1. INTRODUCTION
The right to privacy is a fundamental human right that is protected in the Constitution of South Africa, 1996 and in the Protection of Personal Information Act 4 of 2013 (POPIA).
Mash Limited (we, our, or us) is a privately held organization. Mash is a African Herbal Emporium that manufactures health, sexual and body healing Organic products for both genders, namely for Males and Females wellness and sexuality benefits.
We are subject to the rules and regulations provided for under POPIA insofar as POPIA regulates the privacy and personal information of the juristic entities (companies) to whom we make available on our platform for registration as a business affiliate.
In making available our platform and providing services to you, we collect, use and disclose certain categories of personal information. This Privacy Policy covers how we handle your personal information.

2. PERSONAL INFORMATION WE COLLECT FROM YOU
We collect only the personal information that we need for purposes of making available on our platform and providing services to you. The personal information we collect depends on how you interact with us. We collect the following personal information directly from you:

We will notify you beforehand if we require any other categories of personal information from you.

3. SPECIAL PERSONAL INFORMATION WE COLLECT FROM YOU
For purposes of ensuring our empowerment, diversity and equal opportunity objectives, we process information relating to your nationality, racial and ethnic origin. This constitutes “special personal information” under POPIA. Where we process special personal information about you, we do so with your express consent.

4. PERSONAL INFORMATION WE RECEIVE FROM OTHER SOURCES
We do not generally obtain any personal information about you from other sources. Instead, we collect the personal information directly from you when you register on our website as an affiliate.

5. LEGAL BASIS FOR AND PURPOSE OF THE USE OF PERSONAL INFORMATION
We primarily use your personal information to register you as an affiliate, to communicate with you, and to comply with applicable laws.
We use your personal information only when we have a valid legal basis to do so. Our processing of your personal information is primarily premised on consent. We require your consent to use your personal information. You can withdraw your consent at any time by contacting us, provided that any processing of your personal information prior to such withdrawal will not be affected.
Alternatively, and in addition to your consent, we may process your personal information on one or a combination of the following grounds:
Performance of an agreement: We may need to collect and use your personal information to enter into an agreement with you.
Legitimate interest: We may use your personal information for our legitimate interests or those of third parties.
Statutory legal obligation: We may process certain of your personal information in line with requirements under POPIA and applicable laws or regulations.
If you do not provide the personal information we require, we may not be able to register you as a business affiliate on our website and you will not, accordingly, have access to the services we provide. If we enter into an agreement with you and you do not provide the personal information we require, we will not be able to perform in terms of the agreement entered with you, or we may be prevented from complying with our legal obligations.
We will only use your personal information for the purposes for which it was collected. Where necessary, we may use your personal information for another purpose only where that purpose is compatible with the original purpose for which your personal information was collected. Where we need to use your personal information for a purpose unrelated to the reason for its collection, we will notify you of this beforehand and will explain the legal basis which allows us to do so.

6. YOUR RIGHTS
You can contact us at any time to find out if we hold personal information about you. If we hold personal information about you, you can request a copy. A fee for these requests may be payable as prescribed in terms of POPIA.
You can ask us to correct any personal information that we hold about you. You are encouraged to make sure that any personal information you provide to us is kept up to date.
If you ask us to delete or stop processing your personal information, we may also then not be able to continue to provide any further services to you.
There may be circumstances in which we are not able to grant your request such as where we are required by law to keep information. We may also refuse to grant your request if it would undermine our legitimate use of the personal information if we grant it. We can also refuse your request if it jeopardizes the privacy of others, is frivolous or vexatious, or would be extremely impractical for us to grant it.
You have the right in terms of POPIA to submit a complaint to the Information Regulator about the way that we process your personal information.
The Information Regulator’s contact details are as follows:
Address: JD House, 27 Stiemens Street, Braamfontein, Johannesburg, 2001
Postal address: PO Box 31533, Braamfontein, Johannesburg, 2017
Complaints: POPIAComplaints.IR@justice.gov.za
General enquiries: inforeg@justice.gov.za

7. SHARING OF YOUR PERSONAL INFORMATION
We may share your personal information with other companies and organizations (“third parties”) with which we have a relationship, in order to provide services to you, specifically as it relates to networking and business opportunities. An example of this is where third parties request a referral from us. The third parties with whom we share your personal information will not use your personal information beyond what is necessary. We require that all third parties use appropriate security measures to protect your personal information.
We will disclose your personal information to certain authorities or third parties (such as law enforcement agencies in South Africa), where such an obligation is imposed on us by law. We may also disclose and otherwise process your personal information in accordance with applicable laws to defend our legitimate interests, for example, in civil or criminal legal proceedings.

8. SECURITY SAFEGUARDS
We use administrative, technical, and physical safeguards to protect your personal information, taking into account the nature of the personal information and the processing, and the threats posed. We are constantly working to improve on these safeguards to help keep your personal information secure.

9. UPDATING YOUR PERSONAL INFORMATION
While we take reasonable steps to keep the personal information in our possession accurate and up to date, it is your responsibility to provide us with your correct details as well as to update your personal information where appropriate.

10. RETENTION PERIODS
We retain your personal information only for so long as necessary to fulfill the purposes for which it was collected, as described in this Privacy Policy, or as required by law. When assessing retention periods, we first carefully examine whether it is necessary to retain the personal information collected and, if retention is required, work to retain the personal information for the shortest possible period permissible by law.