Privacy Policy

Last Updated: April 2026

This Privacy Policy describes how Makhaf Heavy Duty Machinery ("we," "us," or "our") collects, uses, and protects your personal information in accordance with the Protection of Personal Information Act, 2013 (POPIA) and other applicable South African privacy legislation.

1. Information We Collect

Personal Information You Provide

When you interact with our website, place an order, request a quote, or contact us, we may collect the following personal information:

Full name and surname
Contact information (email address, phone number, physical address)
Company or business name
Payment and billing information
Order and purchase history
Product enquiry details (generator specifications, solar system requirements)
Communications and correspondence with our team
Account login credentials

Automatically Collected Information

When you visit our website, we automatically collect certain technical information, including:

IP address and approximate geographic location
Browser type, version, and language preferences
Device type and operating system
Pages visited, time spent, and navigation patterns
Referring website or search terms
Cookies and similar tracking technologies (see our Cookie Policy)

2. How We Use Your Information

We process your personal information for the following lawful purposes:

Processing and fulfilling orders for generators, solar equipment, and accessories
Responding to quote requests and product enquiries
Communicating about orders, deliveries, and after-sales service
Providing warranty support and technical assistance
Sending marketing communications (only with your prior consent)
Improving our website, products, and customer experience
Detecting and preventing fraud or security threats
Complying with legal and regulatory obligations
Maintaining internal business records and analytics

3. Lawful Basis for Processing

Under POPIA, we process your personal information based on one or more of the following grounds:

Consent: Where you have given explicit consent (e.g., marketing communications)
Contract: Where processing is necessary to perform a contract with you (e.g., fulfilling an order)
Legal Obligation: Where we are required by law to process your information
Legitimate Interest: Where processing is necessary for our legitimate business interests, provided your rights are not overridden

4. Sharing Your Information

We may share your personal information with the following categories of third parties:

Payment Processors: To securely process payments for orders
Shipping and Logistics Partners: To arrange delivery of generators and solar equipment
Manufacturer Partners: Such as Hyundai, FAW, Cummins, PERKINS, Volvo Penta, SDEC, Scania, and Baudouin for warranty and product support
IT and Hosting Providers: Who maintain our website and systems
Analytics Providers: To help us understand website usage and improve our services
Legal and Regulatory Authorities: When required by law or to protect our legitimate rights

We do not sell, rent, or trade your personal information to third parties for their marketing purposes. All third-party service providers are contractually bound to protect your information in accordance with POPIA.

5. Data Security

We implement appropriate technical and organisational security measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. These measures include encrypted data transmission (SSL/TLS), secure server infrastructure, access controls, and regular security assessments.

While we take all reasonable steps to protect your information, no method of electronic storage or transmission is entirely secure. We encourage you to use strong passwords and to contact us immediately if you suspect any unauthorised access to your account.

6. Cookies and Tracking Technologies

Our website uses cookies and similar technologies to enhance your browsing experience, analyse site traffic, and understand user preferences. Cookies are small text files stored on your device when you visit our website.

You can control cookie settings through your browser preferences. For detailed information about the types of cookies we use and how to manage them, please refer to our Cookie Policy.

7. Data Retention

We retain your personal information only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. Order and transaction records are retained for a minimum of five years in accordance with South African tax and commercial legislation. Marketing consent records are kept for the duration of your subscription. Once information is no longer needed, it is securely deleted or anonymised.

8. Your Rights Under POPIA

As a data subject under South African law, you have the following rights:

Right to Access: Request confirmation of whether we hold your personal information and obtain a copy thereof
Right to Correction: Request that we correct or update inaccurate, incomplete, or misleading personal information
Right to Deletion: Request the deletion or destruction of your personal information where it is no longer necessary
Right to Object: Object to the processing of your personal information, including for direct marketing purposes
Right to Restrict Processing: Request that we limit the processing of your information in certain circumstances
Right to Complain: Lodge a complaint with the Information Regulator if you believe your rights have been infringed

To exercise any of these rights, please contact our Information Officer using the details provided below. We will respond to your request within 30 days, as required by POPIA.

9. Children's Privacy

Our website and services are not directed at children under the age of 18. We do not knowingly collect personal information from minors. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately and we will take steps to delete such information.

10. Cross-Border Data Transfers

In some instances, your personal information may be transferred to service providers located outside of South Africa. Where such transfers occur, we ensure that adequate safeguards are in place in accordance with Section 72 of POPIA to protect your information.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. The updated policy will be posted on our website with a revised "Last Updated" date. We encourage you to review this page periodically. Continued use of our website after changes constitutes acceptance of the revised policy.

12. Information Officer & Contact Details

For questions, concerns, or requests regarding this Privacy Policy or the processing of your personal information, please contact our Information Officer:

Information Officer: Makhaf Heavy Duty Machinery
Email: sales@makhafheavydutymachinery.co.za
Phone: +27 51 004 0204
WhatsApp: +27 83 673 1007
Address: 1 Barrett Kraal St, Oos-Einde, Bloemfontein, 9301

You may also contact the Information Regulator of South Africa:
Website: inforegulator.org.za
Email: enquiries@inforegulator.org.za
Phone: 012 406 4818