Privacy Policy

Norsafe may collect personal information directly from you when you:

• Contact us by telephone, email, WhatsApp or through the website.
• Request a quotation.
• Register as a customer.
• Apply for or operate a credit account.
• Place or receive an order.
• Provide artwork, branding or garment information.
• Visit our premises.
• Use the Norsafe website.
• Communicate with Norsafe in the ordinary course of business.

Information may also be received from authorised representatives, employers, customers, suppliers, publicly available business records, trade references or service providers where lawful and reasonably necessary for the relevant purpose.

Norsafe may process personal information for purposes including:

• Responding to enquiries and quote requests.
• Preparing quotations and product recommendations.
• Processing orders, collections and deliveries.
• Providing PPE, workwear, safety footwear, uniforms and branding services.
• Creating and administering customer accounts.
• Assessing and administering credit facilities.
• Managing invoices, payments, statements and collections.
• Communicating about orders and service requirements.
• Managing supplier, courier and service-provider relationships.
• Maintaining financial, tax and business records.
• Preventing fraud and protecting Norsafe systems and assets.
• Improving website functionality and customer service.
• Complying with applicable legal and regulatory obligations.

Norsafe processes personal information only where there is an appropriate lawful basis and a legitimate purpose for doing so.

Depending on the circumstances, processing may be necessary to:

• Perform or prepare to perform a contract.
• Comply with a legal obligation.
• Protect a legitimate interest of Norsafe or another person, subject to applicable rights.
• Carry out a purpose authorised by law.
• Process information with the data subject's consent where consent is required.

Norsafe aims to process information in accordance with the principles of accountability, processing limitation, purpose specification, information quality, openness, security safeguards and data-subject participation required by POPIA.

Personal information may be shared where reasonably necessary to perform the relevant business function.

This may include sharing appropriate information with:

• Suppliers and manufacturers fulfilling product requirements.
• Courier, freight and delivery service providers.
• Branding, production or technical service providers.
• Accountants, auditors or financial service providers.
• Payment and banking service providers.
• IT, hosting, website, email and security service providers.
• Debt collection or legal service providers where necessary.
• Government bodies, regulators or law-enforcement authorities where required by law.

Norsafe does not sell personal information as a commercial product to advertisers or data brokers.

Norsafe may use external service providers to process personal information on its behalf or to provide systems necessary for business operations.

Where appropriate, Norsafe expects service providers to process personal information only for authorised purposes and to apply reasonable confidentiality and security measures.

Access should be limited to the information reasonably required for the service being performed.

Norsafe may communicate with customers and prospective customers regarding quotations, orders, products, account matters and relevant business services.

Direct marketing by electronic communication will be managed in accordance with applicable South African law. Where consent is legally required, Norsafe will seek the required consent before sending such communications.

A recipient may request that optional marketing communications stop. Transactional or operational communications necessary to manage an existing quote, order, account or legal obligation may still be sent.

Norsafe takes reasonable technical and organisational measures intended to protect personal information against loss, unauthorised access, alteration, destruction or unlawful processing.

Measures may include:

• Controlled access to systems and records.
• Password and account-security controls.
• Security updates and system maintenance.
• Access restriction according to business need.
• Reasonable backup and recovery practices.
• Confidential handling of customer and account documentation.
• Appropriate controls when information is shared with service providers.

No internet-connected system can be guaranteed to be completely secure, but Norsafe aims to maintain safeguards appropriate to the nature of the information and the risks involved.

Norsafe retains personal information only for as long as reasonably necessary for the purpose for which it was collected, or for a period required or permitted by applicable law.

Retention periods may depend on the nature of the record, contractual requirements, warranties, accounting and tax obligations, legal claims, account history, fraud prevention or other legitimate business requirements.

Information that no longer needs to be retained should be securely deleted, destroyed or de-identified where reasonably practicable and appropriate.

Some technology, hosting, communications or service providers used in modern business operations may process or store information outside South Africa.

Where personal information is transferred outside South Africa, Norsafe will seek to ensure that the transfer is made on a basis permitted by applicable data-protection law and that appropriate safeguards are applied where required.

Norsafe's website and commercial services are directed primarily at businesses and adult customers.

Norsafe does not intentionally seek to collect children's personal information through the website for unrelated purposes.

Where children's information must legitimately be processed, it will be handled subject to applicable POPIA requirements and any necessary authorisation.

If Norsafe has reasonable grounds to believe that personal information has been accessed or acquired by an unauthorised person, the incident will be investigated and managed according to applicable legal requirements.

Where POPIA requires notification, the relevant Information Regulator and affected data subjects will be notified as required by law.

Norsafe may update this Privacy Policy when business processes, technology, legal requirements or service providers change.

The current version will be published on this page together with the applicable update date.