User Data Policy

This User Data Policy (hereinafter referred to as the “Policy”) applies to Wheco Holdings (Pty) Ltd and any of its subsidiaries – referred to as ” Wheco”, “we”, “our” and “us” . By using this website (www.incanda.co.za), you agree to the terms of this Policy. This Policy governs the collection, use, disclosure, and protection of your personal information in compliance with the Electronic Communications and Transactions Act 25 of 2022 (ETCA) as well as the Protection of Personal Information Act of 2013 (POPI).

At Wheco we are committed to protecting your privacy and ensuring that personal information is collected, used and processed in a lawfully and transparent manner and in accordance with the provisions of the aforementioned privacy protection laws.

We reserve the right, at our discretion, to modify or remove portions of this User Data Policy at any time and we encourage users to review this Policy periodically to stay informed of any updates or changes.

This Policy is in addition to any other terms and conditions applicable to the website. We do not make any representations about third party websites that may be linked to the website.

1. The purpose for which we collect Personal Information

In compliance with privacy protection laws, we collect and process personal information only when there is a lawful basis for doing so. This may be necessary to deliver requested services, respond to inquiries, process specific requests, or for our legitimate business interests, provided those interests do not override your rights. Our approach ensures that personal information is handled lawfully and transparently, always to enhance your experience and meet your needs. We will always inform you of the purpose for collecting personal information.

2. The Information We Collect

•  Information you provide to us

When you register with us, make a purchase, or contact us, we collect personal information to ensure you can fully benefit from our services. This may include details such as your name, email address, postal address, telephone number, account credentials (including passwords and usernames), preferences, interests, complaints, and any additional information you voluntarily provide. You may access this information at any time by logging into your account to view or amend the personal information held by us.

• Information we automatically collect 
• Log Data: When you visit our website, our servers automatically record certain information (“Log Data”), including your internet protocol (“IP”) address, browser type and settings, device information, and the date and time of your request.
•  IP Address: We collect your IP address to assist with diagnosing technical issues or providing support for our services. This information is gathered in aggregate form and cannot be used to identify individual users.
•  Cookies and Applets: To enhance your experience, we use cookies and applets. These technologies help improve security by storing your session IDs and allowing us to monitor website access.

This aggregate, non-personal information is compiled to analyze website usage patterns and improve functionality.

3. How Will We Use Your Personal Information

Personal information is collected only for specified purposes, and we ensure that all processing activities have a valid legal basis. Where necessary, information may be retained for legal or research purposes, including:

• To gather contact information for customer service purposes;
• To confirm and verify customer identity for security purposes;
• For the detection and prevention of fraud, crime, money laundering or other malpractice;
• To conduct market or customer satisfaction research or for statistical analysis;
• For audit and record keeping purposes as required by law;
• In connection with legal and warranty purposes;
• In connection with marketing, where consent has been given.

4. Disclosure of Your Personal Information

Personal information may be shared with trusted service providers involved in delivering products or services. We have agreements in place to ensure compliance with legal privacy requirements. Additionally, personal data may be disclosed:

• Where required by law or industry regulations.
• Where necessary to protect our legitimate business interests, provided these interests do not override your rights.

5. Information Security

The legal obligation to provide adequate protection for the personal information held as well as to stop unauthorized access and use of personal information is of priority. We continue to review our security controls and related processes to ensure that personal information remains secure.

Our Data Security policies and procedures cover:

–  Physical server and data security;

–  Computer and network security;

–  Employee access to personal information;

–  Secure communications;

–  Security in contracting out activities or functions e.g., delivery;

–  Retention and disposal of information;

–  Acceptable usage of personal information;

–  Governance and regulatory issues;

–  Monitoring access and usage of private information;

–  Investigating and reacting to security incidents

In addition, our employees and the contractors who provide services related to our information systems are obliged to respect the confidentiality of any personal information held by us. However, we will not be held responsible for events arising from unauthorised access to your personal information.

6. Your Rights To Access Your Personal Information

In accordance with the POPIA, you have the right to:

• Access your personal data.
• Request correction of inaccurate or incomplete data.
• Request deletion of personal data (“right to be forgotten”), subject to legal exceptions.
• Restrict or object to data processing in certain circumstances.
• Withdraw consent for data processing at any time.

We have compiled a PAIA Manual that provides guidance on how to request access to information. To obtain a copy of this manual or make an access request, please contact us at popia@wheco.co.za.  We will require a copy of your ID document to confirm your identity before providing or making changes to any personal information. We encourage you to keep your personal information accurate.

7. Links to other sites 

We provide links to Websites outside of our websites, as well as to third party Websites. These linked sites are not under our control, and we cannot accept responsibility for the conduct of companies linked to our website. Before disclosing your personal information on any other website, we advise you to examine the terms and conditions of using that Website and its privacy statement.

8. Credit Card Details

For Credit Card payments, users are directed to Paygate, a secure third-party credit card processor.  This website does not collect, neither do the owners of this website store customers credit card details in any way.

9. Google Ads & Direct Marketing

We advertise on third-party websites through Google AdWords. Google may use cookies to serve ads based on your website visits.

You may opt out of seeing ads for this site by visiting the “Google Opt-out Page” http://www.google.com/settings/ads .

To opt-out of marketing content in the form of emailers and newsletters, unsubscribe. For SMS-related content, reply STOP to opt out.

10. How to contact us

If you have any queries about this notice; you need further information about our privacy practices; wish to withdraw consent; exercise preferences or access or correct your personal information, please contact us at the email address popia@wheco.co.za.