1. Who is responsible for your information?

Greendot Biopak South Africa (Pty) Ltd is the responsible party for information you submit through this site. Our contact details are: 24 5th Avenue Walmer, Port Elizabeth; telephone 069 401 3860; email info@greendotbiopaksa.com. Address privacy requests to our privacy contact using these details.

2. Information we collect

When you submit a contact, callback or product enquiry, we receive the details you provide, which may include your name, company, email address, telephone number and country code, preferred callback date and time, product requirements, message and any file you choose to attach. We also record the form and page used and the time the request was received. Your browser and the web server may process ordinary technical information needed to deliver the pages, such as your IP address and browser details. Please do not include identity numbers, medical information or other sensitive information unless we specifically ask for it and explain why it is needed.

3. Why we use it

We use enquiry information to assess and respond to your request, communicate about products or a possible quotation, maintain necessary business records, protect the site and comply with applicable law. Providing the marked form fields is necessary if you want us to consider that enquiry; you may instead contact us by telephone or post. We rely on the lawful grounds available under POPIA as applicable to the particular purpose, including your request for us to take steps in response to an enquiry, a legal duty or our legitimate interests. Reading this notice or submitting an enquiry does not enrol you in marketing.

4. Direct marketing

The website does not automatically send marketing emails or WhatsApp messages. We will not use an enquiry as blanket permission for unsolicited electronic marketing. If marketing is introduced, we will use a separate lawful process under POPIA, honour objections and provide a way to opt out.

5. Where information goes

On the Cloudflare Pages preview, accepted form submissions are saved as JSON records in a private Cloudflare R2 bucket for review. Local development instead saves them on the local server. If preview storage is unavailable, the form reports an error and does not claim that an enquiry was received. Submissions are not automatically emailed or used to book a callback. Only authorised people who need the records to handle enquiries should have access. We may disclose information where the law requires it or to a service provider acting under appropriate instructions and safeguards. We do not sell enquiry details.

The Contact Us page offers a Google Maps embed that loads only when you choose to load it. Loading the map may send technical information to Google and set third-party cookies. Clicking a WhatsApp, social-media, external website or map link takes you to that provider, whose own privacy notice then applies. We do not send your saved enquiry record to those services merely because you submitted a form here.

6. Storage, retention and security

Enquiry records should be kept only for as long as needed to respond, maintain necessary business records, resolve a dispute or meet a legal duty, and should then be deleted or de-identified. Neither the local server nor the R2 integration automatically expires records: an authorised administrator must review and remove records that are no longer needed, or configure a suitable R2 lifecycle rule. The website has no public route to read saved enquiries. No internet or storage system can be guaranteed completely secure. Before wider public use, the business must put a documented retention schedule and suitable access, backup and incident-response controls in place.

7. Transfers outside South Africa

The Cloudflare Pages preview sends accepted enquiry records to Cloudflare R2. Cloudflare may process information outside South Africa depending on the configured bucket and service locations. The business must confirm its actual processing locations and put appropriate safeguards in place under POPIA's cross-border transfer requirements before collecting real customer enquiries. External services such as Google Maps and WhatsApp may also process information outside South Africa when you use them.

8. Your POPIA rights

You may ask whether we hold your personal information, request access to it, ask for inaccurate information to be corrected, request deletion where the law permits, object to certain processing, and withdraw consent where consent is the basis used. We may need to verify your identity and may retain information where the law requires it. Send requests to the contact details in section 1. If you believe your information has been handled unlawfully, you may complain to the Information Regulator.

9. Cookies and policy changes

This preview does not run Google Analytics, Microsoft Clarity or advertising trackers. If you choose to load the map, Google may use third-party cookies. You can control cookies in your browser, although that may affect some external features. We will update this page when our actual processing changes and show the new date above. A full public launch or new delivery provider requires a fresh review of this notice.