Privacy Policy

Synercore Holdings (Pty) Ltd and the Synercore Group

Version 1.0 | Effective: 3 June 2026

1. Who We Are

This Privacy Policy applies to Synercore Holdings (Pty) Ltd (Registration No. 2015/007079/07), together with its subsidiaries African Food Industries (Pty) Ltd, Allmark Foods (Pty) Ltd, Impilo Products (Pty) Ltd, Sizwe Foods (Pty) Ltd, and Innovative Research Solutions (Pty) Ltd (collectively "Synercore", "we", "us", or "our").

We are the Responsible Party in terms of the Protection of Personal Information Act 4 of 2013 (POPIA) in respect of any personal information we collect through this website.

Registered address:
Groene Weide Farm, Protea Road, Klapmuts, Western Cape, 7625, South Africa

Information Officer:
Willem van der Merwe
Email: privacy@synercore.co.za
Tel: 072 836 4205

2. What This Policy Covers

This policy explains:

What personal information we collect when you use this website
Why we collect it and what we do with it
Who we may share it with
How long we keep it
Your rights as a data subject under POPIA
How to contact us or the Information Regulator

This policy applies to the website at synercore.co.za and any subdomains or microsites operated by the Synercore Group.

3. Personal Information We Collect

3.1 Information you give us

When you use our "Speak To Our Team" contact form or any other enquiry form on this site, we may collect:

Data	Examples
Contact details	Name, email address, phone number
Company details	Company name, job title, industry
Enquiry content	The message or request you submit

Completing our contact form is entirely voluntary. If you choose not to provide the requested information, we will be unable to respond to your enquiry.

3.2 Information collected automatically

When you visit our website, our hosting and analytics platforms automatically collect:

Data	Examples
Technical data	IP address, browser type and version, device type, operating system
Usage data	Pages visited, time on page, referral source, clicks
Cookie data	Session identifiers and analytics identifiers (see Section 7)

We do not collect Special Personal Information (health, biometric, financial account, criminal, religious, or political data) through this website. Please do not submit such information through our contact forms.

4. Why We Collect It - Lawful Basis

We only process your personal information where we have a lawful basis under POPIA Section 11.

Purpose	Lawful basis
Responding to your enquiry or request	Necessary to take steps at your request prior to entering into a relationship
Maintaining a record of communications	Legitimate interest in managing business relationships
Improving our website and user experience	Legitimate interest in developing our digital presence
Complying with legal obligations	Legal obligation
Sending information about our products or services where you have opted in	Your consent

We will not use your personal information for purposes incompatible with those stated here without obtaining your prior consent.

5. Who We Share Your Information With

We do not sell your personal information. We may share it only as follows:

Within the Synercore Group: Your enquiry may be routed to the relevant Synercore division (AFI, Allmark, Impilo, Sizwe, or IRS) where it relates to that division’s specific products or services.

Service providers (operators): We use the following third-party platforms to operate this website and manage communications:

Provider	Location	Purpose	Personal information involved
Webflow Inc.	United States	Website hosting and content management	Technical data, usage data, form submissions
Google LLC	United States	Website analytics (Google Analytics)	Anonymised usage and technical data
Microsoft Corporation	United States	Email management via Microsoft 365	Contact details and enquiry content submitted via our contact form

All operators are contractually required to process personal information only on our instructions and in a manner consistent with POPIA. Where an operator is located outside South Africa, appropriate protections are in place (see Section 6).

Legal obligations: We may disclose personal information where required by law, a court order, or a regulatory authority.

Business transactions: In the event of a merger, acquisition, or restructuring involving Synercore, personal information may be transferred as part of that transaction, subject to equivalent privacy protections being maintained.

6. Cross-Border Transfers

Our website hosting (Webflow), analytics (Google), and email platform (Microsoft 365) are operated by companies based in the United States. Your personal information may therefore be processed outside South Africa.

In accordance with Section 72 of POPIA, we take steps to ensure that any recipient outside South Africa is subject to binding data processing agreements that provide a level of protection substantially similar to that required under POPIA.

7. Cookies

Our website uses cookies - small text files placed on your device - to ensure the site functions correctly and to help us understand how it is used.

Cookie type	Provider	Purpose	Can you opt out?
Strictly necessary	Webflow	Required for the website to load and operate correctly	No — the site cannot function without these
Analytics and performance	Google Analytics	Tracks pages visited, time on site, and traffic sources to help us improve the website	Yes — see below

Google Analytics cookies used on this site include _ga, _gid, and _gat. These cookies collect information in anonymised form. No personally identifiable information is sent to Google through these cookies.

To opt out of Google Analytics across all websites, you can install the Google Analytics Opt-out Browser Add-on. You can also manage or delete cookies at any time through your browser settings.

8. How Long We Keep Your Information

We retain your personal information only for as long as necessary for the purposes described in this policy.

Data type	Retention period
Contact form enquiries and email correspondence	3 years from the date of last contact
Google Analytics data	26 months (Google Analytics default)

After the applicable retention period, personal information is securely deleted or anonymised. Where we are required by law to retain records for longer, we will do so.

9. How We Protect Your Information

We implement reasonable technical and organisational measures to protect your personal information against loss, unauthorised access, misuse, alteration, or destruction. These measures include:

Encrypted data transmission (HTTPS) on all pages of this website
Access controls on the platforms we use to receive and store enquiries
Regular review of our information security practices

No transmission over the internet is completely secure. While we take all reasonable steps to protect your personal information, we cannot guarantee absolute security.

If we become aware of a security compromise that may affect your personal information, we will notify you and the Information Regulator of South Africa as required by Section 22 of POPIA.

10. Your Rights as a Data Subject

Under POPIA, you have the following rights in respect of personal information we hold about you:

Right	What it means
Right of access	Request confirmation of whether we hold your personal information and receive a copy of it
Right to correction	Request that we correct inaccurate, incomplete, or outdated personal information
Right to deletion	Request that we delete personal information we are no longer lawfully required to retain
Right to object	Object to processing of your personal information for direct marketing purposes at any time
Right to withdraw consent	Where we process your information based on consent, withdraw that consent at any time without affecting the lawfulness of prior processing
Right to complain	Lodge a complaint with the Information Regulator if you believe we have handled your information unlawfully

To exercise any of these rights, contact our Information Officer at privacy@synercore.co.za. We will acknowledge your request promptly and respond within 30 calendar days as required by POPIA.

11. Contact the Information Regulator

If you are not satisfied with how we have responded to your request or complaint, you have the right to escalate to the Information Regulator of South Africa:

Information Regulator (South Africa)
JD House, 27 Stiemens Street, Braamfontein, Johannesburg, 2001
Email: inforeg@justice.gov.za
Website: www.justice.gov.za/inforeg

12. Changes to This Policy

We may update this policy from time to time to reflect changes in our practices, the services we use, or our legal obligations. The current version, with its effective date, will always be available on this page. We encourage you to review this policy periodically.

Where changes are material, we will take reasonable steps to bring them to your attention.

13. Contact Us

For any questions, requests, or concerns about this policy or how we handle your personal information, please contact our Information Officer:

Willem van der Merwe — Information Officer
Synercore Holdings (Pty) Ltd
Groene Weide Farm, Protea Road, Klapmuts, Western Cape, 7625
Email: privacy@synercore.co.za
Tel: 072 836 4205

This policy is effective from 3 June 2026 and applies to all personal information collected through the Synercore website.