Effective date: 01 July 2026

Ver. 2

This Privacy Notice explains how Mwangaza Energy International (Pty) Ltd (“Mwangaza”, “we”, “us”) collects and processes personal information when you use our website at mwangaza.solar, contact us, subscribe to communications, or engage with us through our CRM/data room.

 

1) Responsible party and contact (POPIA)

Responsible Party: Mwangaza Energy International (Pty) Ltd
Registration number: 2024/374715/07
Physical address: Walmer, Gqeberha, EC, South Africa
Information Officer (POPIA): Lucky N Khumalo
Email: info@mwangaza.solar

2) What personal information do we collect

We collect information in three ways: (1) you provide it, (2) it is generated by your use of our website and (3) it is created when we manage enquiries and relationships in our CRM/data room.

 

2.1 Information you provide

Depending on what you do on the site, this may include:

  • name and surname
  • email address and phone number
  • organisation and role (if provided)
  • the content of your message/enquiry and any attachments you send us
  • information you choose to submit through on-site tools

2.2 Website and technical information

When you visit the website, our systems and service providers may process:

  • IP address
  • browser and device information
  • pages viewed and timestamps
  • referral information (how you reached the site)
  • security and performance telemetry
  • cookie or similar identifiers (where used)

2.3 CRM/data room information

If you engage with us beyond a general enquiry (for example as an investor, partner, supplier, or stakeholder), we may record and manage information in our CRM/data room, including:

  • contact and communication records
  • meeting notes and correspondence history
  • relationship and engagement status
  • documents you share with us or request from us

We do not intentionally request or collect special personal information through the public website. Please do not submit sensitive personal information unless we specifically request it for a defined purpose.

3) Why we process personal information (purposes)

We process personal information to:

  • respond to enquiries and requests
  • provide website functionality you choose to use (forms, downloads, etc.)
  • administer subscriptions and communications (where you opt in or where permitted)
  • manage stakeholder, investor, partner and supplier engagement through our CRM/data room
  • maintain security, integrity and availability of our systems (including preventing abuse and investigating incidents)
  • measure and improve website performance and content
  • comply with legal and regulatory obligations

4) POPIA basis for processing

We process personal information only where permitted under POPIA, including where processing is necessary to respond to your request, conduct and manage our operations, meet legal obligations, or conduct direct marketing where permitted.

We do not rely on “consent” as a blanket basis for everything. Where we rely on consent (for example certain marketing communications), we will ask for it in a clear way and you can withdraw it at any time.

5) Is providing information voluntary or mandatory?

  • Website browsing: voluntary.
  • Contact/enquiry forms: voluntary, but if you don’t provide the minimum details requested, we may not be able to respond.
  • Newsletter subscription: voluntary.
  • CRM/data room engagement: some information may be necessary to manage the relationship, respond to due diligence requests, or meet compliance requirements. If you don’t provide what is reasonably required for that purpose, we may be unable to proceed.

(These notice items align with POPIA’s section 18 requirements, including voluntary/mandatory supply and consequences of failure to provide information.)

6) Direct marketing (email/newsletters)

Direct marketing by electronic communications is regulated by POPIA section 69 and is generally prohibited unless a permitted basis applies (for example consent, or an existing customer relationship in limited circumstances) and every message must provide an opt-out mechanism. 

You can opt out at any time via the unsubscribe link (where provided) or by contacting us at info@mwangaza.solar.

7) Spam protection

We use spam-prevention and security tools to protect our website and communications. These tools may process technical information (such as IP address, device/browser details and interaction signals) to detect automated or abusive behaviour. This processing is used to protect the site and our users, not to profile you for marketing.

8) Cookies and analytics

We may use analytics and performance tools to understand website usage and improve the site. Depending on configuration, these tools may process identifiers such as IP address and cookie IDs. Where practical, we use aggregated reporting and minimise collection.

If we deploy cookies that are not strictly necessary, we will provide appropriate notice and controls.

9) Sharing and disclosure

We do not sell personal information.

We may share personal information with:

 

  • operators/service providers who process information for us to run the website, newsletter, spam protection and CRM/data room, under contractual safeguards
  • professional advisers (lawyers, accountants, auditors) where necessary
  • regulators or law enforcement where required or permitted by law
  • a buyer/successor in a merger, acquisition, restructuring, or similar transaction, subject to appropriate confidentiality and continuity protections

10) Cross-border transfers (POPIA section 72)

Some service providers may store or process information outside South Africa. Where personal information is transferred cross-border, we will do so only on a basis permitted by POPIA section 72, including where the recipient is bound by a law, binding corporate rules, or a binding agreement that provides protection substantially similar to POPIA, or another section 72 ground applies.

11) Security safeguards (POPIA section 19) and incidents (POPIA section 22)

We take reasonable technical and organisational measures to secure personal information, consistent with POPIA’s security safeguards requirement (including identifying risks, maintaining safeguards and reviewing them). 

If there are reasonable grounds to believe personal information has been accessed or acquired by an unauthorised person, we will take steps required by POPIA section 22, including notification “as soon as reasonably possible” after discovery, taking into account legitimate law enforcement needs and reasonable measures necessary to determine scope and restore integrity. 

12) Retention

We keep personal information only as long as necessary for the purposes described above, unless a longer period is required or permitted by law. Retention periods differ depending on category (for example enquiry history, CRM/data room records, security logs and marketing subscriptions).

13) Your rights and complaints

Subject to POPIA, you may request access to, correction of, or deletion of personal information we hold about you and you may object to certain processing. We may require reasonable proof of identity before acting on a request.

 

To exercise rights, contact: info@mwangaza.solar

 

If you believe your personal information has been handled unlawfully, you may lodge a complaint with the Information Regulator (South Africa). The Regulator accepts POPIA complaints at POPIAComplaints@inforegulator.org.za. 

14) Third-party websites

Our website may include links to third-party websites or tools. This Privacy Notice does not apply to third parties. Please review their privacy notices.

15) Changes to this notice

We may update this Privacy Notice from time to time. The latest version will be posted on our website with the effective date.


Contact Information

For inquiries about this privacy policy or to exercise your rights, please contact our Data Protection Officer at:
Email: info@mwangaza.solar