PRIVACY AND DATA PROTECTION

Privacy Policy and POPIA Notice

How MNA Investments collects, uses, stores, shares and protects personal information through the BEE Procured V5 website and service.

Effective: 20 September 2026 South Africa Version 1.0
Legal review required: This operational privacy notice should be reviewed by a South African attorney or POPIA specialist before final legal approval.

1. Scope and responsible party

MNA Investments owns and operates the BEE Procured V5 website and procurement-management software. This policy applies to website visitors, prospective clients, account holders, authorised users, suppliers and other people whose personal information is processed through the service.

MNA Investments acts as the responsible party for account, sales, support and service-administration information. Where a client uploads supplier, employee, contact, procurement or certificate information, the client may be the responsible party and MNA Investments may act as an operator under that client’s lawful instructions.

2. Personal information we collect

  • Names, usernames, job titles, business email addresses, telephone numbers and access roles.
  • Company and supplier names, registration numbers, addresses, trade names and contact details.
  • Procurement values, supplier-linking information and B-BBEE-related business information.
  • B-BBEE scorecard and certificate information, supporting documents, notes, verification-agency details and review history.
  • Login, upload, update, approval, sampling and audit activity, including dates, users and technical logs.
  • Information supplied through demo, registration, enquiry and support forms.
  • Website usage information collected through essential cookies and, where enabled, analytics technologies.

Users must not upload unnecessary special personal information or documents that are unrelated to an authorised procurement, compliance or support purpose.

3. Why and how we process information

We process personal information to respond to enquiries, provide demonstrations and subscriptions, manage accounts and permissions, calculate and report procurement information, link supplier evidence, store and review certificates, provide support, maintain auditability, improve the service, secure our systems and meet legal or contractual duties.

Processing takes place with consent where required, to perform a contract or requested service, to comply with legal obligations, or for a legitimate business purpose that does not override the rights of the data subject. Optional marketing communication requires a separate choice and may be withdrawn.

4. Sharing and service providers

MNA Investments does not sell personal information. Information may be made available to authorised employees, client users, professional advisers, verification agencies where authorised, hosting and technology providers, and regulators or law-enforcement authorities where disclosure is legally required.

Service providers may process information only for the agreed purpose and must apply appropriate confidentiality and security safeguards. Cross-border processing, if introduced, must use safeguards required by POPIA and be disclosed where appropriate.

5. Cookies and website technologies

The website may use essential cookies to maintain sessions, protect accounts and remember necessary preferences. Optional analytics or marketing cookies should operate only after the required notice and consent. Visitors can control non-essential cookies through the available preference control or their browser settings, although disabling essential cookies may prevent secure functions from working.

6. Information security

MNA Investments applies reasonable administrative and technical safeguards, including role-based access, password protection, secure connections, activity logging, review workflows, access restrictions and system maintenance. Access is limited to authorised people according to their responsibilities.

No internet service is completely risk-free. Suspected loss, unauthorised access or security incidents should be reported promptly to info@econobee.co.za so that the matter can be assessed, contained and notified where required.

7. Retention and deletion

Personal information is retained only for as long as needed for the purpose for which it was collected and for applicable contractual, legal, audit, dispute and backup periods. Demo information is separated from production client information and expires or is removed according to the demo terms. Deletion requests are assessed against legal, contractual, audit and security obligations.

8. Your POPIA rights

Subject to POPIA and lawful limitations, a data subject may:

  • ask whether personal information is held and request access to it;
  • request correction or deletion of inaccurate, excessive or unlawfully processed information;
  • object to certain processing;
  • withdraw consent where consent is the processing basis; and
  • lodge a complaint with MNA Investments or the Information Regulator of South Africa.

We may need to verify identity and authority before acting on a request. A request affecting client-controlled information may be referred to the relevant client as responsible party.

9. Contact and complaints

Privacy enquiries, access requests and complaints may be sent to:
info@econobee.co.za
Telephone: 0861 11 3094

If a concern is not resolved, a complaint may be submitted to the Information Regulator of South Africa through its official complaints process or eServices portal.

Changes to this policy

This policy may be updated when the service, processing activities or legal requirements change. The effective date and version shown above identify the current published notice.