POPIA privacy and enquiry handling

Penbro Kelnick is the responsible party for personal information submitted through this website's technical review and contact forms. Personal information is processed to respond to enquiries, prepare technical follow-up, discuss possible project requirements and keep an enquiry record where needed for normal business, quotation, support, legal or administrative purposes.

The information is collected for a specific and lawful purpose related to the enquiry submitted by the user. It is not sold and is not used for unrelated direct marketing.

Form submissions may include name, company, email address, telephone number, industry, project type, consent confirmation, message text and calculator-generated technical inputs or outputs that the user chooses to send for review.

Do not submit special personal information, confidential drawings, third-party customer information or controlled project documents unless the correct project confidentiality arrangements are already in place.

Enquiry information is used by the people who need it to respond to the technical request. It may be handled by service providers that support website hosting, email, security, administration or customer communication, where those services are needed for the enquiry workflow.

Website enquiry logs are retained for up to 6 months for follow-up, audit and abuse-prevention purposes. Where enquiry information is exported into Penbro Kelnick's normal quotation, proposal or project workflow, it becomes part of the business record and may be retained for 5 years, unless a longer period is required by law, contract, dispute handling or legitimate business need.

Access to enquiry records is limited to authorised Penbro Kelnick personnel and service providers who need the information for website operation, technical review, quotation, proposal preparation, support, administration or security.

Reasonable technical and organisational measures are used to protect enquiry information against loss, unauthorised access, unlawful processing, disclosure, alteration or destruction. No website or email workflow can be guaranteed to be completely secure, so sensitive project material should only be shared through an agreed project channel.

If a security compromise affecting personal information is identified, affected parties and the Information Regulator will be notified where required by POPIA.

Data subjects may ask whether personal information is held, request access to that information, request correction or deletion of inaccurate or unnecessary information, object to processing where POPIA allows it, and withdraw consent where processing is based on consent.

To raise a privacy request about information submitted through this website, use the details on the contact page. If the matter is not resolved, a complaint may be lodged with the Information Regulator South Africa.