Privacy Policy

Wipcorp ("Wipcorp", "we", "our", or "us") is committed to protecting the privacy and personal information of our clients, contractors, suppliers, employees, consultants, and website users.

This Privacy Policy explains how we collect, use, store, disclose, and protect personal information when you use the Wipcorp Project Management Website ("Website") and related services.

This Policy has been developed in accordance with the Protection of Personal Information Act, 2013 (Act No. 4 of 2013) ("POPIA") and, where applicable, other relevant South African legislation.

By accessing or using our Website, you acknowledge that you have read and understood this Privacy Policy.

This Privacy Policy applies to:

• Website visitors
• Registered users
• Clients
• Contractors
• Consultants
• Suppliers
• Employees using the platform
• Prospective clients
• Service providers interacting with Wipcorp

The Responsible Party for purposes of POPIA is:

Wipcorp

• Email: hr@wipcorp.co.za
• Telephone: 082 899 8448 / 010 312 5128
• Website: www.wipcorp.co.za
• Physical Address: Kempton Park, Gauteng, South Africa

Depending on the services you use, we may collect:

Information may be collected when you:

• Register an account
• Complete online forms
• Upload documents
• Communicate with us
• Participate in projects
• Use our Website
• Contact support
• Subscribe to communications
• Attend meetings or training sessions

Information may also be received from:

• Employers
• Clients
• Contractors
• Service providers
• Publicly available sources
• Regulatory authorities where permitted by law

We process personal information to:

• Manage projects
• Deliver our services
• Manage user accounts
• Verify identities
• Allocate work
• Monitor project progress
• Generate reports
• Maintain compliance records
• Meet contractual obligations
• Improve our services
• Respond to enquiries
• Protect Website security
• Meet legal obligations
• Prevent fraud
• Resolve disputes

We only process personal information where there is a lawful basis under POPIA.

Personal information is processed where:

• You have provided consent.
• Processing is necessary to perform a contract.
• Processing is required by law.
• Processing protects a legitimate interest.
• Processing is necessary to pursue Wipcorp's legitimate business interests, provided your rights are not unfairly affected.

Where required, Wipcorp may process special personal information permitted under POPIA, including information relating to:

• Occupational medical fitness (where legally required)
• Health and safety incidents
• Disability accommodations
• Emergency contact information

Such information is processed only where authorised by law, necessary for occupational health and safety compliance, employment obligations, insurance administration, or with explicit consent where required.

Personal information may be shared with:

• Clients
• Contractors
• Professional consultants
• Auditors
• Certification bodies
• Legal advisers
• Insurance providers
• Government authorities
• Regulatory bodies
• IT service providers
• Cloud hosting providers

Information is only shared where necessary and appropriate safeguards are in place.

Where personal information is transferred outside South Africa, Wipcorp will ensure that:

• the recipient provides an adequate level of data protection;
• appropriate contractual safeguards are implemented; or
• the transfer is otherwise permitted under POPIA.

Wipcorp implements appropriate technical and organisational measures to protect personal information against:

• Unauthorised access
• Accidental loss
• Unlawful destruction
• Alteration
• Disclosure
• Cyber threats

Security measures include:

• Encrypted communications (HTTPS/TLS)
• Password protection
• Role-based access controls
• Multi-factor authentication where available
• Firewall protection
• Secure cloud hosting
• Regular system updates
• Backup and disaster recovery processes
• Security monitoring and logging

While every reasonable effort is made to protect information, no electronic transmission or storage system can be guaranteed to be completely secure.

Personal information is retained only for as long as necessary to:

• fulfil the purpose for which it was collected;
• comply with legal or regulatory obligations;
• resolve disputes; or
• enforce contractual rights.

Once no longer required, information will be securely deleted, destroyed, or anonymised in accordance with Wipcorp's retention policies.

Subject to applicable law, you have the right to:

• Request access to your personal information.
• Request correction or updating of inaccurate information.
• Request deletion of information where appropriate.
• Object to certain forms of processing.
• Withdraw consent where processing is based on consent.
• Request restrictions on processing in certain circumstances.
• Lodge a complaint with the Information Regulator.

Requests may be subject to identity verification and any legal limitations.

Wipcorp will not send unsolicited direct electronic marketing communications without complying with POPIA.

Where marketing communications are sent, you may opt out at any time by following the unsubscribe instructions or contacting us directly.

Our Website uses cookies and similar technologies to:

• maintain secure sessions;
• improve Website functionality;
• remember user preferences;
• analyse Website usage; and
• enhance the user experience.

For more information, please refer to our separate Cookie Policy.

The Website may integrate with trusted third-party service providers, including cloud hosting, productivity platforms, mapping services, analytics providers, and digital communication tools.

These providers are required to maintain appropriate security and confidentiality measures when processing personal information on Wipcorp's behalf.

In the event of a personal information breach that poses a reasonable risk of harm, Wipcorp will:

• investigate the incident promptly;
• take reasonable steps to contain and mitigate the impact;
• notify affected individuals where required; and
• notify the Information Regulator where required under POPIA.

The Website is intended for business use and is not directed at children.

Wipcorp does not knowingly collect personal information from children unless authorised by law or with the consent of a competent person where required.

Wipcorp may update this Privacy Policy from time to time to reflect changes in legal requirements, business practices, or technology.

The latest version will always be published on the Website, and the "Last Updated" date will be revised accordingly.

Continued use of the Website after any changes constitutes acceptance of the updated Privacy Policy.

For questions about this Privacy Policy or the processing of your personal information, please contact:

Information Officer — Wipcorp

• Email: hr@wipcorp.co.za
• Telephone: 082 899 8448 / 010 312 5128
• Physical Address: Kempton Park, Gauteng, South Africa
• Website: www.wipcorp.co.za

If you believe that Wipcorp has not processed your personal information in accordance with POPIA, you may lodge a complaint with us using the contact details above.

You also have the right to lodge a complaint with the:

Information Regulator (South Africa)

• JD House, 27 Stiemens Street, Braamfontein, Johannesburg, 2001, South Africa
• General Enquiries: 010 023 5200
• Email: inforeg@justice.gov.za
• Website: https://inforegulator.org.za