Privacy Policy

1. Data Controller

Orbix Containers & Structures is the responsible party (data controller) for personal information collected through our website, quotation process, sales and after-sales service.

Registered address: 19A Chevrolet Street, Markman Industrial, Port Elizabeth (Gqeberha), Eastern Cape, 6001, South Africa.

Contact for privacy matters: privacy@orbixcontainers.com

2. What Personal Information We Collect

We do not collect sensitive personal information such as identity numbers (SAID), financial account details (processed via PCI-DSS compliant gateways only), health information or biometric data.

3. How We Use Your Information

• Order processing: To fulfil purchases, arrange delivery and manage invoicing.
• Quotations: To prepare and send price quotations for containers and structures.
• Customer support: To respond to enquiries, complaints and after-sales requests.
• Marketing: To send relevant product updates, promotions and industry news (only with your consent or where we have a legitimate business interest). You may opt out at any time.
• Legal compliance: To meet tax, customs, export compliance and other regulatory obligations.
• Website improvement: To analyse usage patterns and improve our website experience.
• Fraud prevention: To detect and prevent fraudulent transactions.

4. Legal Basis for Processing

Under the Protection of Personal Information Act (POPIA) and GDPR, we process your personal information on the following grounds:

• Contract performance: Processing necessary to fulfil your order or quote request.
• Legal obligation: Processing required by South African tax law, VAT Act, SARB regulations, and export controls.
• Legitimate interests: Marketing to existing customers, fraud prevention, website analytics.
• Consent: Direct marketing emails to non-customers; cookie placement (where required).

For EU/EEA customers, you may exercise additional rights under the GDPR including the right to lodge a complaint with your local Data Protection Authority.

5. Sharing & Disclosure

Orbix does not sell your personal information. We may share it with:

• Logistics providers: Transport companies for delivery coordination (name, address, phone).
• Payment processors: PCI-DSS compliant gateway providers for card payments.
• IT service providers: CRM, email, hosting and analytics platforms (all subject to data processing agreements).
• Legal and regulatory bodies: SARS, customs authorities, courts as required by law.
• Business transfers: In the event of a sale, merger or acquisition, subject to the same privacy protections.

All third-party processors are contractually required to maintain appropriate security and only process data on our instructions.

6. Data Retention

• Customer records: Retained for 7 years from last transaction (SARS requirement).
• Quotation-only enquiries: Retained for 2 years if no order placed.
• Marketing consents: Until you withdraw consent or opt out.
• Website analytics: Aggregated data retained for 26 months; personal identifiers purged after 14 months.
• Communication records: Retained for 3 years for dispute resolution purposes.

After the retention period, personal information is securely deleted or anonymised.

7. Your Rights

To exercise any right, contact privacy@orbixcontainers.com. We will respond within 30 days. Verification of identity may be required.

South African residents may also lodge a complaint with the Information Regulator: justice.gov.za/inforeg

8. Cookies & Tracking

Our website uses cookies and similar technologies to improve your experience and analyse site usage.

• Essential cookies: Required for site functionality. Cannot be disabled.
• Analytics cookies: Google Analytics 4 — track page views, sessions and behaviour. Data is anonymised. You may opt out via Google's opt-out tool.
• Advertising cookies: Google Ads conversion tracking (tag ID: AW-18188042685) to measure enquiry and quote form conversions.
• WhatsApp widget: May set session cookies for the WhatsApp chat button.

You can manage cookies via your browser settings. Note that disabling essential cookies may affect site functionality.

9. Security

Orbix implements appropriate technical and organisational measures to protect your personal information, including:

• HTTPS/TLS encryption for all data transmitted via our website.
• Access controls limiting employee access to personal data on a need-to-know basis.
• Regular security reviews and software updates.
• PCI-DSS compliant payment processing — Orbix does not store card numbers.

In the event of a data breach affecting your personal information, we will notify you and the Information Regulator within 72 hours as required by POPIA.

10. International Data Transfers

Orbix operates across South Africa, the USA and Europe. Your personal information may be transferred to and processed in countries outside South Africa, including the USA and EU member states.

We ensure such transfers comply with POPIA Section 72 requirements, either through adequacy decisions, standard contractual clauses or binding corporate rules. EU-based customers have their data processed under GDPR Article 46 safeguards.

11. Children's Privacy

Our services are intended for business and commercial use by adults aged 18 and over. We do not knowingly collect personal information from children under 18. If we become aware that we have inadvertently collected such information, we will delete it promptly.

12. Contact & Privacy Officer

For privacy enquiries, data access requests or complaints:

Privacy Officer — Orbix Containers & Structures
19A Chevrolet Street, Markman Industrial, Port Elizabeth (Gqeberha), 6001, South Africa
Email: privacy@orbixcontainers.com
Phone: +27 710 960 446

This privacy policy was last reviewed on 1 July 2025 and may be updated periodically. We encourage you to check this page regularly.