Website Privacy Policy

1. Purpose

Arnot OpCo (Pty) Ltd ("Arnot", "the Company", "we", "our", or "us") is committed to protecting the privacy, confidentiality, integrity, and security of personal information entrusted to us. This Privacy Policy explains how personal information is collected, processed, stored, shared, retained, and protected when individuals access and use the Arnot website, apply for employment opportunities, register as suppliers, participate in tender processes, or otherwise interact with the Company through its digital platforms and online services.

Arnot OpCo (Pty) Ltd processes personal information in accordance with the Protection of Personal Information Act, 4 of 2013 (POPIA), and other applicable laws and regulations governing the protection of personal information in South Africa.

2. Scope

This Privacy Policy applies to:

Visitors accessing the Arnot website.

Individuals submitting enquiries through the Contact Us page.

Job applicants using the Careers Portal.

Suppliers, contractors, and service providers registering or participating in tender processes.

Users authorised to access administrative areas of the website.

Any individual whose personal information is collected through the website or related digital platforms.

3. Definitions

For the purposes of this Privacy Policy:

Personal Information means information relating to an identifiable, living natural person and, where applicable, an identifiable juristic person, including names, contact details, identification numbers, employment information, financial information, and online identifiers.

Data Subject means the individual or organisation to whom personal information relates.

Processing means any operation performed on personal information, including collection, recording, storage, updating, retrieval, use, sharing, retention, deletion, destruction, or disposal.

Operator means a third party that processes personal information on behalf of Arnot OpCo (Pty) Ltd.

Information Officer means the person appointed by Arnot OpCo (Pty) Ltd to oversee compliance with POPIA and privacy-related obligations.

Website means the official Arnot OpCo (Pty) Ltd website and associated online platforms.

4. Personal Information We Collect

Depending on how users interact with the website, Arnot may collect various categories of personal information.

4.1 Website Visitor Information

When users visit the website, certain information may be collected automatically, including:

Internet Protocol (IP) address.

Browser type and version.

Device and operating system information.

Pages visited.

Date and time of access.

Website navigation activity.

Session information.

Technical diagnostic information.

This information assists Arnot in maintaining website security, performance, and user experience.

4.2 Contact Us Information

Individuals submitting enquiries through the Contact Us page may provide:

Full name.

Email address.

Contact number.

Organisation name.

Subject matter of enquiry.

Any information voluntarily included in messages or attachments.

4.3 Career Application Information

Applicants using the Careers Portal may provide:

Full names and surnames.

Identity or passport information.

Contact details.

Residential information.

Curriculum Vitae (CV).

Qualifications and certifications.

Employment history.

Skills and competencies.

References.

Supporting documentation submitted during recruitment processes.

4.4 Employment Screening Information

Where necessary and legally permissible, Arnot may conduct employment-related verification and screening activities, including:

Qualification verification.

Reference checks.

Identity verification.

Employment history verification.

Criminal record checks.

Medical fitness assessments where required by mining legislation or occupational health and safety requirements.

Such processing will be conducted solely for legitimate recruitment and employment purposes.

4.5 Supplier and Tender Information

Suppliers and contractors participating in procurement activities may provide:

Company registration information.

Contact details.

Tax compliance documentation.

B-BBEE certificates.

Financial information.

Banking details.

Tender submissions.

Supporting compliance documentation.

4.6 Website Account Information

Authorised users accessing administrative areas of the website may provide:

Usernames.

Email addresses.

Password credentials.

Authentication information.

User activity logs.

5. Purpose of Processing Personal Information

Arnot processes personal information for legitimate business and operational purposes, including:

Responding to enquiries and requests.

Managing employment applications and recruitment processes.

Administering supplier registrations and procurement activities.

Evaluating tender submissions.

Communicating with stakeholders.

Providing website functionality and support services.

Protecting website security and integrity.

Detecting and preventing fraud, abuse, or malicious activity.

Meeting legal and regulatory obligations.

Improving website performance and user experience.

Managing business relationships and contractual obligations.

Personal information will only be processed for lawful, specific, and legitimate purposes.

6. Legal Basis for Processing

Arnot processes personal information on one or more of the following lawful grounds:

Consent provided by the data subject.

Performance of contractual obligations.

Compliance with legal and regulatory requirements.

Protection of legitimate business interests.

Recruitment and employment administration.

Procurement and supplier management activities.

Protection of the rights and interests of Arnot and its stakeholders.

7. Disclosure of Personal Information

Arnot may share personal information with authorised third parties where necessary to fulfil legitimate business purposes.

Such parties may include:

Internal employees with authorised access.

Recruitment service providers.

Background screening providers.

Technology and hosting service providers.

Professional advisors and consultants.

Auditors.

Legal representatives.

Government departments and regulatory authorities where required by law.

Arnot will not sell, rent, trade, or unlawfully disclose personal information to third parties.

Where third-party service providers process information on behalf of Arnot, appropriate contractual safeguards will be implemented to ensure compliance with applicable privacy obligations.

8. Information Security

Arnot is committed to implementing reasonable technical and organisational measures to protect personal information against loss, misuse, unauthorised access, disclosure, alteration, destruction, or damage.

Security measures may include:

Role-based access controls.

User authentication mechanisms.

Password management controls.

Multi-factor authentication where applicable.

Firewall and network security controls.

Secure hosting infrastructure.

Security monitoring and logging.

Incident detection and response procedures.

Regular security assessments and reviews.

While Arnot takes reasonable precautions to protect information, no electronic transmission or storage system can be guaranteed to be completely secure.

9. Retention of Personal Information

Personal information will only be retained for as long as necessary to fulfil the purposes for which it was collected or to satisfy legal, regulatory, contractual, or operational requirements.

Retention periods may vary depending on the nature of the information and applicable obligations.

Examples may include:

Recruitment records.

Tender and procurement documentation.

Supplier records.

Contact enquiries.

Security logs and audit records.

Regulatory compliance documentation.

Once retention requirements have been met, personal information will be securely deleted, destroyed, anonymised, or archived in accordance with applicable requirements.

10. Cookies and Tracking Technologies

The Arnot website may use cookies and similar technologies to:

Maintain website functionality.

Improve user experience.

Analyse website traffic and usage patterns.

Maintain secure user sessions.

Support website administration and security.

Users may manage cookie preferences through their browser settings. Disabling cookies may affect certain website functionality.

11. Data Subject Rights

Subject to applicable legal requirements, data subjects may have the right to:

Request access to personal information held by Arnot.

Request correction of inaccurate or incomplete information.

Request deletion of information where legally permissible.

Object to certain processing activities.

Withdraw consent where processing is based on consent.

Lodge complaints regarding privacy concerns.

Request information regarding the processing of personal information.

Requests will be handled in accordance with POPIA and applicable organisational procedures.

12. Third-Party Websites

The website may contain links to external websites operated by third parties. Arnot does not control and is not responsible for the privacy practices, security measures, or content of third-party websites.

Users are encouraged to review the privacy policies of external websites before providing personal information.

13. International Transfers

Where personal information is transferred outside South Africa, Arnot will ensure that appropriate safeguards are implemented and that such transfers comply with applicable legal and regulatory requirements.

14. Information Officer

In accordance with POPIA, Arnot OpCo (Pty) Ltd has appointed an Information Officer responsible for overseeing privacy and data protection compliance.

Questions, requests, complaints, or concerns relating to this Privacy Policy or the processing of personal information may be directed to:

Name of the Information Officer; Lizzy Moletsane

Position/Designation: Communication Specialist

Email Address: lizzy@arnotopco.com

Telephone Number: 0832563918

Company address: Farm Rietkuil 491 JS, Private Bag X3, Rietkuil, Mpumalanga, 1097

15. Changes to this Privacy Policy

Arnot reserves the right to amend, update, or revise this Privacy Policy from time to time to reflect changes in legislation, business operations, technology, or website functionality.

The latest version of this Privacy Policy will be published on the Arnot website.

16. Acceptance of this Privacy Policy

By accessing and using the Arnot OpCo (Pty) Ltd website, users acknowledge that they have read, understood, and accepted the terms of this Privacy Policy and consent to the processing of personal information as described herein, where applicable.

Document Control