Privacy Policy

Last updated: 1 January 2026

1. Introduction

OSandMac (PTY) Ltd ("we", "us", "our") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, store, and disclose personal information when you visit our website at osandmac.com (the "Site") or engage with our services.

We comply with the South African Protection of Personal Information Act (POPIA), the European Union General Data Protection Regulation (GDPR), and other applicable data-protection legislation.

2. Information We Collect

2.1 Information You Provide

  • Name, email address, and phone number when you submit a contact or enquiry form
  • Company name and project details when requesting a quote
  • Any information you voluntarily include in messages to us

2.2 Information Collected Automatically

  • Device type, browser type, operating system, and screen resolution
  • IP address (anonymised where possible)
  • Pages visited, time spent on pages, and referring URLs
  • Cookie identifiers and similar tracking technologies (see Section 6)

3. How We Use Your Information

We process your personal information for the following purposes:

  • Responding to enquiries and providing our services
  • Sending service-related communications
  • Improving and optimising our website through analytics
  • Ensuring website security and preventing fraud
  • Complying with legal obligations

4. Legal Basis for Processing (GDPR & POPIA)

We rely on the following legal bases:

  • Consent: where you have given clear consent for us to process your data for a specific purpose (e.g. submitting a contact form, accepting analytics cookies).
  • Legitimate Interest: where processing is necessary for our legitimate business interests, such as improving the Site and communicating with prospective clients, provided these interests do not override your fundamental rights.
  • Legal Obligation: where we are required by law to process certain data.
  • Contractual Necessity: where processing is necessary to fulfil a contract or take pre-contractual steps at your request.

5. Data Sharing & Third Parties

We do not sell your personal information. We may share data with:

  • Google Analytics: for aggregated, anonymised website usage statistics
  • Firebase (Google): for website hosting and analytics infrastructure
  • Service providers: trusted third parties who assist in operating our website or conducting our business, bound by contractual confidentiality obligations
  • Law enforcement: if required by law, court order, or governmental regulation

Where data is transferred outside South Africa or the European Economic Area, we ensure appropriate safeguards are in place in accordance with POPIA and GDPR requirements.

6. Cookies & Tracking Technologies

We use cookies and similar technologies to enhance your experience. When you first visit our Site, a cookie banner allows you to accept, reject, or customise your cookie preferences.

6.1 Types of Cookies We Use

  • Strictly Necessary Cookies: essential for the website to function (e.g. security, session management). These cannot be disabled.
  • Functional Cookies: enable personalised features such as saved preferences and enhanced functionality.
  • Analytics Cookies: help us understand how visitors interact with our website (e.g. Google Analytics). These collect anonymised, aggregated data.
  • Marketing Cookies: used to deliver relevant advertisements and track campaign effectiveness. Currently we do not use marketing cookies, but we reserve the right to in the future with your consent.

6.2 Managing Cookies

You can change your cookie preferences at any time by clearing your browser cookies and revisiting the Site, which will re-trigger the cookie consent banner. You may also configure your browser to block or delete cookies, though this may affect Site functionality.

7. Data Retention

We retain personal information only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. Contact form submissions are retained for up to 24 months unless you request earlier deletion. Analytics data is retained in aggregated, anonymised form.

8. Your Rights

Under GDPR, POPIA, and other applicable legislation, you have the right to:

  • Access: request a copy of the personal data we hold about you
  • Rectification: request correction of inaccurate or incomplete data
  • Erasure: request deletion of your personal data ("right to be forgotten")
  • Restriction: request that we restrict processing of your data
  • Data Portability: receive your data in a structured, machine-readable format
  • Object: object to processing based on legitimate interests or for direct marketing
  • Withdraw Consent: withdraw consent at any time where processing is based on consent

To exercise any of these rights, please contact us using the details in Section 11. We will respond within 30 days.

9. Data Security

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. Our Site uses HTTPS encryption for all data in transit. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

10. Children's Privacy

Our Site and services are not directed at individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have inadvertently collected data from a child, we will take steps to delete it promptly.

11. Contact & Complaints

If you have questions about this Privacy Policy, wish to exercise your data rights, or have a complaint about how we handle your personal information, please contact us:

OSandMac (PTY) Ltd

Cape Town, South Africa

Please use our contact form to get in touch regarding privacy matters.

You also have the right to lodge a complaint with the Information Regulator (South Africa) or your local data protection authority if you believe your rights have been infringed.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. Any changes will be posted on this page with an updated "Last updated" date. We encourage you to review this policy periodically.