Privacy.

This page says what personal information we collect, why, who sees it, and what you can do about it. It covers this website, the trade portal, and the accounts we run for customers and suppliers.

Who we are

SONAH Group (Pty) Ltd, registration 2026/373458/07, head office Cape Town, is the responsible party for the personal information described here. Our Information Officer is the General Manager. Write to admin@sonahgroup.com.

What we collect, and why

• The contact form: your name, phone number, email address, company and what you write to us, so a person can answer you.
• A trade account: the company's registration and VAT details, the people we deal with and their contact details, delivery addresses, quotes, orders, invoices and payment history, so we can supply you, invoice you and keep the records the law requires.
• A credit application: the information needed to decide on credit terms. We share it with our credit insurer and may obtain a credit report.
• A job application: your CV and what you send with it, so we can consider you for a role.
• The websites: www.sonahgroup.com and portal.sonahgroup.com use the cookies they need to work, such as your session and language. We run no third-party analytics or advertising cookies.

Marketing

We send news and offers only to existing customers and to people who have opted in. Every message carries a way to opt out, and we never buy contact lists.

Who sees it

Our staff who need it for the job. The companies that run our systems: our business platform, our email, and the courier that delivers your order. Our credit insurer, for credit applications. Our bank, accountants and auditors. A regulator or a court, when the law requires it. We do not sell personal information. Some of our providers store information outside South Africa, under privacy laws or contracts that protect it at least as well as POPIA does.

How long we keep it

For as long as you hold an account with us, and for the period the law requires after that, which for company and tax records is at least five years. We delete what we no longer need.

Security

Accounts on the trade portal are password-protected and we limit access to the people who need it. If a breach ever affects you, we tell you and the Information Regulator as the law requires.

Your rights

You can ask what we hold about you, ask us to correct or delete it, object to direct marketing, and withdraw consent where we rely on it. Write to admin@sonahgroup.com. We answer within 30 days. If you are not satisfied, you can complain to the Information Regulator (South Africa) at inforegulator.org.za.

Changes

When this notice changes, the date at the top changes with it.