Last updated: 6 November 2026
1. Introduction and Scope
1.1 This Privacy Policy is issued by AlphaCon Holdings (Pty) Ltd (registration number 2019/292060/07), trading as AlphaCon Eng, a private company incorporated in the Republic of South Africa with its office at 10 Queen Nandi Drive, Unit 26, Briarpark, Briardene, Durban, 4051 (hereinafter “AlphaCon”). It sets out how AlphaCon, as the responsible party, collects, uses, stores, shares and otherwise processes personal information in accordance with the Protection of Personal Information Act 4 of 2013 (“POPIA”).
1.2 This Policy applies to personal information processed through the website at alphaconeng.co.za, through enquiries and correspondence directed to AlphaCon, and in the course of AlphaCon providing civil engineering, structural engineering and project management services to its clients. By using the website or submitting personal information to AlphaCon, the data subject acknowledges that such information will be processed as described in this Policy.
2. Personal Information Collected
2.1 When a data subject submits the contact form on the website, AlphaCon collects the full name, email address, organisation and the content of the message provided. When a data subject contacts AlphaCon by telephone or email, AlphaCon collects the contact details and information voluntarily furnished in that communication.
2.2 When the website is visited, the hosting server automatically records technical information, including the Internet Protocol (IP) address, browser type, and the date and time of access, for security, abuse prevention and the proper functioning of the website. The IP address of a person submitting the contact form is used temporarily to limit repeated submissions.
2.3 In the course of rendering professional services, AlphaCon may process personal information of clients, their representatives, contractors and other project stakeholders, including names, contact details, property and site information, and information contained in project documentation.
3. Purpose of Processing
3.1 AlphaCon processes personal information only for lawful purposes related to its business, namely to respond to enquiries and requests for proposals, to conclude and perform agreements for engineering and project management services, to communicate with clients and project stakeholders, to comply with legal, regulatory and professional obligations (including those imposed by the Engineering Council of South Africa and applicable built-environment legislation), and to maintain the security and functionality of the website.
3.2 AlphaCon does not sell personal information and does not use personal information submitted through the website for unsolicited direct marketing. Should AlphaCon wish to send direct marketing, it will do so only in compliance with section 69 of POPIA.
4. Lawful Basis
4.1 AlphaCon processes personal information on the grounds that the data subject has consented to the processing, that the processing is necessary to conclude or perform a contract to which the data subject is a party, that the processing is required to comply with an obligation imposed by law, or that the processing is necessary to pursue the legitimate interests of AlphaCon or of a third party to whom the information is supplied, as contemplated in section 11 of POPIA.
5. Cookies
5.1 The website uses cookies that are strictly necessary for its operation. Any non-essential cookies are only placed with the consent of the visitor, which may be given, withheld or withdrawn at any time through the cookie consent banner displayed on the website. Fonts used by the website are hosted locally and are not retrieved from third-party servers.
6. Sharing of Personal Information
6.1 AlphaCon shares personal information only to the extent necessary for the purposes set out in this Policy, including with its website hosting and email service providers, professional advisers, and, where required for the execution of a project, with sub-consultants, contractors and relevant authorities. AlphaCon requires every operator processing personal information on its behalf to do so in accordance with POPIA and to maintain appropriate security safeguards, as contemplated in sections 20 and 21 of POPIA.
6.2 AlphaCon will disclose personal information where it is required to do so by law, court order or a competent regulatory authority.
7. Cross-Border Transfers
7.1 AlphaCon’s website is hosted within the Republic of South Africa. Where any service provider stores or processes personal information outside the Republic, AlphaCon will ensure that such transfer complies with section 72 of POPIA, including that the recipient is subject to laws, binding corporate rules or a binding agreement providing an adequate level of protection.
8. Security Safeguards
8.1 AlphaCon has implemented reasonable technical and organisational measures to secure the integrity and confidentiality of personal information and to prevent its loss, damage, unauthorised destruction, or unlawful access or processing. These measures include access controls, encrypted website connections, security software, and regular backups. Should AlphaCon have reasonable grounds to believe that personal information has been accessed or acquired by an unauthorised person, it will notify the Information Regulator and the affected data subjects as required by section 22 of POPIA.
9. Retention
9.1 AlphaCon retains personal information only for as long as is necessary to achieve the purpose for which it was collected, or for such longer period as may be required or permitted by law, including the record-keeping obligations applicable to tax, company and professional engineering records. Thereafter, personal information will be destroyed, deleted or de-identified in a manner that prevents its reconstruction.
10. Rights of Data Subjects
10.1 Subject to the provisions of POPIA and the Promotion of Access to Information Act 2 of 2000, a data subject has the right to request confirmation of whether AlphaCon holds personal information about him or her, to request access to such information, to request the correction or deletion of personal information that is inaccurate, irrelevant, excessive, out of date, incomplete, misleading or obtained unlawfully, to object to the processing of personal information on reasonable grounds, and to withdraw consent where processing is based on consent.
10.2 Requests in terms of this clause must be directed to the Information Officer at the contact details set out below. AlphaCon may require reasonable proof of identity before acting on any such request.
11. Information Officer
11.1 The Information Officer of AlphaCon is Mr Darryn Kisten, Director, who may be contacted by email at darryn@alphaconeng.co.za, by telephone on +27 67 715 6134, or in writing at 10 Queen Nandi Drive, Unit 26, Briarpark, Briardene, Durban, 4051.
12. Complaints
12.1 A data subject who is dissatisfied with the manner in which AlphaCon has processed his or her personal information is encouraged first to contact the Information Officer so that the matter may be resolved. A data subject also has the right to lodge a complaint with the Information Regulator (South Africa), whose contact details are published at www.inforegulator.org.za.
13. Amendments
13.1 AlphaCon may amend this Policy from time to time to reflect changes in law or in its processing activities. The current version will always be published on the website, and the date of the latest amendment will be indicated at the top of this Policy.