Privacy Policy

1. Who we are

Shantui South Africa (Pty) Ltd ("Shantui SA", "we", "us") is a company registered in the Republic of South Africa, registration number 2019/442017/07, with its head office at 21 Saxenburg Rd, Blackheath, 7580
Cape Town, South Africa, Boksburg, 1459, Gauteng. We are the responsible party for the personal information described in this policy.

Our Information Officer, appointed in terms of section 56 of POPIA, may be contacted at sales@itrix.co.za or on +27 (0) 21 905 1833.

2. What personal information we collect

2.1 Information you give us

• Identifying information: name, job title and the company you represent.
• Contact details: e-mail address, telephone number, physical or site address and province.
• Enquiry content: machine models, serial numbers, site details and anything else you choose to tell us.
• Commercial information: quotations, orders, credit application data and payment records where you transact with us.

2.2 Information collected automatically

• Technical data: IP address, browser type and version, device type, operating system and screen size.
• Usage data: pages visited, time on page, referring website and interactions with the site.
• Cookie data, as described in section 8 below.

2.3 Machine telematics

Where you operate a machine fitted with ShanCare telematics, the system records machine data such as location, engine hours, fuel consumption, idle time and fault codes. This is primarily equipment data rather than personal information, but it may be linked to an operator in some configurations. We process it to support the machine, administer warranty and provide the reporting you have asked for.

3. Why we process your information

• To respond to enquiries, prepare quotations and provide the information you have requested.
• To supply machines, parts, service and training, and to administer the resulting contracts.
• To administer warranty claims and provide technical support.
• To process credit applications and manage accounts, subject to your separate consent where required.
• To send you product, parts and training updates where you have subscribed. You may unsubscribe at any time.
• To improve this website, our products and our service levels.
• To comply with legal, tax, health and safety and regulatory obligations.
• To detect, prevent and address fraud, abuse and security incidents.

4. Lawful basis for processing

We process personal information on one or more of the following bases recognised in section 11 of POPIA:

• Consent. For example, where you tick the consent box on our enquiry form or subscribe to our mailing list.
• Necessary for a contract. To supply and support the machines, parts and services you buy.
• Legal obligation. Where retention or disclosure is required by law.
• Legitimate interests. For the proper conduct of our business, balanced against your rights and expectations.

5. Who we share your information with

We do not sell your personal information. We share it only where necessary, and only with parties bound by confidentiality and data-protection obligations:

• Operators who process information on our behalf: hosting, e-mail delivery, CRM and courier providers.
• Shantui Construction Machinery Co., Ltd. and its regional offices, for warranty administration and technical escalation.
• Finance partners, where you have asked us to arrange finance or rental.
• Professional advisers, auditors and insurers, under obligations of confidentiality.
• Law enforcement or regulators, where we are legally required to disclose.

Where information is transferred outside South Africa, for example to the manufacturer for a warranty claim, we do so in accordance with section 72 of POPIA and ensure adequate protection is in place.

6. How we protect your information

• All traffic to and from this website is encrypted using HTTPS/TLS, and HTTP requests are redirected to HTTPS.
• Access to systems containing personal information is restricted on a least-privilege basis and protected by multi-factor authentication.
• Our enquiry forms use honeypot, timing and challenge-based spam protection, and submissions are rate-limited.
• We maintain backups, patching routines and an incident response process.
• In the event of a compromise, we will notify the Information Regulator and affected data subjects as required by section 22 of POPIA.

7. How long we keep it

We retain personal information only for as long as it is needed for the purpose it was collected, or as required by law. As a general guide:

• Unsuccessful enquiries: 24 months from last contact.
• Customer and transaction records: at least 5 years, in line with tax and companies legislation.
• Machine service and warranty history: for the life of the machine, which supports resale value and safety.
• Marketing subscriptions: until you unsubscribe, plus a suppression record so we do not contact you again in error.

8. Cookies and similar technologies

This website uses a small number of cookies and browser storage entries:

• Strictly necessary. Remembering your cookie choice and your light or dark theme preference. These cannot be disabled without breaking the site.
• Analytics (optional). Aggregated, non-identifying statistics about how the site is used, so we can improve it. These are only set if you accept them.

You can accept or decline optional cookies using the banner shown on your first visit, and you can clear your choice at any time through your browser settings. Declining optional cookies does not restrict your access to any part of this site.

9. Your rights

Under POPIA you have the right to:

• Be told what personal information we hold about you, and to request a copy of it.
• Ask us to correct information that is inaccurate, irrelevant, excessive, out of date or misleading.
• Ask us to delete or destroy information we no longer have a lawful basis to keep.
• Object to processing based on legitimate interests, on reasonable grounds.
• Withdraw consent at any time, without affecting processing already carried out lawfully.
• Unsubscribe from direct marketing at any time, free of charge.
• Lodge a complaint with the Information Regulator.

To exercise any of these rights, e-mail sales@itrix.co.za. We will respond within 30 days. We may ask you to verify your identity before acting on a request.

10. Contact and complaints

If you are unhappy with how we have handled your personal information, please contact our Information Officer first so that we have an opportunity to put it right:

Information Officer, Shantui South Africa (Pty) Ltd
21 Saxenburg Rd, Blackheath, 7580
Cape Town, South Africa, Boksburg, 1459, Gauteng
sales@itrix.co.za · +27 (0) 21 905 1833

You also have the right to complain directly to the Information Regulator of South Africa:

Information Regulator (South Africa)
JD House, 27 Stiemens Street, Braamfontein, Johannesburg, 2001
complaints.IR@justice.gov.za

---

This policy may be updated from time to time. Material changes will be highlighted on this page and the "last updated" date above will change. This document has been prepared as part of a demonstration website and should be reviewed by your legal adviser before publication.