Privacy Policy
Last updated: 15 May 2026
HEACOTEX c.c. (“Heacotex”, “we”, “us”) respects your privacy and is committed to protecting the personal information you share with us. This Privacy Policy explains what we collect, how we use it, and your rights under the Protection of Personal Information Act, 2013 (“POPIA”).
Who we are
HEACOTEX c.c. (Registration: C.K. 89/14708/23)
4/351 Sixth Road, Bredell, 1619, South Africa
Email: info@heacotex.co.za
Telephone: 011 979 4083
Information Officer
In terms of section 55 of POPIA, the Information Officer for HEACOTEX c.c. is H A Saayman. The Information Officer is responsible for the lawful processing of personal information and for handling any queries, complaints or requests relating to this policy.
Contact the Information Officer at info@heacotex.co.za or 011 979 4083.
What we collect
- Quote requests: name, company, email, phone number, message content, and the products you’ve added to your quote
- General enquiries: name, company, email, phone number and the content of your message
- Website analytics: anonymised browsing data via Google Analytics 4 and Microsoft Clarity (page views, session duration, device type, country)
- Cookies: essential cookies for site functionality; optional analytics and marketing cookies subject to your consent
How we use it
- To respond to your quote requests and enquiries
- To improve the website experience based on aggregate analytics
- To send transactional emails (quote confirmations, replies to enquiries)
- We do not sell or share your personal information with third parties for marketing
Your rights under POPIA
You have the right to access, correct, or delete the personal information we hold about you, to object to processing, and to withdraw consent for non-essential processing. You also have the right to lodge a complaint with the Information Regulator of South Africa (inforegulator.org.za). To exercise any of these rights, contact our Information Officer at info@heacotex.co.za.
How long we keep your information
We retain personal information only for as long as necessary for the purpose it was collected, or as required by law:
- Quote requests and enquiries: 24 months from your last contact, after which they are deleted or anonymised
- Website analytics: automatically anonymised after 14 months (Google Analytics 4 default retention)
- Security logs: 6 months
Cookies
This site uses cookies to remember your quote contents and to measure aggregate website performance. You can manage cookie preferences via the consent banner shown on your first visit, or in your browser settings.
Third-party services and cross-border transfers
Some of the services we use process data on servers located outside South Africa. In terms of section 72 of POPIA, we only transfer personal information across borders where the recipient is subject to laws or binding agreements that provide an adequate level of protection, or where you have consented. The third parties we use are:
- Google LLC (Google Analytics 4, Google Search Console) — aggregate analytics with IP anonymisation; data processed on servers in the United States and European Union
- Microsoft Corporation (Microsoft Clarity) — session behaviour analytics; data processed on servers in the United States
- Meta Platforms, Inc. (Meta Pixel) — only if you have consented to marketing cookies; data processed on servers in the United States and European Union
Our website is hosted on a dedicated server located in the European Union. Each of these providers operates under recognised data-protection frameworks and standard contractual clauses.
Information security
We use industry-standard security measures including SSL/TLS encryption, a web application firewall, access controls and regular security monitoring to protect personal information against loss, unauthorised access or disclosure.
Changes
We may update this policy from time to time. Material changes will be communicated via a notice on this page, and the “last updated” date above will be revised.
This policy should be reviewed by the client’s legal advisor before launch to confirm it reflects current practice.