How we handle personal information

1. Who is responsible

Mobosa Holding Investments (Pty) Ltd t/a SMME Command Centre is the responsible party for personal information processed through this website and its assisted services. Our correspondence address is 121 Clarence Road, Essenwood, Durban, 4001. Privacy requests may be sent to glprosonline@gmail.com or made by telephone on +27 82 968 1572.

2. Browsing and enquiry information

The website records a random session identifier and limited interaction events such as a page view, product view, basket addition, article view or category interest. These events do not intentionally contain names, contact details, bank details, brief text or document contents.

If you send a business brief through WhatsApp, your message is sent to WhatsApp and then to us. Do not include passwords, PINs, one-time passwords, online-banking credentials or unnecessary special personal information.

3. Checkout and service information

When you start an order, we process the buyer’s name, email address, optional mobile number and business name, the basket contents, price, order reference, payment status supplied by PayFast, delivery activity and information required to perform an agreed service. PayFast processes the supported payment method under its own security controls. We do not receive or store the buyer’s card number, PIN, online-banking password or one-time password.

4. Why we process it

Information is used to respond to enquiries, prepare and perform contracts, deliver products or services, maintain transaction and compliance records, prevent fraud, secure the website, understand aggregate customer interest and meet legal obligations. Direct marketing will require the appropriate lawful basis and an effective opt-out.

5. Who may receive it

Information may be processed by service providers that host the website, secure files, provide communications, process payments or support professional work. PayFast by Network receives the buyer and order information reasonably needed to process and reconcile payment. Card credentials remain with the authorised payment provider. Information may also be disclosed where required by law or a valid regulatory process.

6. Storage, security and retention

Order records and protected-file metadata use server-side storage with access controls. Owner functions require server-verified authentication. Product files remain in private object storage and are released only through an order-specific, expiry-controlled route after verified payment. IP addresses used for checkout abuse prevention and PayFast source validation are stored only as one-way hashes in the order and security records. We retain information only for as long as the purpose, contract, law, dispute or legitimate record requirement reasonably requires.

7. Your choices and rights

You may ask whether we hold your personal information, request access, correction or deletion where legally applicable, object to certain processing, withdraw consent where consent is the basis, or complain about our handling. We may need to verify your identity before acting. Some records must be retained where law or a live contractual dispute requires it.

8. Security incidents

If personal information is reasonably believed to have been accessed or acquired by an unauthorised person, we will investigate and make the notifications required by the Protection of Personal Information Act, including notification to the Information Regulator and affected data subjects when required.

9. Complaints

Please contact us first so we can investigate. You may also lodge a complaint with the South African Information Regulator through its official complaints process at inforegulator.org.za.