Privacy Policy

East Rand Mall

1. Introduction

East Rand Mall (“we”, “us”, “our”) respects your privacy and is committed to protecting your personal information in accordance with the Protection of Personal Information Act, 4 of 2013 (POPIA) and other applicable South African laws.

This Privacy Policy explains how we collect, use, store, and protect your personal information when you interact with our website, digital platforms, and services.

2. Responsible Party

East Rand Mall acts as the Responsible Party for the processing of personal information collected through this website and related digital platforms.

For any privacy-related queries, you may contact us using the contact details provided on our website.

3. What Personal Information We Collect

We may collect and process the following personal information:

Full name and surname
Contact details, including email address and telephone number
Demographic information, where voluntarily provided
Website usage data, including cookies, IP address, browser type and device information
CCTV footage within the mall premises for security purposes
Any information voluntarily submitted through website forms, competitions, surveys, promotions or enquiries

4. How We Collect Information

We collect personal information through:

Website contact forms and newsletter sign-up forms
Promotional entries, competitions and surveys
Wi-Fi access portals, where applicable
CCTV and on-site security systems
Direct interactions by email, telephone, social media or events
Cookies, analytics tools and similar website technologies

5. Purpose of Processing Personal Information

We process personal information for the following purposes:

To respond to enquiries and provide customer support
To manage communications with shoppers, tenants, service providers and stakeholders
To improve website functionality, content and user experience
To administer competitions, promotions, campaigns and events
To send marketing communications where consent is required or where otherwise permitted by law
To maintain the safety and security of our premises, visitors and staff
To comply with legal and regulatory obligations

We will only process your personal information where we have a lawful basis to do so in terms of POPIA.

6. POPIA Compliance

We are committed to processing personal information lawfully and in a reasonable manner that does not infringe your privacy. In line with POPIA, we take steps to ensure that:

Personal information is processed lawfully and transparently
Information is collected for a specific, explicitly defined and lawful purpose
Only information that is adequate, relevant and not excessive is collected
Reasonable technical and organisational security measures are in place
Personal information is kept accurate and updated where necessary
Data subjects are able to exercise their rights in relation to their personal information

7. Sharing of Personal Information

We may share personal information with selected third parties where necessary for operational, legal or service-related purposes, including:

IT service providers, web hosting providers and system administrators
Marketing, advertising and communications service providers
Security and risk management service providers
Professional advisors, auditors and regulatory authorities where required by law
Business partners or contractors involved in the operation and management of the mall

All third parties are required to treat personal information confidentially and to process it in accordance with applicable data protection laws.

We do not sell your personal information to third parties.

8. Data Security

We implement appropriate technical and organisational measures to protect personal information against accidental loss, unauthorised access, disclosure, alteration or destruction. These measures may include access controls, secure servers, password protection, monitoring systems and encryption where appropriate.

9. Data Retention

We retain personal information only for as long as necessary to fulfil the purpose for which it was collected, or as required by law, regulation or legitimate operational needs. Once the information is no longer required, it will be securely deleted, destroyed or anonymised.

10. Your Rights as a Data Subject

In terms of POPIA, you have the right to:

Request access to the personal information we hold about you
Request correction, updating or deletion of your personal information
Object to the processing of your personal information in certain circumstances
Withdraw consent where processing is based on consent
Lodge a complaint with the Information Regulator of South Africa

11. Cookies and Website Tracking

Our website may use cookies and similar technologies to enhance functionality, analyse traffic, remember user preferences and support marketing activities. By using our website, you consent to the use of cookies where permitted by law.

You may disable cookies through your browser settings, although this may affect certain features and functionality of the website.

12. Direct Marketing

Where required by law, we will only send you direct marketing communications if you have consented to receive them or where we are otherwise permitted to do so under applicable legislation. You may opt out of receiving marketing communications at any time by using the unsubscribe facility provided or by contacting us directly.

13. Third-Party Links

Our website may contain links to third-party websites or services. We are not responsible for the privacy practices, content or security of those third-party platforms. Users are encouraged to review the privacy policies of any external websites they visit.

14. Children’s Privacy

We do not knowingly collect personal information from children without appropriate consent from a parent, guardian or competent person where required by law. Where such information is collected for a lawful purpose, it will be processed in accordance with POPIA and any other applicable legal requirements.

15. Updates to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements or website functionality. Any revised version will be posted on this page with the updated effective date.

16. Contact Information

If you have any questions about this Privacy Policy or the way in which your personal information is handled, please contact East Rand Mall using the contact details published on the website.

17. Governing Law

This Privacy Policy is governed by the laws of the Republic of South Africa.