PRIVACY POLICY

Table of Contents

1. Introduction

Flex Space Managed Services (Pty) Ltd trading as Connect Space (“Connect Space”) acknowledges and supports consumer rights and the right to privacy. We will ensure that personal information (“information”) is collected and handled in a transparent and lawful manner in alignment with the Protection of Personal Information Act, 2013 (“POPIA”).
It is important that you read this Statement carefully before submitting any information to us:

By submitting any information, you provide consent to the processing of your personal information as set out in this Statement.

The provisions of this Statement are subject to mandatory, unalterable provisions of applicable laws;

Please do not submit any information if you do not agree to any of the provisions of this Statement. If you do not consent to the provisions of this Statement, or parts of the Statement, we may not be able to provide our products and/or services to you.

We respect privacy, we promise:

To implement reasonable computer (logical), physical and procedural (process) safeguards to protect the security and confidentiality of the information we collect

To limit the information collected to the minimum required to provide a better service and/or product or meet our other goals

To permit only properly trained, authorised employees to access information

Not to disclose your information to external parties unless we are required or permitted by law to do so, and authorised by our Information Officer.

1.1 Purpose

CONNECT SPACE offer a wide range of products and services, including but not limited to serviced office management services.

sets out the types of information that we collect;

explains how and why we collect and use your information;

explains whom we share your information with;

explains how to contact us or the relevant authorities.

Some parts of our business may need to collect and use personal information to provide you with their products and services. In most cases they will refer to this Statement or our PAIA and POPIA statement, but you must also read their specific terms and conditions. CONNECT SPACE websites or mobile apps may contain links to websites operated by other organisations that have their own privacy policies. Please make sure you read their terms and conditions and privacy policies carefully before providing any personal information on other websites as we do not accept any responsibility or liability for other organisations.

1.2 Scope

In this Statement, “CONNECT SPACE”, “us”, “our” or “we” refers to CONNECT SPACE and/or any of its wholly owned subsidiaries operating in South Africa.

1.3 Legislation and Regulations

This Statement is subject to the laws of the Republic of South Africa in particular POPIA and the Consumer Protection Act, 2008 (“CPA”) as well as other relevant data protection legislation. Any dispute arising will, to the extent permitted by law, first attempted to be settled internally and if this is not possible be referred to arbitration in Durban at a venue to be determined by us applying the Uniform Rules of the High Court of South Africa. In the interests of compliance with the Promotion of Access to Information Act, 2000, you may request our PAIA manual by emailing: info@connectspace.co.za

1.4 Roles and Responsibilities

Based on POPIA, the following role players are relevant to this Statement:

ROLE

RESPONSIBILITY

Information Regulator

The Information Regulator Office duties includes providing education, monitor and enforce compliance, handle complaints and facilitate cross-border cooperation in the enforcement of privacy laws.

In the context of this Statement this is the office of individuals appointed by the President of South Africa in terms of POPIA.

Information Officer

The individual who is the head of or CEO of CONNECT SPACE who is registered with the Information Regulator in terms of the PAIA and POPIA and is responsible for ensuring that CONNECT SPACE comply with the Acts.

Deputy Information Officer/s

The individual/s who is/are registered with the Information Regulator in terms of the PAIA and POPIA and have been delegated responsibilities in driving required activities on behalf of the Information Officer.

In the context of this statement these are the participates of the Privacy and Security Committee.

Data subject

Any natural or juristic person whose identifiable by means fovea an identifier such as a name, an ID number, location data, or via factors specific to the person's physical, physiological, genetic, mental, economic, cultural or social identity

In the context of this Statement this is the person (aka consumer or customer) whose information is being processed by CONNECT SPACE

Operator or Processing Party

The party who processes (collect, receive, record, collate, store, anonymise, retrieve, alter, use, distribute, erase or delete) information for a responsible party in terms of a contractual agreement or mandate on behalf of a Responsible Party

In the context of this Statement this is either CONNECT SPACE or a business partner.

2. Information Collection

To register or make use of our products and/or services you are required to provide us with various forms of personal information as defined in POPIA, including but not limited to your South African ID number or passport number (for non-South African citizens), name, surname, contact information and other personal details.

You may provide personal information to us either directly or indirectly (through a person acting on your behalf), by completing an application form for our products and services or requesting further information about our products and services, whether in writing, through our website, over the telephone or any other means.

We only collect information that is reasonably necessary for our business functions and activities and related purposes. The type of information we collect and hold, will depend on the purpose for which it is collected and used. Where possible, we will inform you what information you are required to provide to us and what information is optional. The information we process is typically to provide you with the goods and services you want to buy and help you with any orders and refunds you may ask for, to manage and improve our day-to-day operations, to manage and improve our loyalty program, websites and mobile platforms with the aim of improving your customer experience.

We may also collect your personal information from a person acting on your behalf, any regulator, or other third party that may hold such information.

You agree to give accurate and current information about yourself to CONNECT SPACE and to maintain and update such information when necessary. To improve the accuracy of our data and get to know our customers better, we may enrich it from other third parties, including credit bureaus.

2.1 Services in Collaboration with business partners

CONNECT SPACE have various partnerships and we also provide various goods and services. To deliver these goods and services, varying levels of information are required to be processed, including obtained from or shared with relevant external business partners (local and/or abroad) to verify against, or facilitate the goods or services offered by the business partner. When you agree to the CONNECT SPACE and/or business partner’s terms and conditions, it allows us to share the relevant information to facilitate the product or service being rendered to you.

Note that for some of our products may require you to provide additional information directly to a business partner of ours. In such instance, CONNECT SPACE process this information on the business partner’s behalf and as such the relevant business partner remains responsible for protecting this information, not CONNECT SPACE. When signing up with one of our business partners, it is important for you to recognise that you are establishing a direct, binding relationship with such a partner under their terms & conditions and related privacy policies and that they would be the responsible party under POPIA.

2.2 Persons under 18 years

CONNECT SPACE will not knowingly collect any information of persons (minors) under the age of 18 years. Our website and mobile apps, products and services are all directed to people who are at least 18 years old or older.

If you are under the age of 18 years, you must not provide any information to CONNECT SPACE without the consent of your parent or guardian. If you become aware that a “child” has provided their personal information without parental consent, please contact us immediately. If we become aware that a child has provided us with personal information without parental consent, we will take steps to remove the data and cancel the child's account.

2.3 Cookies

A cookie is a piece of information that is deposited in your computer’s hard drive by your web browser when you use our computer server. Most web browsers accept cookies automatically, but you can alter your settings to prevent automatic acceptance. This information might be about you, your preferences or your device and is mostly used to make the site work as you expect it to. The information does not usually directly identify you, but it can give you a more personalised web experience. If you choose not to accept cookies, this may disable some features of our website. Our website also uses push notifications. For further information, please see our Cookies Policy.

2.4 Embedded Scripts

An embedded script is a programming code that is designed to collect information about your interactions with the CONNECT SPACE website. The code is temporarily downloaded onto your device from our web server or a third-party service provider, is active only while you are connected to our website and is deactivated or deleted thereafter.

2.5 Mobile Device Identifiers

Certain mobile service providers uniquely identify mobile devices. CONNECT SPACE or our third-party service providers may receive such device information if you access our website or mobile applications through your mobile device when allowing cookies or push notifications. For further information, please see our Mobile Application Policy and Cookies Policy

3. Purpose and Use of Information

CONNECT SPACE use your information for the purposes for which it was collected or agreed with you to facilitate the provision of our products and services to you, and for purposes which are within reasonable expectations and where permitted by law.

Examples of information collected from you or other sources and processed by CONNECT SPACE are detailed below (which is not an exhaustive list) and linked to the purpose thereof.

ID number / passport number (which you consent we may collect from credit bureaus and/or other aggregators) - to identify you as a unique person on our database as for us to validate who you are when you want to change your profile details or resolve queries related to your account.

Regulatory compliance – to adhere to but not limited to the Consumer Protection Act (CPA), Anti-Money Laundering and/or Counter Terrorism Financing rules and regulations and the Regulation of Interception of Communications and Provision of Communication-Related Information Act (RICA).

Biometric information – for security purposes to control access to premises.

Other unique information – we may collect unique identifiers such as user IDs and passwords, product functionality, product and service preferences, contact preferences, educational and employment history.

Other unique information – we may collect unique identifiers such as user IDs and passwords, product functionality, product and service preferences, contact preferences, educational and employment history.

Contact information - to facilitate essential support via communications as well as better customise our offering to you, including:

In support of facilitating required activities for services and programs you have chosen to participate in i.e.: invoices, statements, deliveries, etc;

Send information regarding services and programs via direct marketing i.e. new benefits, clubs or partners as well as inform you of promotions or deals;

Send information regarding services and programs via direct marketing i.e. new benefits, clubs or partners as well as inform you of promotions or deals;

Send or serve you targeted advertising across social media, other digital media platforms and physical post;

Contact you where you may have won a competition / draw that you have entered;

Send information regarding services and programs via direct marketing i.e. new benefits, clubs or partners as well as inform you of promotions or deals;

Request your feedback and opinion in the form of surveys, opinion polls or focus groups, should you wish to participate;

Contact you in relation to Customer Careline feedback, custom complaints or other feedback you wish to give us where you agree to us contacting you.

Any additional information relating to you that you provide to us directly through the website, mobile apps or indirectly through use of thereof, offline or online, through our representatives or otherwise.

About your computer – collect statistical data such as IP address, operating system and browser type including browser actions and patterns to present content in the most effective manner.

Inform segmentation or analysis based on your transaction history for use by our internal commercial team as well as vendors / suppliers and business partners to serve relevant content or offers. We may do this for use and disclosure of the de-identified or pseudonymised information to determine preferences and shopping patterns.

We may also disclose detailed information with our business partners to assist them in marketing products and services as governed by this Statement and the related service’s specific terms and conditions as well as the business partner’s Privacy Policy, Notice or Statements.

Share information with 3rd (third) parties as an outsourced function, with the purpose of communicating to you and/or facilitate (operate) the subscribed service(s).

SOURCE

PURPOSE

DATA SUBJECT INFORMATION

Emails / SMSes

Facilitate required communications such as invoices, statements and personalised discounts linked to the goods and/or services you are using.

Send you communications regarding the goods and/or services we are providing to you where you have not opted out of marketing communications via your preferences.

• First Name and Surname
• Email address
• Contact Numbers
• Account number
• Company Name

Products and/or services rendered by either CONNECT SPACE and/or business partners

Process an application for goods and/or services.

Create a uniquely identifiable customer record.

Provision the relevant services as set out in the respective Terms & Conditions for the relevant Products and/or Services subscribed to by the Data Subject.

Process payments.

Regular communication.

Provide individually customised promotions and discounts.

• First Name and Surname
• Email address
• Contact Numbers
• Company name
• ID or Passport Number
• Gender
• Date of Birth
• Physical Address
• Communication Preferences
• Language Preferences
• Related Basket Data
• Banking details

Websites: CONNECT SPACE and/or business partners

Information is collected using cookies and/or embedded scripts within the website.

When information is shared with our advertisers, it is anonymous and not personally identifiable i.e. it doesn’t contain your name, address, telephone number or email address.

Computer device information (whether you are a registered and unregistered user) such as:
• type of Internet browser software,
• the operating system on your device,
• the website that referred you,
• your Internet Protocol address,
• the country and telephone code where your device is located,
• the web pages viewed during your visit,
• the advertisements you clicked on, and
• any search terms you entered on our website (user information).

Website CONNECT SPACE

Information is collected when enabling push notifications.

When information is shared with third parties, it is anonymous and not personally identifiable i.e. it doesn’t contain your name, address, telephone number or email address

• Third party push notification access token
• platform
• creation date
• O/S version
• device brand
• device model
• language
• country
• time zone
• currency
• carrier
• last open date & time
• last visit and state on website
• geolocation data

We may also use your information for the following reasons:

complying with statutory and regulatory requirements in respect of the storage and maintenance of documents and information;

complying with valid requests for information, including subject access requests and requests in terms of PAIA;

complying with information requests by regulators or bodies lawfully requesting the information (e.g. tax authorities);

providing customer service and assessing customer complaints;

assisting in law enforcement, fraud investigations, anti-money laundering and counter-terrorist financing initiatives;

providing you with the services, products or offerings you have requested, and notifying you about important changes to these services, products or offerings;

managing your account or relationship and complying with your instructions or requests;

detecting and preventing fraud and money laundering and/or in the interest of security and crime prevention;

operational, marketing, auditing, legal and record keeping requirements;

transferring or processing your personal information outside of the Republic of South Africa to such countries that may not offer the same level of data protection as the Republic of South Africa, including for cloud storage purposes and the use of any of our websites;

complying with applicable laws;

recording and/or monitoring your telephone calls and electronic communications to/with CONNECT SPACE in order to accurately carry out your instructions and requests, to use as evidence and in the interests of crime prevention;

conducting market research and providing you with information about CONNECT SPACE’s products or services from time to time via email, telephone or other means (for example, events);

where you have unsubscribed from certain direct marketing communications, ensuring that we do not sent such direct marketing to you again;

disclosing your personal information to third parties for reasons set out in this Statement or where it is not unlawful to do so;

monitoring, keeping record of and having access to all forms of correspondence or communications received by or sent from CONNECT SPACE or any of its employees, agents or contractors, including monitoring, recording and using as evidence all telephone communications between you and CONNECT SPACE;

improving or evaluating the effectiveness of CONNECT SPACEs business or products, services or offerings;

conducting internal investigations; and

prevention and control of any disease.

4. Direct Marketing and Opting Out

If you are an existing customer, we may communicate with you based on the preferences as selected by you in relation to products or services you have signed up for. This may include making contact via telephone, email, sms, social media and other channels about products and or services which may be if interest to you. If you are not considered to be a customer, we will obtain your consent to opt-in to direct marketing.

You may opt-out (free of charge) from receiving future promotional information or direct marketing from CONNECT SPACE by either unsubscribing to the specific communications you receive by sending an email to: info@connectspace.co.za

5. Retention and Destruction of Information

Information that CONNECT SPACE collects is kept in a form which permits your identification for no longer than is necessary to honour your choices, to fulfil the purposes for which it was collected and processed in each specific case, and in any case not longer than as specified by the relevant applicable laws unless we have your consent to process it indefinitely.

CONNECT SPACE will retain your information after you have closed your account where reasonably necessary to comply with our legal obligations (including law enforcement requests), meet regulatory requirements, resolve disputes, maintain security, prevent fraud and abuse, enforce our agreement, or fulfil your request to “unsubscribe” from further messages from us.

We may retain de-identified, anonymised or pseudonymised information after your account has been closed using techniques that do not permit your re-identification. If none of the afore-mentioned scenarios are required, CONNECT SPACE will permanently delete (electronic) and shred (paper) after the purpose of collection the information has expired.

6. Information Preservation and Protection

CONNECT SPACE will take reasonable steps to protect the information we collect, hold and process from misuse, loss and from unauthorised access, modification or disclosure. We hold information both at our own premises and with the assistance of our service providers. This is based on the information security principles of Confidentiality, Integrity, Availability and Privacy (CIAP).

Because no data transmission over the internet is completely secure, and no IT system of physical or electronic security is impenetrable, we cannot guarantee the security of the information you send to us or the security of our servers or databases. Having noted that, we do take every reasonable step within our control, to protect your information and preserve the accuracy thereof. Quality of information means that the information we use must be appropriate, complete and reliable. The higher data quality we maintain, the better service we can render.

7. Information Disclosure

Notwithstanding anything to the contrary in this Statement, CONNECT SPACE reserve the right to disclose any information about you if we are required to do so by law, and if we believe that such action is necessary to: (a) fulfil a government request; (b) conform with the requirements of the law or legal process; (c) protect or defend our legal rights or property, our website, or other users; or (d) in an emergency to protect the health and safety of our website’s users or the general public.

Authorised CONNECT SPACE employees or agents will have access to some or all your information. We may also disclose your information within our group of companies. Such data sharing is governed by our CIAP information security principles and associated practices.

We do use service providers to provide our services and maintain our systems, including but not limited to maintenance, security, analysis, audit, payments, customer service, marketing and system development. These parties will have access to your information as reasonably necessary to perform these tasks on our behalf (namely role-based access). Where we contract with service providers, and wherever possible, we impose contractual obligations on them to ensure that your information is handled and secured in accordance with law and industry good practise.

Some of our service providers may be located in other countries that may not have the same levels of protection of information as South Africa. Wherever possible, we try to only use service providers that are located in countries with similar or more stringent levels of protection of information as South Africa. Alternatively, we require that service providers in less stringently regulated countries undertake to protect the information of our customers to the same level that we do.

Unless you have explicitly consented to this, we will never sell your personal information.

8. Your Right to Access Information

Depending on which product or service you (as the Data Subject) have signed up for, you can update some of your information via our digital channels. Alternatively, your information can be updated via our Customer Care Line. You have the right:

free of charge, to confirm with us whether we hold any information about you;

at a prescribed fee, which we will give you a written estimate of:

to update and correct any out-of-date or incorrect information we hold about you;

to request the record of information held by us.

to request a description of the information held by us, including information about the identity of all third parties, or categories of third parties, who have, or have had, access to the information.

destroy or delete a record of information of you which we are no longer authorised to retain; and

update your communication preferences and / or unsubscribe from communications we may send you.

Before we provide you with access to your information, we may require proof of identity. We may require up to 21 (twenty-one) days to respond to any requests for information. We may refuse to disclose some information in accordance with PAIA.

If you require CONNECT SPACE to delete all your information that we have about you, please email info@connectspace.co.za. Note that you will probably have to terminate all agreements you have with us, as we cannot maintain our relationship with you without at least having some of your information. We may also refuse to delete some of your information if we are required by law to retain it or if we need it to protect our rights.

9. Information Breach Notification

A security compromise or information breach can be described as a threat to the Confidentiality, Integrity, Availability or Privacy of IT systems and/or information. Such incidents are governed by the CONNECT SPACE Security Incident Response process which allows us to deal with the compromise/breach and/or loss in an efficient and effective manner. One of the key pillars of this process is keeping all impacted stakeholders informed and updated.

When there are reasonable grounds to believe that your information has been accessed, altered, deleted or acquired by any unauthorised person, we will notify the Information Regulator and yourself in cases where your identity can be established. This notification will be done in accordance with the provisions of POPIA and as soon as reasonably possible after the discovery of the compromise, considering the legitimate needs of law enforcement or any measures reasonably necessary to determine the scope of the compromise and to restore the integrity of our systems.

10. Amendment of this Statement

We may amend this Statement from time to time for any of the following reasons:

to provide for the introduction of new systems, methods of operation, services, products, property offerings or facilities;

to comply with changes to any legal or regulatory requirement;

to ensure that this Statement is clearer and more favourable to you;

to rectify any mistake that may be discovered from time to time; and/or

for any other reason which CONNECT SPACE, in its sole discretion, may deem reasonable or necessary.

Any such amendment will come into effect and become part of any agreement you have with CONNECT SPACE when Statement is given to you of the change by publication on our website. It is your responsibility to check the website often.

11. Contact Us

11.1 CONNECT SPACE Information Officer

If you have questions about this Privacy Statement or wish to exercise your rights in terms of access to, correction, or deletion of your information, please email us at info@connectspace.co.za. If unable to, and depending on your situation, we will explain the process to follow and potentially refer your query to internal subject matter experts.

Our Information Officer contact details are:

Information Officer / Deputy Information Officer
Address: 2nd Floor, 102 Stephen Dlamini Road, Musgrave, Durban, 400
Tel: +27 (0)31 576 0300
Email:  info@connectspace.co.za

11.2 Information Regulator (South Africa)

Should you believe that CONNECT SPACE has utilised information contrary to applicable law, you must undertake to first attempt to resolve any concerns with CONNECT SPACE. If you are not satisfied with such process, you have the right to lodge a complaint with the Information Regulator of South Africa.

The Information Regulator’s contact details are:

JD House, 27 Stiemens Street, Braamfontein, Johannesburg, 2001
P.O Box 31533, Braamfontein, Johannesburg, 2017
Email: inforeg@justice.gov.za
Website: https://www.justice.gov.za/inforeg/