Skip to content

Fire Sands Group

Privacy Policy

Last Updated – November 2025

Your data

Full policy

Fire Sands Group – Privacy Policy

Last updated: November 2025

Fire Sands Group (“Fire Sands”, “we”, “our”, or “us”) is committed to protecting your privacy and ensuring that your personal information is collected, used, stored, and disclosed responsibly and transparently. This Privacy Policy explains how we handle personal information when you visit our website, engage with us online, or interact with our services.

 

This Policy complies with:

  • South Africa: Protection of Personal Information Act (POPIA)

  • New Zealand: Privacy Act 2020

  • UK Alignment: UK GDPR (informational alignment only; we do not target UK individuals directly for provisioning of services)

 

If you do not agree with any part of this Policy, please discontinue using our website and services.

  1. Who We Are

    Fire Sands Group – Operating in South Africa and New Zealand. Addresses: Liebenberg Road, Eastleigh, Edenvale, South Africa; Dunedin, Otago, New Zealand. Contact for privacy: projects@firesands.com. Data Protection Officer: Riley Pitman, Technical Officer.

  2. Personal Information We Collect – Automatically: IP, device, browser, cookies, location, usage (e.g. Google Analytics, HubSpot, Microsoft Clarity). Provided by you: names, email, phone, organisation, enquiry details. We do not collect health, biometrics, identity documents, or data from minors.

  3. How We Collect Information – Website/contact forms, newsletter signup, cookies, analytics/CRM (Google, HubSpot, Clarity), onboarding, marketing, payment processors (workflow only), cloud systems (Google Workspace, HubSpot). We use least-privilege access.

  4. Why We Process – Services, enquiries, CRM, contracts, email marketing (consent/legitimate interest), employment/contractor coordination, security, analytics, compliance, improving experience, behavioural advertising where cookies accepted.

  5. Lawful Bases – Consent (marketing, cookies); Legitimate interests (analytics, security, CRM); Contractual necessity; Legal obligation. You may withdraw consent at any time.

  6. Sharing – Verified third parties only: Google Workspace, HubSpot (EU); Microsoft Clarity; Cloudflare; internal subcontractors (least-privilege). No data brokers; no advertisers outside consented cookies. Subcontractors: controlled access, confidentiality, no direct customer data extraction.

  7. International Transfers – EU (Google, HubSpot), South Africa, New Zealand. We do not store/process in the US. Safeguards: standard clauses, POPIA/NZ Privacy Act.

  8. Data Retention – Customer data until removal request; tax/legal 6 years; analytics 12 months; marketing until consent withdrawn. Proof of removal on request.

  9. Cookies & Tracking – Cookie banner; categories: Necessary, Analytics, Marketing/Behavioural. You may change settings anytime.

  10. Behavioural Advertising – If you accept marketing cookies we may analyse interactions, deliver tailored content, optimise marketing. No intrusive profiling or automated decision-making.

  11. Use of AI Tools – For drafting, internal operations, non-sensitive docs, analysis. We do not provide AI with personal data unless anonymised/necessary with safeguards.
  12. Security – SSL/TLS, access controls, audits, data minimisation, confidentiality agreements, secure cloud, 2FA, antivirus. No separate backup/DR beyond cloud defaults.

  13. Children’s Data – We do not target or knowingly collect from under-18 or under-13; such data deleted if found.

  14. Your Rights – Access, correction, deletion, object, withdraw consent, restrict processing, proof of deletion, lodge complaint. We respond within statutory timeframes.

  15. Complaints – Contact projects@firesands.com. Regulators: South Africa – Information Regulator (inforegulator.org.za); New Zealand – Office of the Privacy Commissioner (privacy.org.nz). UK: ICO for guidance (we do not actively target UK market for services provisioning).

  16. Data Breach – We will notify affected individuals and regulators where required and provide protective guidance.

  17. Changes – Updates posted here with revised “Last Updated” date. Continued use indicates acceptance.

  18. Contact – Privacy concerns or removal: projects@firesands.com