Privacy Notice

The responsible party for the personal information described in this notice is:

• Dumas Group (Pty) Ltd, registration number 2008/017282/07
• Building 3, 4th Floor, 11 Alice Lane, Sandhurst, Sandton, 2196
• Email: info@dumasgroup.co.za
• Phone: 010 100 3132
• Information Officer: Andrea Nunes, andrea@dumasgroup.co.za

We collect only what we need to respond to you and run the website.

• Contact form: the first name, last name, email address, phone number and message you type into the form on our Contact page.
• Correspondence: anything you send us by email or tell us when you phone, and our replies.
• Technical information: your IP address, browser type, device and the pages requested. This is recorded by our hosting provider and by the third-party services the site loads (see "Cookies and third-party services").
• Analytics (only if you accept): how you use the site, such as pages viewed, how you arrived, your approximate location and your device and browser, collected through Google Analytics.

We do not ask for special personal information (such as health, religion or biometric details) or information about children.

We use personal information to:

• respond to your enquiry and continue any business conversation you start with us, including partnership, investment and supply discussions;
• keep the website secure and working properly;
• meet our legal and regulatory obligations.

Our grounds under POPIA are your consent when you submit the form, steps taken at your request before entering a contract, our legitimate interest in responding to enquiries and running our business, and legal obligation where it applies. We do not sell personal information and we do not make automated decisions about you. We do not send marketing emails or newsletters. If that ever changes, we will ask for your consent first.

We use a small number of service providers (operators under POPIA) who process information on our behalf and may only use it for that purpose:

• HubSpot: receives and stores contact form submissions and manages our enquiry records. Submissions are stored in HubSpot's European (EU1) data centre.
• Google: provides the map on our Contact page, the fonts used on the site and, only if you accept analytics cookies, Google Analytics, which reports how the site is used.
• Xneelo: hosts the website.

We may also disclose information to our professional advisers, or to a regulator or court, where the law requires it.

Some of our service providers store or process information outside South Africa, including in the European Union and the United States. Where this happens we rely on the recipient being subject to law or binding terms that give a level of protection equivalent to POPIA, or on your consent, as section 72 of POPIA allows.

Our own website sets no cookies unless you accept analytics. It stores one entry in your browser's local storage to remember your cookie choice, and it does not use advertising or tracking tools.

The first time you visit, a notice asks whether you accept analytics cookies. If you decline, no analytics cookies are set. You can change your choice at any time with the "Cookie settings" link in the footer. The site also loads content from third parties, and those services can set their own cookies or receive your IP address when the content loads:

• Google Analytics (only if you accept). Sets cookies beginning with _ga, which last up to two years, to tell visits and visitors apart and to report how the site is used. Google may process this information on servers outside South Africa.
• HubSpot (contact form). At the time of writing the only cookie we observed was a short-lived security cookie called __cf_bm, set by HubSpot's network provider to identify automated bots. It expires after about 30 minutes.
• Google Maps (map on the Contact page) and Google Fonts (typefaces). Google receives your IP address and browser details when these load and may set its own cookies.

You can block or delete cookies in your browser settings. Blocking third-party content may stop the contact form or map from displaying. If we add any other category of cookie in future, we will ask for your consent before it is set and update this section.

We keep enquiry information for three years after our last contact with you, unless the law or a contract requires us to keep it for longer. After that we delete it or remove anything that identifies you.

We take reasonable technical and organisational steps to protect personal information, including encrypted (https) connections to the website and restricted access to enquiry records. No system is completely secure. If a security compromise affects your information, we will notify you and the Information Regulator as POPIA requires.

Under POPIA you may:

• ask us to confirm whether we hold personal information about you and request a copy;
• ask us to correct or delete information that is inaccurate, outdated or no longer needed;
• object to us processing your information, or withdraw your consent at any time (this does not affect processing that already took place);
• object to direct marketing;
• complain to the Information Regulator if you believe your information has been mishandled.

To exercise these rights, email our Information Officer at the address in the first section. We may need to confirm your identity first and will respond within a reasonable time.

This website is intended for business visitors. It is not directed at anyone under 18 and we do not knowingly collect information from children.

This site links to the websites of Dumas Group companies and partners, such as Nyezi Mining Holdings, Nyezi Steel, AET Group, DVP Hub and Changing Lives Charity. They are separate organisations with their own privacy practices, and this notice does not cover them.

We may update this notice from time to time. The date at the top of the page shows when it was last changed.