2. Information We Collect
We may collect and process the following types of personal information:

• Contact information: name, email address, telephone number, postal address.

• Enquiry details: subject, message content when you submit a form.

• Technical/usage data: IP address, browser type and version, operating system, pages visited on the Site, time and date of visit, duration of visit, referral source.

• Other information you voluntarily provide when interacting with us (for example when you send us documents, images, or other attachments).

3. How We Use Your Information
We use your personal information for the following purposes:

• To respond to your enquiries, requests or feedback.

• To provide services you request (for example construction, renovation, project management).

• To send you administrative information (such as confirmations, updates or notices regarding our services).

• To improve our website, analyse usage, troubleshoot and enhance user experience.

• To comply with our legal obligations and enforce our rights.

• With your consent, to send you marketing communications about our services and special offers.

4. Legal Basis for Processing
Under POPIA and other applicable data-protection law, our lawful basis for processing your personal data includes:

• Your consent (for marketing and other optional uses).

• Performance of a contract or taking steps prior to entering a contract (e.g., providing you a quote, delivering our services).

• Compliance with legal obligations.

• Legitimate interests pursued by us – for example improving our website and services (provided these interests are not overridden by your rights).

5. Disclosure of Your Information
We may share your personal information with:

• Our service providers and subcontractors who assist us in delivering our services, managing the Site, hosting, technical support, analytics.

• Professional advisors (lawyers, accountants) when required.

• Government or regulatory authorities as required by law (for example in tax or legal proceedings).

• In connection with a corporate transaction (e.g., merger, sale, asset transfer) – in that case personal data may be transferred as part of that transaction.

We will not sell your personal data to third parties.

6. International Transfers
If your personal data is transferred or accessed from outside South Africa (for example by a global cloud provider), we ensure that appropriate safeguards are in place (such as standard contractual clauses) to protect your information in compliance with applicable laws.

7. Data Retention
We retain your personal information for as long as necessary to fulfil the purposes described in this Policy, including to comply with legal obligations, resolve disputes and enforce our agreements. After that, we will securely delete or anonymise your data.

8. Your Rights
You have certain rights regarding your personal data, subject to applicable law. These include:

• The right to request access to the personal data we hold about you.

• The right to request correction or deletion of your personal data.

• The right to object to or restrict certain processing of your data.

• The right to withdraw consent at any time (for processing based on consent).

• The right to lodge a complaint with the relevant data protection authority if you believe your rights have been breached.

9. Cookies and Tracking Technologies
Our Site uses cookies and similar tracking technologies to collect usage information and personalise your experience. Cookies may be required for certain parts of the Site to function. You may disable cookies via your browser settings, but this may limit your ability to use some features.

10. Security
We apply appropriate technical and organisational measures to protect personal data from unauthorised access, disclosure, alteration or destruction. However, no system is completely secure, so we cannot guarantee absolute security of your information.

11. Third-Party Links
The Site may include links to external websites or services that are not operated by us. We are not responsible for the privacy practices of those third parties. We encourage you to review the privacy policies of any such sites.

12. Children
Our services are not directed to children under the age of 18. We do not knowingly collect personal data from children without appropriate consent. If you believe we have inadvertently collected personal data of a child, please contact us and we will take steps to delete it.

13. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The “Last updated” date will reflect when the changes take effect. We recommend you check this page periodically.

14. Contact Us
If you have any questions or wish to exercise your rights, please contact us at:

KOR Group
Unit 51 Thembi Place Office Park,
Calderwood Road, Lonehill, Sandton,
South Africa
Tel: 011 465 6945
Email: info@korgroup.co.za