Privacy
Last updated: 26 August 2026
1. Who we are
Madeko (Pty) Ltd (“Madeko”, “we”, “us” or “our”) is a South African furniture, millwork and product-design business.
Madeko is the responsible party for the personal information described in this notice.
Registration number: [CIPC registration number]
Business address: [full physical address, Benoni, South Africa]
Information Officer: Marco de Koker
Telephone: [telephone number]
Email: marco@madeko.co.za
Website: [website URL]
2. Scope
This notice explains how we collect, use, disclose, retain and protect personal information when someone:
Visits our website;
Submits an enquiry;
Requests or receives a quotation;
Becomes a client, supplier or contractor;
Collaborates with us on a project; or
Otherwise communicates or does business with us.
“Personal information” has the meaning given to it by the Protection of Personal Information Act 4 of 2013 (“POPIA”).
3. Information we collect
Depending on the relationship and interaction, we may collect:
Contact and identity information
Name and surname;
Email address and telephone number;
Business address;
Company, role and professional details; and
Registration, tax or identification information where reasonably required.
Enquiry and communication information
Contact-form submissions;
Emails and other correspondence;
Meeting notes; and
Preferences and instructions.
Client and project information
Project briefs and requirements;
Site and delivery information;
Measurements, drawings, photographs and specifications;
Technical, manufacturing and installation information;
Revisions, feedback and approvals; and
Information contained in client-supplied documents.
Commercial and transaction information
Quotations, contracts and purchase orders;
Invoices and payment records;
Bank and tax information where required; and
Project and account history.
Website and device information
IP address;
Browser and device information;
Dates, times and pages visited;
Referral information;
Security and diagnostic logs; and
Cookie or similar technology data.
Please avoid including unnecessary identity numbers, financial information, special personal information or confidential project files in the initial website enquiry form.
4. How we collect information
We collect information:
Directly from the person concerned;
Through our website and communication channels;
From a client, employer or colleague who identifies a project contact;
From suppliers, contractors and professional advisers;
From public records and information deliberately made public; and
Automatically through website infrastructure and cookies.
Where information about another person is supplied to us, the supplier should be authorised to do so and should direct that person to this notice where appropriate.
5. Why we use information
We process personal information to:
Receive, assess and respond to enquiries;
Prepare proposals and take steps requested before entering into a contract;
Conclude, perform and administer agreements;
Create and deliver design documentation;
Coordinate with clients, manufacturers, contractors and other project participants;
Manage billing, payments, accounting and tax;
Maintain business and project records;
Operate, secure and improve our website and systems;
Prevent fraud, misuse and security incidents;
Comply with legal and regulatory obligations;
Establish, exercise or defend legal rights; and
Send marketing communications where legally permitted.
Under POPIA, processing may be justified by consent, contractual necessity, a legal obligation, protection of a legitimate interest or our legitimate business interests. We will not rely on consent where another lawful justification is more appropriate.
Providing information through the enquiry form is voluntary. However, without the requested contact and project information, we may be unable to respond, prepare a proposal or provide services.
6. Cookies
Cookies are small files or similar technologies used by websites and online services.
We may use:
Essential technologies
These support security, network management, form delivery, accessibility and other functions required for the website to operate. They cannot always be disabled through our website.
Analytics technologies
If enabled, these help us understand how visitors use the website so that we can improve its performance and content.
Embedded-content or marketing technologies
If enabled, third-party media, social features or marketing tools may place or access information on a visitor’s device.
Where consent is legally required, non-essential technologies will remain disabled until the visitor makes a choice. A visitor may withdraw or change that choice through Cookie settings or browser controls.
Cookie schedule
Complete this table after scanning the deployed website. Delete any category that is not used.
Provider or cookiePurposeCategoryDuration[website platform cookies][purpose]Essential[duration][form/security provider][purpose]Essential[duration][analytics provider, if any]Website measurementAnalytics[duration][embedded or marketing provider, if any][purpose]Marketing/embedded[duration]
Blocking cookies may affect some website functions. Browser controls do not necessarily prevent other technologies from operating.
7. Sharing information
We may share personal information, where reasonably necessary, with:
Website, hosting, email, cloud-storage and IT providers;
Manufacturers, contractors and project collaborators;
Accountants, auditors, banks, insurers and payment providers;
Legal and other professional advisers;
Regulators, courts, law-enforcement bodies and public authorities;
A purchaser, successor or adviser involved in a lawful business transaction; and
Other persons authorised by the individual concerned.
Service providers may only process information for authorised purposes and must provide appropriate protection.
We do not sell personal information.
8. International processing
Because Madeko works remotely and may use international service providers, personal information may be stored or processed outside South Africa.
Relevant providers may include:
[website/hosting provider and processing locations]
[email provider and processing locations]
[cloud-storage/project platform and processing locations]
[analytics provider and processing locations, if applicable]
We will only transfer personal information outside South Africa in accordance with section 72 of POPIA—for example, where the recipient is subject to adequate protection, appropriate contractual safeguards apply, the person has consented, or the transfer is necessary for a contract or requested pre-contractual steps.
If European Union, European Economic Area or United Kingdom data-protection law applies to a particular activity, we will also provide the safeguards and rights required by that law.
9. Retention
We retain personal information only for as long as reasonably necessary for the purpose for which it was collected, including contractual, legal, accounting, tax, dispute-resolution and security purposes.
Generally:
Unsuccessful or inactive enquiries may be retained for up to 24 months after the last meaningful interaction;
Client, project and transaction records are retained for the applicable contractual and statutory periods;
Information required for an existing dispute may be retained until the dispute and relevant legal periods have ended; and
Cookie and website-log information is retained for the periods stated in the cookie schedule or required for security.
Information will then be securely deleted, destroyed or de-identified where reasonably practicable.
10. Security
We use reasonable technical and organisational measures designed to protect personal information against loss, unauthorised access, interference, misuse, alteration or disclosure.
These measures may include access controls, strong authentication, encryption, backups, software updates, device security, confidentiality obligations and service-provider reviews.
No internet transmission or storage system is completely secure. If a security compromise affects personal information, we will make the notifications required by applicable law.
11. Your rights
Subject to applicable law, a person may:
Ask whether we hold their personal information;
Request access to that information;
Request correction of inaccurate or incomplete information;
Request deletion or destruction where we are no longer authorised to retain it;
Object to processing based on particular lawful justifications;
Withdraw consent where processing relies on consent;
Object to direct marketing at any time; and
Complain to the Information Regulator.
Where EU, EEA or UK data-protection law applies, additional rights may include restriction of processing, data portability and objection to certain processing based on legitimate interests.
To exercise a right, email marco@madeko.co.za. We may request reasonable proof of identity and authority. Access to records is also subject to the procedure described in the PAIA section of the Legal page.
12. Direct marketing
We will only send electronic direct marketing where permitted by law. Each marketing communication will provide a reasonable way to opt out.
We will not treat a project enquiry as consent to unrelated marketing. Where consent is required, it will be requested separately.
13. Children
Our website and services are intended for business and professional users and are not directed at children. A child should not submit personal information without the involvement of a parent or other competent person.
14. Third-party websites
Links or embedded services provided by third parties may have their own privacy practices. We encourage visitors to read the relevant third party’s privacy notice before providing information.
15. Changes to this notice
We may update this notice when our practices, service providers or legal obligations change. The updated version will be posted here with a revised date.
16. Contact and complaints
Privacy questions and requests should be directed to:
Marco de Koker
Information Officer
Madeko (Pty) Ltd
Email: marco@madeko.co.za
Telephone: [telephone number]
Address: [full physical address]
A person who believes their personal information has been processed contrary to POPIA may complain to the Information Regulator:
Information Regulator (South Africa)
Woodmead North Office Park
54 Maxwell Drive
Woodmead, Johannesburg, 2191
Telephone: 010 023 5200
Email: POPIAComplaints@inforegulator.org.za