Privacy policy

PRIVACY POLICY

African Containers Hub Pty Ltd
Trading as African Containers Hub

Effective Date: 9 September 2026
Website: africancontainershub.co.za⁠
Telephone: 031 256 3376
WhatsApp: 063 726 0423
Sales: sales@africancontainershub.co.za
Support: support@africancontainershub.co.za
Complaints & Privacy: complaints@africancontainershub.co.za
Operating / Facility Location: Ladysmith, KwaZulu-Natal, 3370, South Africa
Operating Coordinates: 28.54622° S, 29.80378° E

1. PURPOSE OF THIS PRIVACY POLICY

African Containers Hub Pty Ltd, trading as African Containers Hub (“African Containers Hub”, “ACH”, “we”, “us” or “our”), respects the privacy and protection of personal information belonging to customers, prospective customers, website visitors, suppliers, service providers and other individuals with whom we interact.

This Privacy Policy explains how we collect, use, disclose, retain and protect personal information when you:

• visit our website;
• request a quotation;
• enquire about a container or container-related service;
• communicate with us by telephone, WhatsApp, email or other electronic channels;
• place an order;
• make or arrange payment;
• request delivery or logistics services;
• use our website or online forms;
• communicate with our sales or support personnel; or
• otherwise interact with African Containers Hub.

This Policy is intended to operate in accordance with applicable South African law, including the Protection of Personal Information Act 4 of 2013 (“POPIA”), the Consumer Protection Act 68 of 2008 (“CPA”), the Electronic Communications and Transactions Act 25 of 2002 (“ECTA”), and other applicable legislation.

POPIA establishes minimum requirements for lawful processing of personal information and provides data subjects with rights concerning their personal information. 

2. WHO IS RESPONSIBLE FOR YOUR PERSONAL INFORMATION?

For purposes of POPIA, African Containers Hub Pty Ltd is the responsible party in respect of personal information that we process for our own business purposes.

Legal name: African Containers Hub Pty Ltd
Trading name: African Containers Hub

We determine the purposes and means for which customer and prospective-customer personal information is processed in connection with our business.

Where another company processes information on our behalf, that company may act as an operator or service provider, subject to applicable contractual and legal obligations.

3. INFORMATION WE MAY COLLECT

Depending on how you interact with us, we may collect the following categories of personal information.

3.1 Identification and contact information

This may include:

• name and surname;
• company or organisation name;
• email address;
• telephone number;
• WhatsApp number;
• physical or delivery address;
• billing address;
• postal address;
• country and province;
• contact preferences; and
• other information necessary to communicate with you.

3.2 Quotation and project information

When you request a quotation or customised container solution, we may collect:

• container type;
• container size;
• quantity;
• intended use;
• modification requirements;
• specifications;
• drawings or photographs supplied by you;
• site location;
• delivery destination;
• access information;
• offloading or positioning requirements;
• project timelines;
• budget information where voluntarily provided;
• installation requirements; and
• other information necessary to prepare or fulfil your quotation.

3.3 Order and transaction information

We may collect information relating to:

• products or services ordered;
• quotations;
• purchase orders;
• invoices;
• deposits;
• payments;
• refunds;
• cancellations;
• delivery arrangements;
• transaction references;
• communications concerning an order; and
• customer-service interactions.

3.4 Payment information

Payments may be processed through third-party payment providers.

Where payment is processed by a payment gateway such as Paystack, payment information may be collected and processed directly by that provider in accordance with its applicable terms, privacy policy and security procedures.

ACH does not intend to collect or store complete payment-card credentials where those credentials are processed directly by the applicable payment provider.

3.5 Communications

We may retain communications you send to us or that we send to you, including:

• emails;
• WhatsApp communications;
• telephone-related records where lawfully recorded or retained;
• quotation correspondence;
• customer-support communications;
• complaints;
• delivery communications;
• messages relating to orders or projects; and
• other correspondence relevant to our relationship with you.

3.6 Website and technical information

When you use our website, technical information may be collected automatically, including:

• IP address;
• browser type;
• device type;
• operating system;
• referring website;
• pages visited;
• approximate geographic information derived from technical data;
• interaction with website features;
• date and time of visits; and
• other technical or diagnostic information.

We use such information for website operation, security, analytics, performance, fraud prevention and service improvement, subject to applicable law.

4. HOW WE COLLECT PERSONAL INFORMATION

We may collect information:

1. directly from you;
2. when you complete a form;
3. when you request a quotation;
4. when you place an order;
5. when you contact us;
6. when you communicate through WhatsApp or other communication channels;
7. when you make a payment;
8. through our website and its technical systems;
9. from delivery or logistics information supplied for an order;
10. from authorised representatives acting on your behalf; and
11. from third parties where lawful and necessary for legitimate business purposes.

Where we receive personal information from another person or organisation rather than directly from you, we will process it in accordance with applicable law.

5. WHY WE PROCESS YOUR PERSONAL INFORMATION

We process personal information only for lawful and appropriate purposes.

These purposes may include:

5.1 Providing products and services

We process information to:

• respond to enquiries;
• prepare quotations;
• assess project requirements;
• supply containers;
• provide container modifications and conversions;
• arrange transportation;
• arrange delivery;
• coordinate positioning or offloading;
• administer orders; and
• provide customer support.

5.2 Contractual purposes

We may process information where necessary to:

• enter into a contract;
• perform a contract;
• administer an order;
• issue invoices;
• process payments;
• manage delivery;
• administer refunds or cancellations; and
• enforce or exercise contractual rights.

5.3 Business administration

We may use information to:

• maintain customer records;
• manage accounts;
• maintain quotation histories;
• communicate with customers;
• administer complaints;
• manage suppliers and contractors;
• maintain business records;
• conduct internal administration; and
• improve our processes.

5.4 Security and fraud prevention

We may process information to:

• protect our website;
• detect suspicious activity;
• prevent fraud;
• investigate security incidents;
• protect customers and our business;
• verify transactions; and
• comply with applicable security requirements.

5.5 Legal and regulatory obligations

We may process information where necessary to:

• comply with legislation;
• respond to lawful requests;
• comply with court orders;
• maintain records required by law;
• resolve disputes;
• establish, exercise or defend legal claims; and
• cooperate with competent regulatory authorities.

5.6 Marketing

Where permitted by law, we may use contact information to provide information about:

• containers;
• container solutions;
• new products;
• promotions;
• relevant services;
• quotations;
• business developments; and
• other ACH offerings.

Electronic direct marketing will be conducted in accordance with applicable law. POPIA generally restricts unsolicited electronic direct marketing unless the required consent or applicable customer exception exists. 

You may request that we stop sending direct marketing communications.

6. LAWFUL BASIS FOR PROCESSING

Depending on the circumstances, ACH may process personal information because:

• you have consented to the processing;
• processing is necessary to take steps at your request before entering into a contract;
• processing is necessary to perform a contract with you;
• processing is necessary to comply with a legal obligation;
• processing is necessary to protect a legitimate interest recognised by applicable law;
• processing is necessary to protect your legitimate interests or those of another person; or
• another lawful basis under POPIA or applicable law applies.

Consent, where required, will not be treated as unlimited permission to process personal information for unrelated purposes.

7. QUOTATIONS AND CUSTOM CONTAINER PROJECTS

Container projects often require information that would not ordinarily be required for a standard online purchase.

For example, we may need your:

• delivery destination;
• site address;
• site access information;
• intended use;
• dimensions;
• photographs;
• drawings;
• modification specifications;
• positioning requirements; or
• other project information.

We use this information to assess feasibility, calculate pricing, arrange transport and prepare an appropriate quotation.

We will not use project information for unrelated purposes merely because it was supplied to us for quotation purposes.

8. INFORMATION SHARED WITH SERVICE PROVIDERS

We may disclose or make personal information available to carefully selected third parties where reasonably necessary to operate our business.

These may include:

• website and ecommerce providers;
• payment processors;
• delivery and transport providers;
• contractors;
• installation or modification providers;
• hosting providers;
• customer relationship management systems;
• communication providers;
• email and messaging providers;
• analytics and security providers;
• professional advisers;
• accountants;
• auditors;
• legal advisers; and
• competent authorities where legally required.

Examples of technology platforms may include Shopify for ecommerce functionality and payment providers such as Paystack where selected by the customer or used for transaction processing.

Shopify provides technology supporting merchant stores, while the merchant remains responsible for its own customer transactions, refunds, returns and applicable legal compliance. 

Third-party service providers may process information outside South Africa. Where applicable, ACH will take reasonable steps to ensure that cross-border processing complies with POPIA and other applicable legal requirements.

9. PAYMENT INFORMATION

Where you pay through an external payment provider, your payment may be processed under that provider’s systems and security controls.

For example, Paystack may process payment information necessary to complete a transaction.

ACH will not request your payment-card PIN, online-banking password or other confidential banking credentials through ordinary customer communications.

You should never provide such credentials to a person claiming to represent ACH.

10. DELIVERY AND LOGISTICS INFORMATION

Where delivery is required, ACH may provide relevant customer information to transporters, drivers, logistics providers or other contractors where reasonably necessary to complete the delivery.

This may include:

• recipient name;
• telephone number;
• delivery address;
• site contact;
• access instructions;
• delivery date;
• container information;
• positioning requirements; and
• other information reasonably required for successful delivery.

We will limit information disclosed to what is reasonably necessary for the relevant logistics purpose.

11. WHATSAPP AND ELECTRONIC COMMUNICATIONS

If you contact ACH through WhatsApp, email, telephone, online forms or another communication platform, information contained in those communications may be processed to respond to you and administer your enquiry or transaction.

Third-party communication providers may process information according to their own terms and privacy practices.

You should avoid sending unnecessary sensitive personal information through ordinary messaging channels.

12. COOKIES AND SIMILAR TECHNOLOGIES

Our website may use cookies, pixels, tags, local storage and similar technologies.

These technologies may be used for purposes such as:

• website functionality;
• remembering preferences;
• maintaining shopping-cart functionality;
• security;
• analytics;
• measuring website performance;
• understanding website usage;
• improving customer experience; and
• marketing, where legally permitted.

Shopify provides merchants with privacy and customer-data controls, including tools for privacy settings, cookie notices and related controls. 

Where applicable law requires consent for particular cookies or tracking technologies, we will seek consent through the appropriate mechanism.

13. MARKETING AND COMMUNICATION PREFERENCES

We may communicate with customers about:

• quotations;
• orders;
• payments;
• delivery;
• customer support;
• complaints;
• account administration; and
• other transactional matters.

These communications are not necessarily marketing and may continue where necessary to fulfil a transaction or contractual obligation.

For promotional communications, you may request to opt out.

You may contact:

complaints@africancontainershub.co.za

with the subject “Marketing Opt-Out”.

We will process your request in accordance with applicable law.

14. SPECIAL PERSONAL INFORMATION

We do not ordinarily require special personal information as part of the normal purchase of shipping containers or container-related services.

If special personal information is voluntarily supplied or becomes necessary for a legitimate and lawful purpose, we will process it only where a lawful basis under POPIA exists.

We do not intentionally request sensitive information that is unnecessary for providing our products or services.

15. CHILDREN’S PERSONAL INFORMATION

Our products and services are directed primarily at businesses, organisations and adult customers.

We do not intentionally solicit personal information from children where such processing would be prohibited by POPIA or other applicable law.

If we become aware that personal information relating to a child has been collected unlawfully, we will take reasonable steps to address the situation in accordance with applicable law.

16. SECURITY OF PERSONAL INFORMATION

ACH takes reasonable technical and organisational measures to protect personal information against:

• loss;
• damage;
• unauthorised access;
• unauthorised disclosure;
• unauthorised alteration;
• destruction; and
• unlawful processing.

Security measures may include access controls, authentication, system permissions, secure service providers, monitoring, backups and appropriate administrative procedures.

No internet transmission or electronic storage system can be guaranteed to be completely secure.

You should therefore also take reasonable precautions when communicating or transacting online.

17. DATA BREACHES AND SECURITY INCIDENTS

If ACH becomes aware of a security compromise involving personal information, we will assess the incident and take reasonable steps required by applicable law.

Where POPIA requires notification to affected data subjects or the Information Regulator, ACH will make the required notification in accordance with the applicable legal requirements.

18. RETENTION OF PERSONAL INFORMATION

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected or as required or permitted by applicable law.

Retention periods may depend on:

• the nature of the information;
• whether you have an active customer relationship;
• whether an order or quotation remains relevant;
• accounting and tax requirements;
• contractual obligations;
• dispute-resolution requirements;
• legal claims;
• regulatory requirements; and
• security or fraud-prevention requirements.

When information is no longer reasonably required, we may securely delete, destroy, anonymise or de-identify it, subject to applicable retention obligations.

19. DATA SUBJECT RIGHTS

Subject to the limitations and conditions imposed by POPIA and other applicable law, you may have rights to:

• request access to personal information held about you;
• request correction of inaccurate or incomplete information;
• request deletion of information where legally applicable;
• object to certain processing;
• object to direct marketing;
• request limitation or restriction of processing where legally applicable;
• withdraw consent where processing is based on consent;
• lodge a complaint concerning the processing of your personal information; and
• exercise other rights provided by applicable law.

These rights are not absolute. Certain requests may be refused or limited where permitted or required by law.

20. REQUESTING ACCESS TO YOUR INFORMATION

To make a privacy or data-subject request, contact:

Email: complaints@africancontainershub.co.za
Telephone: 031 256 3376
WhatsApp: 063 726 0423

Your request should, where reasonably possible, identify:

• your full name;
• contact information;
• the nature of your request;
• the information or record concerned; and
• sufficient information for us to verify your identity and locate the relevant information.

We may request reasonable information necessary to verify your identity before releasing personal information.

21. CORRECTING PERSONAL INFORMATION

If you believe that information we hold about you is inaccurate, incomplete, outdated or misleading, you may request that it be corrected or updated.

We will take reasonable steps to address verified correction requests in accordance with applicable law.

22. DELETION OF PERSONAL INFORMATION

You may request deletion of personal information where applicable.

However, we may lawfully retain certain information where required or permitted by law, including information necessary for:

• tax and accounting records;
• legal claims;
• contractual enforcement;
• regulatory compliance;
• fraud prevention;
• dispute resolution; or
• other legally recognised purposes.

23. AUTOMATED DECISION-MAKING

ACH may use automated systems, website technology, analytics or software-assisted processes in operating its business.

We do not intend to make decisions producing legal or similarly significant effects on individuals solely through automated processing unless permitted by applicable law and subject to any safeguards required by law.

Where applicable, you may contact us regarding a decision that you believe has been made inappropriately through automated processing.

24. CROSS-BORDER TRANSFERS

Some of the technology and service providers used to operate an ecommerce business may process information outside South Africa.

This may include hosting, ecommerce, payment, communications, analytics, customer-management and other technology providers.

Where personal information is transferred outside South Africa, ACH will take reasonable steps to ensure that the transfer and subsequent processing comply with POPIA’s requirements concerning cross-border transfers.

Shopify’s current Data Processing Addendum addresses processing of merchant customer data and includes provisions concerning the relationship between Shopify and merchants. 

25. THIRD-PARTY WEBSITES AND SERVICES

Our website may contain links to third-party websites, payment providers, social-media platforms or other external services.

Once you leave our website, the third party’s own privacy practices may apply.

ACH is not responsible for the privacy practices of independent third parties that operate their own websites or services.

You should review their applicable privacy policies before providing personal information.

26. SOCIAL MEDIA

If you interact with ACH through social-media platforms, the platform may independently collect and process information about you.

Your use of those platforms is governed by their own terms and privacy policies.

ACH may receive information that you voluntarily provide through those platforms or that the platform makes available to us in accordance with your settings and applicable law.

27. CONFIDENTIALITY OF COMMERCIAL INFORMATION

Where you provide commercially sensitive project information, drawings, specifications or other information for the purpose of obtaining a quotation or developing a container solution, ACH will treat such information responsibly and will use it primarily for the relevant business purpose.

However, unless a separate written confidentiality agreement applies, this Privacy Policy should not be interpreted as an unlimited contractual confidentiality undertaking concerning all information supplied to ACH.

28. FRAUD, SECURITY AND LEGAL DISCLOSURES

ACH may disclose personal information where reasonably necessary to:

• investigate fraud;
• prevent unlawful activity;
• protect customers;
• protect ACH;
• protect service providers;
• enforce contractual rights;
• comply with a court order;
• comply with lawful government requests;
• respond to regulatory requirements; or
• establish, exercise or defend legal rights.

We will seek to limit such disclosures to information reasonably necessary for the applicable purpose.

29. BUSINESS TRANSFERS

If ACH undergoes a merger, restructuring, acquisition, sale of assets, change in ownership or similar corporate transaction, personal information may be transferred where reasonably necessary for the transaction and permitted by applicable law.

Any successor entity will remain subject to applicable privacy obligations.

30. CUSTOMER RESPONSIBILITY

You should ensure that information you provide to ACH is accurate and reasonably up to date.

If you provide personal information relating to another individual, you should do so only where you are legally entitled or authorised to provide that information.

For example, if you provide the telephone number of a site manager or delivery contact, you should have appropriate authority to provide it for the relevant purpose.

31. PRIVACY OF PAYMENT AND BANKING CREDENTIALS

ACH will never intentionally request:

• your online banking password;
• your banking PIN;
• your one-time banking authentication code;
• your payment-card PIN; or
• similar confidential authentication credentials

through ordinary customer-service communications.

If someone claiming to represent ACH requests such information, do not provide it and contact us through our official channels.

32. COMPLAINTS ABOUT PERSONAL INFORMATION

If you believe that ACH has processed your personal information unlawfully or has failed to comply with applicable privacy obligations, please first contact us so that we can investigate.

Privacy and Complaints Contact

African Containers Hub Pty Ltd
Email: complaints@africancontainershub.co.za
Telephone: 031 256 3376
WhatsApp: 063 726 0423

Please include sufficient information for us to understand and investigate the complaint.

33. INFORMATION REGULATOR

Where you are not satisfied with our response, or where otherwise permitted by law, you may lodge a complaint with the Information Regulator of South Africa, which is the statutory regulator responsible for POPIA.

The Information Regulator is established under POPIA and has jurisdiction throughout South Africa. 

Information Regulator of South Africa
Website: Information Regulator of South Africa⁠
Email: enquiries@inforegulator.org.za
Telephone: 010 023 5200

The Information Regulator’s published information confirms its role in protecting personal information and overseeing compliance with POPIA. 

34. PAIA AND ACCESS TO RECORDS

Requests for access to records may also be governed by the Promotion of Access to Information Act 2 of 2000 (PAIA) and applicable POPIA procedures.

Where applicable, ACH will maintain and make available the appropriate information concerning access to records in accordance with South African law.

This Privacy Policy does not replace any PAIA manual or statutory access procedure that may apply to ACH.

35. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time to reflect:

• changes in our business;
• changes in technology;
• changes in service providers;
• changes in applicable law;
• changes in our information-processing practices; or
• improvements to our privacy controls.

The updated version will be published on our website with a revised effective date where appropriate.

Where a change materially affects how we process personal information, we will take reasonable steps to provide appropriate notice where required by law.

36. INTERPRETATION AND STATUTORY RIGHTS

Nothing in this Privacy Policy:

• excludes any right that cannot lawfully be excluded;
• limits any right granted to a data subject under POPIA;
• limits any consumer right under the CPA;
• limits any right under ECTA; or
• prevents a competent authority from exercising its lawful powers.

Where a provision of this Privacy Policy conflicts with a mandatory provision of applicable South African law, the mandatory legal provision will prevail.

37. NO WAIVER OF PRIVACY RIGHTS

Your failure to exercise a privacy right immediately does not constitute a permanent waiver of that right.

Any consent given may be withdrawn where the law permits withdrawal, although withdrawal will not necessarily affect the lawfulness of processing carried out before withdrawal.

38. GOVERNING LAW

This Privacy Policy is governed by the laws of the Republic of South Africa.

Any dispute concerning the processing of personal information will be dealt with in accordance with applicable South African law and the jurisdiction of competent South African courts or regulatory authorities.

39. CONTACT DETAILS

For privacy enquiries, data-subject requests, corrections, complaints or questions concerning this Privacy Policy:

African Containers Hub Pty Ltd
Trading as: African Containers Hub

Website: africancontainershub.co.za⁠
Telephone: 031 256 3376
WhatsApp: 063 726 0423
Sales: sales@africancontainershub.co.za
Support: support@africancontainershub.co.za
Complaints & Privacy: complaints@africancontainershub.co.za

Operating / Facility Location:
Ladysmith, KwaZulu-Natal, 3370, South Africa

Operating Coordinates:
28.54622° S, 29.80378° E

40. IMPORTANT CUSTOMER NOTICE

By using the African Containers Hub website, submitting an enquiry, requesting a quotation or purchasing products or services, you acknowledge that you have been given an opportunity to review this Privacy Policy.

Nothing in this Privacy Policy constitutes consent to processing beyond what is permitted by applicable law.

African Containers Hub will process personal information responsibly, transparently and only for lawful business purposes consistent with this Policy and applicable South African law.