Privacy Policy
Last updated: 26 September 2025
We respect your privacy. This policy explains how we collect, use, and protect your personal information when you use our website.
1. Who We Are
This website is operated by EPCM Holdings, based in South Africa. We are the “responsible party” under POPIA and the “data controller” under GDPR.
If you have any questions, you can reach us at:
📧 hello@epcmholdings.com
2. What Data We Collect
When you sign up for our newsletter, we collect only your email address.
We do not collect any other personal information.
3. Why We Collect It
We use your email address only to:
- Send you newsletters, updates, or content you signed up for.
We do not sell or rent your personal data to third parties.
4. How Your Data Is Stored
We use Brevo (our email platform) to store and send newsletters.
- Your data is securely stored on Brevo’s systems.
- For details on Brevo’s practices, see their Privacy Policy.
5. Legal Basis for Processing
- GDPR (EU/UK visitors): We rely on your consent (Article 6(1)(a)).
- POPIA (South Africa visitors): We process your information with your voluntary and informed consent.
6. Your Rights
You have the right to:
- Unsubscribe at any time (link in every email).
- Request access to your data.
- Ask us to delete your data.
- Withdraw your consent at any time.
To exercise these rights, contact us at 📧 hello@epcmholdings.com
7. Data Transfers
Since we use Brevo, your data may be transferred outside of South Africa or the EU. Brevo applies appropriate safeguards to protect it.
8. Data Retention
We keep your email address until you unsubscribe or request deletion.
9. Security
We use SSL (https) and trusted third-party providers to protect your data. However, no online system is 100% secure.
10. Updates
We may update this Privacy Policy from time to time. Changes will be posted on this page.