FieldFresh (Pty) Ltd: Privacy Policy


 

1. Who we are

FieldFresh (Pty) Ltd (registration number 2016/038184/07) is the responsible party for the personal information described in this policy. In this policy “FieldFresh”, “we”, “us” and “our” mean FieldFresh (Pty) Ltd.

Our registered address is 451 Main Road, Paarl, 7646, South Africa. Our website is www.fieldfresh.co.za.

This policy explains what personal information we collect through our website, why we collect it, what we do with it, how long we keep it and what rights you have. It is written to meet our obligations under the Protection of Personal Information Act 4 of 2013 (POPIA).

Effective date: 30 July 2026

2. What this policy covers

This policy covers personal information we collect through www.fieldfresh.co.za.

It does not cover information we collect in the ordinary course of doing business offline, such as information about customers, suppliers, growers or employees gathered through contracts, purchase orders, site visits or recruitment.

3. What we collect, and why

3.1 Enquiries you send us

When you complete a form on our website or email an address listed on it, we collect: your name, your email address, your telephone number, [your company or trading name, the division your enquiry relates to and the content of your message.

Giving us this information is voluntary. Nothing on the website is closed to you if you choose not to. If you do want us to respond, we need the fields marked as required, because without them we cannot reply or work out who you are.

We use this information only to respond to your enquiry, to route it to the right division (Retail, Food Service or Wholesale), and to carry on the correspondence that follows. We do not add enquiry details to a marketing list.

3.2 Careers and supplier enquiries

If you apply for a position or offer to supply us through the website, we collect the information you choose to send, which may include your CV, employment history, qualifications and contact details. We use it to assess your application or proposal.

If you send us a CV, please do not include information you would rather we did not hold, such as identity numbers, medical details or dependants’ details. We do not need it at enquiry stage and will not ask for it until it becomes necessary.

3.3 Information collected automatically

Our website host keeps standard server logs. These record your IP address, browser and device type, the pages requested, referring page, and the date and time of each request. The logs exist for security, fault-finding and to keep the site running. They are not used to build a profile of you or to follow you across other websites. 

3.4 Cookies

We use only the cookies strictly necessary for the website to work, including those that keep a form session alive and protect our forms against automated abuse. We do not use analytics, advertising or behavioural tracking cookies. Essential cookies do not require your consent under POPIA, but you can block or delete them through your browser settings, at the cost of some site functions.

4. Our lawful basis for processing

We process the personal information described above on the following bases under section 11 of POPIA:

  • Your consent, where you voluntarily send us an enquiry, application or proposal.
  • The conclusion or performance of a contract, where the enquiry develops into a commercial relationship.
  • Our legitimate interests, in keeping our website secure, preventing fraud and abuse, and running our business, balanced against your right to privacy.
  • Compliance with a legal obligation, where a law requires us to keep or produce a record.

5. Who receives your information

We do not sell, rent or trade personal information.

Your information may be handled by:

  • Employees of FieldFresh who need it to respond to you, on a need-to-know basis.
  • Other companies in our group, where your enquiry concerns a product or service handled by another group company. We will tell you if we transfer your enquiry.
  • Operators acting on our behalf under written agreement, in terms of sections 20 and 21 of POPIA. Operators may process your information only on our instruction and may not use it for their own purposes.
  • Third parties where the law requires it, such as a court order or a lawful request from a regulator or law enforcement.

6. Transfers outside South Africa

 If not applicable: We do not transfer personal information outside South Africa.

7. How we protect it

We take reasonable technical and organisational steps to keep personal information secure, as required by section 19 of POPIA. 

No system is perfectly secure. If a security compromise occurs that creates a reasonable belief that your personal information has been accessed or acquired by an unauthorised person, we will notify the Information Regulator through its eServices portal and notify you as soon as reasonably possible, as required by section 22.

8. Your rights

Under POPIA you have the right to:

  • Be told what personal information we hold about you and to receive a copy of it (section 23). Requests are handled through our PAIA Manual, using the prescribed form. A fee may apply for copies, as set out in that manual.
  • Have information corrected or deleted where it is inaccurate, irrelevant, excessive, out of date, incomplete, misleading or obtained unlawfully (section 24). Use POPIA Form 2.
  • Object to processing on reasonable grounds, where we rely on legitimate interests (section 11(3)). Use POPIA Form 1.
  • Withdraw consent you previously gave, at any time. Withdrawal does not affect processing that already happened lawfully.
  • Object to direct marketing at any time, and to be told the source of your details.
  • Complain to the Information Regulator if you believe we have infringed your rights.

To exercise any of these rights, contact our Information Officer using the details in section 2. We will respond within the periods set out in POPIA and PAIA. We may ask you to verify your identity before we act, so that we do not disclose your information to someone else.

9. Direct marketing

We do not send electronic direct marketing. Completing a form on our website will not result in marketing messages.

10. Children

Our website is not directed at children. Under POPIA a child is anyone under the age of 18.

We do not knowingly collect the personal information of a child through our website without the prior consent of a competent person, as required by sections 34 and 35 of POPIA. If you are a parent or guardian and believe a child has given us personal information, contact our Information Officer and we will delete it.

11. Links to other websites

Our website may link to websites we do not operate, including those of customers, suppliers, certification bodies and other group companies. We are not responsible for their content or their privacy practices. Read their privacy policies before giving them your information.

12. Access to information under PAIA

Our PAIA Manual, prepared in terms of section 51 of the Promotion of Access to Information Act 2 of 2000, sets out the records we hold and how to request access to them.

13. Complaints to the Information Regulator

If you are not satisfied with how we have handled your personal information or your request, you may complain to the Information Regulator.

  • Website: https://inforegulator.org.za
  • POPIA complaints: POPIAComplaints@inforegulator.org.za
  • PAIA complaints: PAIAComplaints@inforegulator.org.za
  • Address: JD House, 27 Stiemens Street, Braamfontein, Johannesburg, 2001

Complaints must be in writing on the prescribed complaint form.

14. Changes to this policy

We review this policy at least once a year and update it when our processing changes. The current version and its effective date appear at the top of this page. Where a change materially affects how we use your personal information, we will take reasonable steps to bring it to your attention rather than relying on you to check the page.