Privacy policy

LEGAL

We are committed to protecting your privacy and ensuring the security of any personal information you share with us.

1. CUSTOMER INFORMATION PRIVACY NOTICE

GENEXYZ values its relationship with you, respects your right to privacy and will protect your Personal Information as prescribed by the Protection of Personal Information Act, 4 of 2013 ("POPIA").

This Customer Information Privacy Notice explains:

• The types of Personal Information GENEXYZ collects.
• The circumstances under which GENEXYZ collects and processes Personal Information.
• How GENEXYZ treats and protects Personal Information.
• When GENEXYZ shares Personal Information with third parties.

GENEXYZ strives to protect your Personal Information through reasonable security measures while you interact with our websites, applications, products and services.

To ensure compliance with POPIA, GENEXYZ has established an Information Privacy Office responsible for:

• Managing customer privacy matters.
• Educating employees, customers and stakeholders.
• Implementing policies, processes and security safeguards.
• Ensuring lawful processing of Personal Information.

2. WHO WE ARE

Our Details

3. WEBSITE INFORMATION

GENEXYZ operates the website: www.genexyz.co.za and any associated digital platforms, products and services.

4. YOUR PERSONAL INFORMATION AT GENEXYZ

This section explains your rights as a data subject, the information we collect, how we use it, and when it may be shared with third parties.

4.1 What Are Your Rights as a Data Subject?

As a data subject, you have the right:

• To lawful processing of your Personal Information.
• Not to receive unsolicited direct electronic marketing unless permitted by law.
• To have your Personal Information collected directly from you unless otherwise authorised by law.
• To be informed of the purpose for collecting and processing your Personal Information.
• To lodge a complaint with the Information Regulator.
• To be notified of security compromises affecting your Personal Information.
• To institute civil proceedings regarding the protection of your Personal Information.
• To be informed when your Personal Information is shared with third parties.
• To request deletion of Personal Information.
• To request confirmation of Personal Information held about you.
• To access your Personal Information.
• To object to unlawful processing.
• To object to direct marketing.
• To withdraw or amend marketing consent preferences.
• To request corrections or updates to your Personal Information.

4.2 What Personal Information GENEXYZ Collects About You

4.2.1 General Personal Information

GENEXYZ may collect:

• Financial and employment information.
• Mobile numbers and telephone numbers.
• Email addresses.
• Physical and postal addresses.
• Location information.
• Online identifiers.
• Account numbers.
• Device identifiers and serial numbers.
• Biometric information used for identity verification.
• Correspondence submitted to GENEXYZ.
• CCTV footage captured for security purposes.

GENEXYZ may also collect Special Personal Information where permitted by law.

4.2.2 Cookies

When using GENEXYZ websites or applications, we may automatically collect information such as:

• IP address
• Browser type
• Operating system
• Mobile carrier
• Internet service provider
• Referring URLs
• Website activity information

Cookies and similar technologies help us recognise returning visitors and improve website functionality.

You will be given the opportunity to accept or reject cookies when visiting our website.

4.3 Collecting Your Personal Information Directly From You

GENEXYZ generally collects Personal Information directly from you.

Where information is collected from another lawful source, GENEXYZ will take reasonably practicable steps to notify you where required.

4.4 The Purpose for Collecting Your Personal Information

GENEXYZ collects and processes Personal Information for the purpose of providing products and services and conducting its business operations.

Only information that is relevant and necessary for the intended purpose will be collected.

4.5 Sharing Your Personal Information With Operators and Third Parties

GENEXYZ may share Personal Information with affiliated companies and authorised third parties who assist us in delivering products and services.

These may include service providers who:

• Fulfil orders.
• Deliver products and services.
• Provide ICT and hosting services.
• Perform billing functions.
• Process payments.
• Provide website functionality.
• Provide analytics and reporting services.
• Conduct credit vetting and identity verification.

All third parties are subject to contractual obligations requiring appropriate data protection measures.

4.5.1 Identity Verification

GENEXYZ may use third-party identity verification services to comply with legal obligations including RICA and FICA requirements.

4.5.2 Legitimate Interests

GENEXYZ may appoint third parties to assist in pursuing legitimate business interests where permitted by law.

4.6 Automated Decision-Making

GENEXYZ will not make decisions solely through automated processing that:

• Produce legal consequences for you;
• Significantly affect you; or
• Profile you without appropriate notice and an opportunity to make representations.

4.7 Your Consent

4.7.1 Consent to Receive Direct Marketing

You may choose whether to receive marketing communications from GENEXYZ.

You may opt out at any time by:

• Contacting our office on +27110298100
• Emailing info@genexyz.co.za
• Using available unsubscribe mechanisms

Preference updates may take up to 48 hours to be reflected across all systems.

4.7.2 Regulatory Communications

GENEXYZ may send legally required communications, including:

• Contract expiry notifications
• Data depletion notifications
• Regulatory notices

These communications do not constitute direct marketing.

4.7.3 Consent for Further Processing

Where required by law, GENEXYZ will obtain consent before further processing Personal Information for purposes incompatible with the original purpose of collection.

4.7.4 Consent to Process a Child's Personal Information

Where services involve children, consent from a parent or legal guardian will be obtained before processing a child's Personal Information.

4.7.5 Consent to Process Special Personal Information

Where required, GENEXYZ will obtain consent before processing Special Personal Information, including biometric information.

4.7.6 Internal Transfers

GENEXYZ may transfer Personal Information between departments and entities within the GENEXYZ group where necessary for operational purposes.

4.7.7 Cross-Border Transfers

GENEXYZ will ensure that any international transfer of Personal Information complies with POPIA and appropriate safeguards are maintained.

4.8 How GENEXYZ Protects Your Personal Information

GENEXYZ implements reasonable technical and organisational safeguards to protect Personal Information from:

• Loss
• Damage
• Unauthorised access
• Unauthorised disclosure
• Unlawful destruction

5. ACCESS TO YOUR INFORMATION

GENEXYZ provides guidance and processes to enable customers to access information held about them and exercise their rights under applicable legislation.

6. EXERCISE YOUR PERSONAL INFORMATION RIGHTS

6.1 Request Access to Your Personal Information

You may request access to Personal Information held by GENEXYZ through our website contact form.

6.2 Request Confirmation of Personal Information Held

You may request confirmation of the Personal Information held by GENEXYZ and obtain copies of those records.

6.3 Request Updates or Corrections

You may request correction of inaccurate, incomplete or outdated Personal Information.

6.4 Request Deletion or Destruction of Personal Information

You may request deletion or destruction of Personal Information where legally permissible.

GENEXYZ may retain certain information where required by law, contract or legitimate business purposes.

6.5 Object to Processing

You may object to the processing of your Personal Information where permitted by law.

6.6 Report a Personal Information Incident

To report a privacy or security concern, contact:

Telephone: 011 029 8100
Email: info@genexyz.co.za

6.7 Notification of Security Compromises

GENEXYZ will notify affected individuals where required by law if Personal Information has been accessed or acquired by an unauthorised party.

6.8 Lodge a Complaint With the Information Regulator

If you believe your privacy rights have been infringed, you may contact:

Information Regulator (South Africa)

Website: https://inforegulator.org.za/

Address:
Woodmead North Office Park
54 Maxwell Drive
Woodmead
Johannesburg

Email: POPIAComplaints@inforegulator.org.za

RIGHT TO AMEND THIS NOTICE

GENEXYZ may amend this Privacy Policy from time to time by publishing an updated version on its website. The latest version will apply whenever you access the website.

Dated: June 2026