Privacy Policy

We may collect the following categories of personal information:

‍

• Identity information: your full name, job title and the organisation you represent.
• Contact information: email address, phone number and physical or postal address.
• Project information: details about your building project including size, location, use type, timeline and budget range, as provided when you request a quote or use our Estimate Calculator.
• Communication records: emails, phone call notes and other correspondence between you and AMBS.
• Technical information: IP address, browser type, device type, pages visited and time spent on our website. This is collected automatically via standard web server logs and, where applicable, cookies.
• Referral information: how you heard about AMBS (e.g. Google Search, referral, social media).

We do not knowingly collect personal information from individuals under the age of 18. If you believe a minor has submitted information to us, please contact us immediately so we can delete it.

Under POPIA, we process personal information on the following grounds:

‍

• Contractual necessity: processing required to enter into or perform a contract with you (e.g. preparing a quote or delivering a project).
• Legitimate interest: processing that is in our legitimate business interests and does not unduly prejudice your rights (e.g. website analytics, following up on submitted enquiries).
• Legal obligation: processing required by South African law (e.g. tax records, CIDB compliance).
• Consent: where we have requested and obtained your explicit consent for a specific purpose such as marketing communications. You may withdraw consent at any time by contacting us.

AMBS does not sell, rent or trade your personal information. We may share your information only in the following circumstances:

‍

• Service providers: third-party companies that assist us in operating our business (e.g. email hosting, CRM software, logistics partners), bound by confidentiality and data processing agreements.
• Professional advisers: lawyers, accountants and auditors where required for legal or financial compliance.
• Project subcontractors: specialist suppliers or erection subcontractors engaged on your project, limited to the information necessary to deliver the project.
• Regulatory authorities: where disclosure is required by law, court order or government authority.

Where we transfer personal information outside South Africa, we take reasonable steps to ensure adequate protection equivalent to POPIA is in place.

We retain personal information only for as long as necessary for the purposes for which it was collected, or as required by law. Our general retention periods are:

‍

• Quote enquiries (not converted): 24 months from last contact.
• Active and completed client records: 7 years from project completion, in line with South African tax and company law requirements.
• Website analytics data: 26 months in aggregate, anonymised form.
• Marketing consent records: retained until consent is withdrawn.

When personal information is no longer required, we securely delete or anonymise it.

You have the following rights regarding your personal information:

‍

• Access: request a copy of the personal information we hold about you.
• Correction: request that we correct inaccurate or incomplete information.
• Deletion: request deletion of your personal information where we have no legal basis to retain it.
• Objection: object to processing based on legitimate interest, particularly for direct marketing.
• Withdrawal of consent: withdraw consent at any time where processing is based on consent, without affecting the lawfulness of prior processing.
• Complaint: lodge a complaint with the Information Regulator of South Africa at inforegulator.org.za if you believe your rights have been violated.

To exercise any of these rights, contact our Information Officer at info@ambs.co.za. We will respond within 30 days.

We implement appropriate technical and organisational security measures to protect your personal information against unauthorised access, disclosure, alteration, loss or destruction. These measures include:

‍

• SSL/TLS encryption for all data transmitted via our website.
• Access controls and role-based permissions for staff who handle personal data.
• Regular security assessments of our internal systems.
• Employee training on data protection obligations under POPIA.

While we take all reasonable precautions, no method of transmission over the internet is 100% secure. In the event of a security compromise affecting your personal information, we will notify you and the Information Regulator as required by POPIA.

Our website uses cookies and similar technologies to improve your browsing experience and gather analytics. Cookies are small text files stored on your device.

‍

We use the following types of cookies:

‍

• Essential cookies: required for the website to function correctly. These cannot be disabled.
• Analytics cookies: help us understand how visitors interact with our website (page views, time on page, referral source). Analytics data is aggregated and does not identify individuals.

You can manage or disable cookies through your browser settings. Disabling cookies may limit some functionality of our website. By continuing to use our website without adjusting your browser settings, you consent to our use of cookies as described above.