Privacy Policy for Heroes Advertising

1. Introduction and Overview

This Privacy Policy explains how Heroes Advertising (Pty) Ltd (“Heroes Advertising,” “we,” “us,” or “our”) collects, uses, discloses, and protects your personal information in accordance with the Protection of Personal Information Act 4 of 2013 (POPIA). As a responsible party under POPIA, we are committed to ensuring that your personal information is handled with the utmost care and in compliance with applicable data protection laws.

This policy applies to all personal information collected through our website (https://heroesadvertising.co.za/), our business operations, and other channels through which we interact with advertisers, restaurants, and other stakeholders.

2. Personal Information We Collect

2.1 Types of Personal Information

Heroes Advertising collects personal information as defined in POPIA, which includes information relating to identifiable, living, natural persons, and where applicable, identifiable, existing juristic persons[6]. This includes, but is not limited to:

For Advertisers:

Company name and registration details
Contact person’s name, job title, and role
Contact details (email address, telephone number)
Business type and industry
Area of interest and restaurant preferences
Marketing preferences

For Restaurants and similar businesses:

Restaurant name and type
Contact person’s name
Contact details (email address, telephone number)
Restaurant location (city/suburb, province)
Feedback on advertising campaigns

For Website Visitors:

Name and email address for newsletter subscriptions
Information provided through our contact forms
Information collected through cookies and similar technologies
Usage data and browsing behaviour

2.2 Collection Methods

We collect personal information through:

Our website forms
Direct interactions with our staff
Email communications
Telephone communications
Newsletter subscriptions
Feedback forms
Social media engagement

3. Purpose of Collection and Processing

We collect and process your personal information for the following specific purposes:

3.1 For Advertisers:

To provide our advertising services and manage advertising campaigns
To facilitate the selection of targeted restaurants and areas for advertising
To process payments and manage financial transactions
To communicate about our services and promotional offers
To fulfil our contractual obligations
To improve our services based on feedback and analysis

3.2 For Restaurants and similar businesses:

To supply free branded sugar sachets
To manage restaurant participation in advertising campaigns
To facilitate communication between advertisers and restaurants
To collect feedback on advertising campaigns
To process custom/personalized sachet orders
To update restaurants on new advertising campaigns and opportunities

3.3 For Website Visitors:

To respond to inquiries submitted through our contact forms
To send newsletters and marketing communications to subscribers
To improve our website functionality and user experience
To analyse website traffic and usage patterns
To secure our website and systems

4. Legal Basis for Processing

We process your personal information in accordance with Section 11 of POPIA, based on one or more of the following legal grounds:
- Your consent, which is voluntary, specific, and informed
- Processing necessary for performance of a contract
- Compliance with legal obligations
- Legitimate interests pursued by Heroes Advertising or a third party
- Protection of your or another person’s legitimate interests
- Public interest purposes
Where we rely on your consent for processing, you have the right to withdraw such consent at any time by contacting us using the details provided in this policy

5. Disclosure of Personal Information

5.1 Categories of Recipients

We may share your personal information with the following categories of recipients:
- Our employees who need access to perform their duties
- Service providers and operators who process information on our behalf
- Professional advisors (accountants, lawyers, consultants)
- Regulatory authorities and government agencies when required by law
- Third-party vendors providing technical services (hosting, security, payment processing)
- Other parties with your consent

5.2 International Transfers

If we transfer your personal information outside of South Africa, we will ensure that:
- The recipient country provides an adequate level of protection for personal information
- The recipient is subject to binding corporate rules or binding agreements that provide adequate safeguards
- You have consented to the transfer
- The transfer is necessary for the performance of a contract or for your benefit
- The transfer is justified by compelling legitimate interests

6. Retention of Personal Information

We retain your personal information only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable laws or regulations. Our retention practices are guided by the following principles:

Personal information is retained for the period required to serve the purpose for which it was collected
Retention periods are determined by legal requirements, contractual obligations, and business needs
Once the retention period expires, your personal information is securely deleted or anonymized
You may request the deletion of your personal information, subject to applicable laws

We maintain a data retention schedule that outlines specific retention periods for different categories of information.

7. Data Security Measures

Heroes Advertising implements appropriate technical and organizational measures to protect your personal information from loss, damage, unauthorized destruction, unlawful access, or processing. Our security measures include:

7.1 Technical Measures:

Firewalls, anti-virus, and intrusion prevention systems
Encryption of data in transit and at rest
Secure password policies and multi-factor authentication
Regular security patching and updates
Data loss prevention tools
Backup systems and disaster recovery procedures

7.2 Organizational Measures:

Regular security risk assessments
Employee training on data protection and security
Access controls restricting information to authorized personnel only
Documented security policies and procedures
Incident response planning
Regular audits of security controls

8. Data Breach Notification

In the event of a security breach involving your personal information, we will:

Notify the Information Regulator within a reasonable time
Notify affected data subjects as soon as reasonably possible
Provide information on the possible consequences of the breach
Describe measures taken or proposed to address the breach
Recommend actions to mitigate potential adverse effects

Notifications will be made by email, website notices, or other appropriate means, depending on the circumstances and contact information available.

9. Your Rights Under POPIA

Under POPIA, you have the following rights regarding your personal information:

9.1 Right to Access:

You have the right to request confirmation of whether we hold your personal information and to access that information.

9.2 Right to Correction:

You have the right to request correction of your personal information if it is inaccurate, incomplete, misleading, or out of date.

9.3 Right to Deletion:

You have the right to request deletion or destruction of your personal information under certain circumstances.

9.4 Right to Object::

You have the right to object to the processing of your personal information on reasonable grounds.

9.5 Right to Withdraw Consent:

Where processing is based on consent, you have the right to withdraw that consent at any time.

9.6 Right to Complain:

You have the right to submit a complaint to the Information Regulator regarding alleged interference with your personal information

To exercise any of these rights, please contact our Information Officer using the contact details provided below.

10. Cookies and Similar Technologies

10.1 What Are Cookies?

Cookies are small text files placed on your device when you visit our website. They enable our website to recognize your device and remember certain information about your visit.

10.2 How We Use Cookies:

We use cookies and similar technologies to:

Ensure proper functioning of our website
Improve user experience
Analyse website traffic and usage patterns
Remember your preferences
Facilitate targeted advertising

10.3 Types of Cookies We Use:

Essential cookies: Necessary for the website to function properly
Performance cookies: Collect information about how visitors use our website
Functionality cookies: Remember choices you make to improve your experience
Targeting/advertising cookies: Used to deliver relevant advertisements

10.4 Cookie Management:

You can manage cookies through your browser settings. Most browsers allow you to refuse cookies, accept cookies from specific websites, or disable cookies altogether. Please note that disabling cookies may affect the functionality of our website

11. Children's Privacy

We do not knowingly collect personal information from children under the age of 18 without appropriate parental or guardian consent. If we learn that we have collected personal information from a child under 18 without verifiable parental consent, we will take appropriate steps to delete that information. If you believe we may have collected information from a child under 18, please contact our Information Officer

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, services, or applicable laws. We will notify you of any material changes by posting the updated Privacy Policy on our website and indicating the date of the latest revision. We encourage you to review this policy periodically to stay informed about how we are protecting your information

13. Contact Information

13.1 Information Officer:

Heroes Advertising has appointed an Information Officer responsible for ensuring compliance with POPIA and addressing any queries or requests regarding your personal information.

13.2 Contact Details:

Information Officer: Lizel de Jager
Email: enquiries@heroesadvertising.co.za
Telephone: 082 928 0071
Postal Address: 74 St Tropez, Findhorn Street, New Market Park, Alberton, 1449, South Africa

13.3 Information Regulator:

If you believe that we have not adequately addressed your concerns, you have the right to lodge a complaint with the Information Regulator of South Africa:

Website: https://www.justice.gov.za/inforeg/
Email: inforeg@justice.gov.za
Postal Address: P.O Box 31533, Braamfontein, Johannesburg, 2017

14. Consent

By using our website and services, you acknowledge that you have read and understood this Privacy Policy. Where required by law, we will seek your explicit consent to process personal information collected on our website or volunteered by you. You may withdraw your consent at any time by contacting our Information Officer

15. Governing Law

This Privacy Policy is governed by the laws of the Republic of South Africa, including but not limited to the Protection of Personal Information Act 4 of 2013 (POPIA).

Last Updated: 27 March 2025