This website privacy policy describes how we process information we collect and/or receive from you.


We collect and receive information about you in the following ways:

  • Information you give us

This includes any information that you provide to us directly:

  • when you sign-up to utilise our services;
  • by filling in forms on our websites, or those provided to you;
  • when you enter a competition, promotion, donations or complete a survey;
  • by posting comments or content on our social media pages; or
  • when you contact us or we contact you and you provide information directly to us.
  • What personal information we collect
    • When you register to use our services, you could be required to provide us with the following information, your –
      • name and surname;
      • contact number and email address;
      • physical address;
      • identity or passport number; and
      • date of birth.
    • Information we collect or receive when you use our website or social media platforms

We collect information when you use websites or social media platforms by using cookies, web beacons and other technologies. Depending on how you access and use websites, we may receive:

  • Log information;
  • Information we infer about you based on your interaction with products and services;
  • Device information (for example the type of device you’re using, how you access platforms, your browser or operating system and your Internet Protocol (“IP”) address);
  • Location information.
  • Information from third-party sources

We may receive additional information about you that is publicly or commercially available and combine that with the information we have collected or received about you in other ways.


We use the information we collect and receive for the following general purposes:

  • to provide you with information, products or services you request from us;
  • in order to refer you to an appropriate third-party service provider;
  • to communicate with you;
  • to provide you with support; and
  • to provide effective advertising (for example to provide you with news, special offers and general information about other goods, services and events which we offer, that are similar to those that you have already hired or enquired about).
    • We don’t sell your personal information to third parties for their marketing purposes.
    • We may share information with:
      • our affiliates, in other words, other companies in our group;
      • we may disclose your personal information to a limited number of our employees and third party service providers (other than those who we refer you to), who we assist you to interact with;
      • our business partners. We may share non-personally identifiable information with select business partners;
      • other parties in response to legal process or when necessary to conduct or protect our legal rights;
      • companies that provide services to us. Companies that provide services to us or act on our behalf may have access to information about you.  These companies are limited in their ability to use information they receive in the course of providing services to us or you; and
      • third-parties where you provide consent. In some cases, third-parties (often advertisers) may wish to attain information about you in order to promote their products to you, or for whatever other reason.  We may share information with third-parties where you provide consent in the form of an explicit opt-in.  Before we ask you to opt-in, we will endeavour to provide you with a clear description of what data would be shared with the third-party.  Remember that once you have opted in to allow us to send your information to the third-party, we cannot control what they do with your data; therefore, be sure to investigate their privacy policies before providing permission for us to share your information.
    • You have the right to ask us not to contact you for marketing purposes. You can exercise this right at any time by using any of the various “opt-out” options that we will always provide to you when we communicate with you.  We won’t send you marketing messages if you tell us not to but we will still need to send you service-related messages.
    • Our websites use cookies. If you wish to reject our cookies, you can configure your browser to do so.
    • We want to make sure that any data we hold about you is up to date. So, if you think your personal information is inaccurate, you can ask us to correct or remove it.

We will retain your personal information only for as long as is necessary for the purposes set out in this privacy policy or to comply with our legal obligations, resolve disputes, and enforce our legal agreements and policies.


The security of your data is important to us. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security. However, we do employ a number of safeguards intended to mitigate the risk of unauthorized access or disclosure of your information. We will do our best to protect your personal information and we will use up to date technology that will help us to do this. We will at all times comply with our obligation under applicable law.

    • We are based in and operate from South Africa. Your information, including personal information, may be transferred to and maintained on servers located outside of your country of residence, where the data privacy laws, regulations and standards, may not be equivalent to the laws in your country of residence.
    • We might transfer your personal information to places outside of South Africa and store it there, where our suppliers might process it. If that happens, your personal information will only be transferred to and stored in a country that has equivalent, or better, data protection legislation than South Africa or with a service provider which is subject to an agreement requiring it to comply with data protection requirements equivalent or better than those applicable in South Africa.
    • Your use of our website, followed by your submission of information to us, represents your consent to such transfer.
    • We will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this privacy policy.

Our website or social media platforms may contain links to and from websites, mobile applications or services of third parties, advertisers or affiliates.  Please note that we are not responsible for the privacy practices of such other parties and advise you to read the privacy statements of each website you visit which collects personal information.


We may update this privacy policy from time to time.  Any changes that we may make to our privacy policy will be posted on our website and will be effective from the date of posting.

    • You may at any time request:
      • confirmation that we hold your personal information;
      • access to your personal information;
      • the identities or categories of third parties to whom we have disclosed your personal information; or
      • that we correct or delete any personal information that is incomplete, misleading, inaccurate, excessive or out of date.
    • Requests may be made in writing to

Photography Policy

  • “Photograph” and “video images” refer to any kind of image capture, still or moving, obtained by any photographic device including still image cameras, video cameras, webcams and photographic enabled mobile telephones, and any other type of image capture device not specified here, whether digital or not, using technology existent at this time or in the future. The processing (including storage) of such images includes film negative, film positive (e.g. transparencies and slides, movies, etc.), photographic paper, digital media, magnetic tape and any other kind of storage method able to be used for the storage of images, still or moving, available now or in the future;
  • “IO” means the Information Officer of Ferreiras (PTY) LTD  (Ferreiras) ; and
  • “POPIA” means the Protection of Personal Information Act 4 of 2013.

This Policy applies to Pepkor and its employees and representatives.

    • The purpose of this Policy is to set out general rules governing the capture and distribution of images and photographs of data subjects, and to give employees of Ferreiras as well as Ferreiras clients, visitors, suppliers and customers guidelines on how Ferreiras handles their photographic images. This Policy applies to activities on Ferreiras premises and (in certain circumstances) off-site events or trips.
    • Ferreiras is cognisant of the fact that there may be a potential risk to the welfare of data subjects when individual persons can be identified in photographs and/or video images. In order to minimise such risk, and to comply with the provisions of POPIA, Ferreiras has developed this Policy.
    • Photographs and/or video images of the employees of Ferreiras as well as Ferreiras clients, visitors, suppliers and customers are deemed special personal information in terms of POPIA. Therefore, the processing of such photographs and/or video images is subject to strict processing conditions and requires the consent (which may be in electronic format) of either the data subject concerned or in the case of minors, their legal guardian. In addition, and in line with the conditions for lawful processing of personal information set out in Chapter 3 of POPIA, the IO and/or anyone mandated by him/her to process personal information must make sure the information is:
      • used fairly and lawfully;
      • used for its limited, specifically stated purposes;
      • used in a way that is adequate, relevant and not excessive;
      • accurate;
      • kept for no longer than is absolutely necessary;
      • handled according to people’s data protection rights;
      • kept safe and secure; and
      • not transferred to a third party outside South Africa without consent from the data subject and adequate data protection provisions from the third party.
    • This Policy is part of Ferreiras strategy for safeguarding the rights of data subjects within our care and should be read in conjunction with our CCTV Monitoring Policy.
    • Data Processing and handling

Every reasonable effort must be made by Ferreiras to minimise risk of inappropriate capture and distribution of photographs and video images. This includes:

  • securing consent for the use of photographs and/or video images of the data subjects;
  • ensuring that data subject names are not used alongside images in publically-available material without consent;
  • not using photographs and/or video images of any data subject who is subject to a court order;
  • storing photographs and/or video images securely and ensuring such images are accessible only by those so authorised;
  • storing photographs and/or video images securely (whether physical or digital) with appropriate access controls; and
  • ensuring staff of Ferreiras are appropriately informed about this Policy.
  • Photography and image capture within Ferreiras
    • Photographs and/or video images of data subjects may be captured as part of operational, security and other processes. Ferreiras staff must not take or transmit any recording of data subjects acting in any official capacity at, or representing Ferreiras in any manner, on any personal device, without the IO’s consent.
    • Furthermore, Ferreiras employees should also be aware that taking photographs of colleagues using personal devices should only happen with the permission of the member of staff in question.
    • Images of Ferreiras employees, clients, visitors, suppliers and customers must not be displayed on websites, in publications or in a public place, and in particular on social media platforms, such as Facebook and Instagram, without specific consent. The definition of a public place includes areas where visitors to Ferreiras have access.
  • Photography and image capture by others

As a general rule no client, visitor, supplier or customer of Ferreiras is permitted to use a camera (including a mobile phone’s camera facility) whilst on Ferreiras premises. In addition, Ferreiras  strongly advises against the publication of any photographs and/or video images on the internet (i.e. on social media), and we will request the removal of any such material if deemed illegal, harmful or inappropriate by Ferreiras in any way.

  • Monitoring

It is the responsibility of IO and/or anyone mandated by him/her to support and monitor this Policy. Any concerns should be brought to the attention of the IO.


It is essential that all staff of Ferreiras comply with all relevant parts of this Policy. Any failure to comply with this Policy could have serious consequences for Ferreiras and its employees. Failure to comply may lead to: disciplinary action, including summary dismissal (without notice or a payment in lieu of notice) for serious or repeated breaches; civil or criminal proceedings; and/or personal liability for those responsible.


This Policy has been reviewed and approved by the IO, and is subject to change without prior notice.