This policy explains how Five Point Group collects, uses, shares and protects personal information when you use www.fivepointgroup.co.za or contact us, in line with the Protection of Personal Information Act 4 of 2013 (POPIA).
1. Who we are
Five Point Group (formerly Penta Building Projects) is the responsible party for this information.
- Legal name: [registered legal entity name and type, e.g. … (Pty) Ltd], trading as Five Point Group
- Registration number: [CIPC registration number]
- Address: 205, 3de Weg, Sinoville, Pretoria, 0182, Gauteng
- Phone: 012 980 5019
- Email: info@fivepointgroup.co.za
2. Our Information Officer
Our Information Officer oversees our POPIA compliance and handles privacy requests and complaints.
- Information Officer: [name – to be confirmed; suggested: Wouter Fourie, Director]
- Email: [Information Officer email]
- Phone: 012 980 5019
3. What we collect
- Contact details: first name, last name, email address, phone number and company name.
- Enquiry details: the service you need and anything you include in your message, such as project location, scope, budget or timing.
- Technical details sent with a form submission: page address and title, browser and device type, and date and time. Our hosting providers also see your IP address when you load a page.
- Correspondence between you and us.
- If you appoint us, or work with us as a supplier or subcontractor: the contract, billing and project information that relationship needs.
Please do not send special personal information (such as health, religious or biometric information) or children's information through the website.
4. Where we get it
Mostly directly from you. Sometimes from your organisation when you contact us on its behalf, from other members of a project's professional team, or from public sources such as company registers.
5. Why we use it and our lawful basis
We use personal information only for these purposes, or compatible ones, and only where section 11 of POPIA allows:
- To respond to your enquiry, prepare a proposal or quotation and arrange a consultation or site visit: needed for steps you asked for before a contract, and in our legitimate interest.
- To deliver and administer services we are appointed for: needed to perform our contract with you.
- To meet legal, tax, health and safety and professional obligations: required by law.
- To keep our website and systems secure: in our legitimate interest.
- To send you news or marketing: only with your consent.
Where we rely on legitimate interests, you may object at any time (see section 11).
6. Direct marketing
We do not use enquiry form details for marketing. We will only send you direct marketing by email, SMS, phone or other electronic means with your consent, as section 69 of POPIA requires, or if you are an existing client and it concerns similar services. Every marketing message will include a free, simple way to opt out.
7. Who we share it with
We do not sell personal information. We share it only with:
- Service providers (operators) acting for us: HighLevel (GoHighLevel / LeadConnector) for website hosting, the enquiry form and our CRM system; Cloudflare for content delivery and security on the hosting platform; Google for the website's fonts; and our email and IT providers [name of email / IT provider].
- Our professional advisers, such as auditors, lawyers and insurers.
- Project partners, subcontractors and professional team members, only where your project needs it.
- Authorities, where the law requires it.
Our operators must keep personal information confidential and secure and use it only on our instructions.
8. Transfers outside South Africa
Some providers, including HighLevel (United States), store or process information outside South Africa. We transfer personal information across borders only as section 72 of POPIA permits: where the recipient is bound by law, binding corporate rules or a binding agreement giving adequate protection [confirm data processing agreement with HighLevel], where the transfer is needed to respond to your request or perform a contract with you, or with your consent.
9. How we protect it
We take appropriate, reasonable technical and organisational measures against loss, damage and unauthorised access (section 19 of POPIA), including encrypted (HTTPS) connections, CRM access limited to staff who need it, and service providers bound by written agreements. If a security compromise occurs, we will notify the Information Regulator and affected people as section 22 requires.
10. How long we keep it
- Enquiries that do not lead to an appointment: [retention period, e.g. 24 months] after our last contact, then deleted or de-identified.
- Client and project records: as long as the project and our legal, tax, contractual and professional record-keeping obligations require [retention period, e.g. at least 5 years after completion].
- Records of consent or objection: as long as needed to show we respected your choice.
11. Your rights
Under POPIA you may:
- ask whether we hold personal information about you and request a copy;
- ask us to correct it, or to delete it if it is inaccurate, irrelevant, excessive, out of date, incomplete, misleading or unlawfully obtained, or we may no longer keep it;
- object to processing based on legitimate interests, and to direct marketing at any time;
- withdraw consent at any time, without affecting earlier processing; and
- complain to the Information Regulator.
Contact our Information Officer by email, phone or post. Objections and requests to correct or delete information are free; you may use the Information Regulator's forms, but need not. We may first confirm your identity and will respond in writing within 30 days. Requests for copies of records may be handled under PAIA (section 15).
12. The Information Regulator
If you are unhappy with how we handle your information, please contact us first. You may also complain to the Information Regulator:
- Website: inforegulator.org.za
- Complaints: POPIAComplaints@inforegulator.org.za or the eServices portal
- Enquiries: enquiries@inforegulator.org.za, 010 023 5200 or toll-free 0800 017 160
- Address: Woodmead North Office Park, 54 Maxwell Drive, Woodmead, Johannesburg, 2191
13. Children
Our website and services are not aimed at children under 18, and we do not knowingly collect their information. If you believe a child has sent us personal information, contact us and we will delete it.
14. Cookies and similar technologies
Our website uses no analytics, advertising or social media tracking and sets no cookies of its own, which is why there is no cookie banner. What does happen:
- Security cookie: the content delivery network used by our hosting platform (Cloudflare) may set a strictly necessary cookie, __cf_bm, that helps tell visitors from automated bots. It expires after 30 minutes and is not used to track you.
- Session storage: your scroll position is kept in your browser's session storage (deleted when you close the tab) so the back button returns you to the same place.
- Fonts: fonts load from Google Fonts, so your browser sends your IP address and browser details to Google. See Google's privacy policy.
- Images: images are delivered from our hosting provider's (HighLevel's) file storage.
- Enquiry form: your details go to our CRM (HighLevel / LeadConnector) only when you press Send enquiry, with the page address and your browser type.
You can block or delete cookies in your browser settings, though blocking strictly necessary cookies may affect how the site works. If we ever add analytics or other non-essential cookies, we will update this section first and ask for consent where required.
15. Access to information (PAIA)
You may request records we hold under the Promotion of Access to Information Act 2 of 2000 (PAIA). Our PAIA manual explains how to make a request, the records we hold and any prescribed fees. It is available [link to PAIA manual – to be published], at our office, or from our Information Officer. PAIA complaints go to the Information Regulator at PAIAComplaints@inforegulator.org.za.
16. Changes to this policy
We may update this policy. The latest version and its date will always be on this page.
17. Contact us
Questions? Contact our Information Officer at info@fivepointgroup.co.za, on 012 980 5019, or at 205, 3de Weg, Sinoville, Pretoria, 0182.
Effective date: [effective date]
