payment processors (PayFast), cloud/hosting providers, professional advisers and support providers when required to quote, fulfil, licence, deliver, register, support, secure or warranty a product or service.

MOBCO4IR does not authorise a recipient to use customer information for unrelated independent marketing merely because information was shared for fulfilment. Where a third party processes information on MOBCO4IR's behalf, MOBCO4IR will seek appropriate confidentiality, security and data-processing terms. Where the third party acts as an independent responsible party/controller, its own privacy terms may also apply.

5. International and cross-border transfers

Technology vendors, cloud platforms and support systems may process information outside South Africa. Before transferring personal information across borders, MOBCO4IR will use a lawful POPIA transfer mechanism and take reasonable steps to ensure an appropriate level of protection, contractual safeguards or another permitted basis. Where EU/EEA personal data is subject to the GDPR, MOBCO4IR will use an applicable GDPR transfer mechanism where required, such as an adequacy mechanism or approved contractual safeguards.

6. Security

MOBCO4IR applies reasonable technical and organisational safeguards appropriate to the nature of the information and the risks involved. These may include access controls, least-privilege administration, encryption in transit where supported, secure authentication, logging, backups, supplier due diligence, vulnerability management and incident-response procedures. No internet service can guarantee absolute security.

7. Retention

MOBCO4IR retains personal information only for as long as reasonably necessary for the purpose collected, to perform contracts, support warranties and subscriptions, resolve disputes, meet vendor or distributor audit requirements, and satisfy legal, tax, accounting and regulatory retention duties. Information that is no longer required will be deleted, de-identified or securely archived where legally appropriate.

8. Your rights

• Ask whether MOBCO4IR holds personal information about you and request access where permitted.
• Request correction, updating or deletion/destruction where the legal requirements are met.
• Object to certain processing and withdraw consent where consent is the basis for processing.
• Opt out of direct marketing at any time using the unsubscribe mechanism or by contacting MOBCO4IR.
• Complain to MOBCO4IR and, where applicable, lodge a complaint with the Information Regulator of South Africa.
• Where GDPR applies, exercise applicable rights including access, rectification, erasure, restriction, objection, portability and the right to complain to a competent supervisory authority.

9. Cookies and analytics

MOBCO4IR uses strictly necessary cookies for security, authentication, shopping-cart and checkout functions. The site does not currently use analytics, advertising or marketing cookies. Should that change, this policy and our Cookie Policy will be updated and consent will be obtained first where required. See the Cookie Policy for the full list of cookies in use.

10. Children

The MOBCO4IR store and business services are not directed at children. MOBCO4IR does not intentionally collect children's personal information for ordinary e-commerce purposes. If such processing becomes necessary, appropriate authority or another lawful basis will be required.

11. Changes to this policy

MOBCO4IR may update this policy when its services, partners, vendors, systems, legal obligations or processing activities change. The effective date and version are displayed at the top of this page.

12. Contact

Organisation: MOBCO 4IR (Pty) Ltd (Reg No. 2021/344190/07)
Website: https://www.mobco4ir.com
Privacy / support email: support@mobco4ir.com
Telephone: +27 74 500 0043
Registered address: 8 Kingfisher Avenue, Yellowwood Park, Durban, KwaZulu-Natal, 4004, South Africa
VAT number: [Add VAT number]
Information Officer: [Add Information Officer name and contact email]