Skip to content
Contact us Contact us Contact us

Privacy policy

INTRODUCTION

MicroStep SA (Pty) Ltd t/a FactorySmart (registration number 2014/272549/07) (“we”, “us” or “our”) is committed to protecting your privacy and handling your personal information in a safe and responsible manner in compliance with the Protection of Personal Information Act 4 of 2013 (“POPIA”). This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our website, place orders, apply for credit, or otherwise interact with us. Please read this privacy policy carefully.

This Privacy Policy must be read together with our Website Terms and Conditions and any other documents or agreements between FactorySmart and you (the “Agreements”). We reserve the right to amend this Privacy Policy at any time. Please refer to the “Last updated” date at the top of this document to identify the latest version.

Your continued use of the website and/or our goods and/or services constitutes your acceptance of this Privacy Policy.

SCOPE AND CONTACT

This Privacy Policy applies to all personal information processed by FactorySmart in South Africa, including information we collect offline, online, or via credit applications. If you have questions or concerns about this Privacy Policy, you may contact our information officer at privacy@factorysmart.co.za.

WHO WE COLLECT PERSONAL INFORMATION FROM

We may obtain your personal information directly from you, through cookies or similar technologies when you use our website, through third parties, or public sources (where permitted by applicable law).

INFORMATION WE COLLECT

We may collect, store, and use the following personal information in compliance with POPIA:

  • Personal Identification Information: name, surname, email address, postal and/or physical address, and telephone number.
  • Credit Application Information: income, expenses, credit history, and other information required to assess creditworthiness.
  • Technical Information: IP address, browser type and version, time zone setting, browser plug-in type and version, operating system, and platform.
  • Transaction Information: Details about payments made, products and/or services purchased, and order history.
  • Financial Information: bank details for payments or direct debits (where applicable), and information required to manage credit facilities.
  • Identifiers and Contact Preferences: tax references, preferred contact channels, and marketing preferences.
  • Customer Interactions: records of inquiries, service requests, complaints, and feedback.
  • Location Data: delivery location or geolocation data used for delivery optimization.
  • Device and Usage Data: device identifiers and usage data for fraud prevention and service improvement.

HOW WE USE YOUR PERSONAL INFORMATION

We use your personal information for the following purposes, and only to the extent necessary for each purpose:

  • To provide goods and/or services, process purchases, manage orders, and provide after-sales services.
  • To perform our obligations under any contracts we conclude with you, including without limitation, our General Terms and Conditions for the Supply of Goods and Services.
  • To process payments and manage financial transactions.
  • For identity verification, fraud prevention, and financial crime compliance.
  • To understand how our goods and/or services are used and how we can improve them.
  • To contact you by email, telephone calls, SMS, or other equivalent forms of electronic communication regarding updates or informative communications.
  • To provide customer service and support, including responding to inquiries and fulfilling requests.
  • To assess creditworthiness and determine credit limits and terms.
  • To comply with legal obligations and regulatory requirements.
  • To personalize experiences and marketing communications, where you have provided consent or where there is a legitimate interest with an on-out mechanism.
  • To fulfil or enforce agreements with you and to manage disputes.

SHARING YOUR INFORMATION

We do not sell, trade, or otherwise transfer your personal information. We may share your information in the following circumstances:

  • Service Providers: with any third-party service providers who assist us in conducting our business or servicing you, under written agreements that require them to protect your personal information.
  • Affiliates: with our affiliates, subject to ensuring they honour this Privacy Policy and privacy obligations.
  • Legal Requirements: as required by law or in response to valid requests by public authorities.
  • Business Transfers: in the event of a merger, acquisition, or sale of all or a portion of our assets, your information may be transferred.
  • With your consent: for any other purpose with your consent.

DIRECT MARKETING AND COMMUNICATIONS

You may opt out of promotional communications at any time by following the unsubscribe instructions or by contacting info@factorysmart.co.za. We will respect your marketing preferences and comply with applicable direct marketing laws. We will not use sensitive personal information for marketing purposes without explicit consent. If you have provided consent for marketing, you may withdraw it at any time.

INTERNATIONAL DATA TRANSFERS

We may transfer your information to countries outside of South Africa. We implement safeguards as required by POPIA and only transfer with appropriate legal basis or your consent where required. We will inform you where transfers occur and the safeguards we have in place.

SECURITY OF YOUR PERSONAL INFORMATION

We implement appropriate administrative, technical, and physical safeguards to protect your personal information in line with POPIA and best practice, including:

  • Access controls and role-based access.
  • Encryption of data in transit.
  • Regular vulnerability assessments and security monitoring.
  • Secure storage and incident response procedures.
  • Contracts with service providers containing data protection terms.

While no method of transmission or storage is completely secure, we apply reasonably safeguards. In the event of data breach, we will notify affected individuals and the Information Regulator as required by POPIA, within statutory timelines.

COOKIES AND TRACKING TECHNOLOGIES

We may use cookies and similar technologies to enhance your experience, analyze usage, and for marketing purposes. Cookies may be essential (strictly necessary) or non-essential (functional, analytical, marketing). We use cookies to improve site functionality, analyze usage, and tailor marketing. You can manage cookies through your browser settings. We may work with any third-party analytics and advertising providers.

LINKS TO OTHER WEBSITES

Our website may contain links to other websites. This Privacy Policy applies only to our website. If you click on a link to another website, you should read their privacy policy. We are not responsible for their data practices.

YOUR RIGHTS UNDER POPIA

You have the following data protection rights, which you can exercise by contacting us using the details set out under clause 15:

  • Access: you can request copies of your personal information.
  • Rectification: you can request that we correct any information you believe is inaccurate.
  • Erasure: you can request that we erase your personal information under certain conditions ((e.g., when processing is no longer necessary or consent is withdrawn, subject to legal obligations).
  • Restrict Processing: you can request that we restrict the processing of your personal information under certain conditions.
  • Object to Processing: you can object to our processing of your personal information (including direct marketing).
  • Withdraw Consent: you can withdraw your consent to our processing of your personal information at any time (where processing is based on consent). Note that withdrawing your consent may affect our ability to provide certain goods or services.
  • Data Portability: you may request to obtain your personal information in a structured, commonly used format where applicable (if so required by POPIA).

DATA RETENTION

We will keep your personal information for as long as reasonably necessary for the purposes described in this Privacy Policy, to comply with legal obligations, resolve disputes, and enforce our agreements. Retention periods are based on:

  • The duration of your relationship with us.
  • The purpose of collection and use.
  • Legal, regulatory, tax, and accounting requirements.
  • Your right to access, rectify, erase or object to processing where applicable.

CHILDREN’S PRIVACY

Our services are not directed to children under 18. We do not knowingly collect personal information from children. If we do become aware of such data, we will delete it and take steps to confirm the age of users where required.

QUERIES

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact: