POPIA Notice (Notice of Processing of Personal Information)

This notice is provided in terms of Section 18 of the Protection of Personal Information Act 4 of 2013 ("POPIA"). It supplements, and should be read alongside, our full Privacy Policy.

1. Responsible party

Besbpo Group (Pty) Ltd, trading as Aggregated Aggregates, is the responsible party for personal information collected through aaggregates.store and app.aaggregates.store.

2. Information Officer

Our Information Officer, appointed in terms of POPIA, can be contacted at: privacy@aaggregates.store. Registration details for our Information Officer are lodged with the Information Regulator of South Africa.

3. Purpose of collection

Personal information is collected directly from you when you: register an account or trade account; place an order or request a quote; send a plant hire, site service or other enquiry; accept and use a booking (including booking messages); apply to become a partner or use the partner portal; apply for a job; subscribe to our newsletter; contact us; or browse the Platform (via cookies — see our Cookie Policy). It is used strictly for the purposes set out in our Privacy Policy, principally to fulfil orders and bookings, administer trade and partner accounts, and comply with legal and tax obligations. Booking messages are checked automatically for contact details and may be reviewed by our staff, as described in Section 5A of our Privacy Policy.

4. Source of information

In most cases, personal information is collected directly from you. Where you sign in with Google, Microsoft, X, Facebook or Instagram, we receive your name and email address (where the provider shares it) from that provider with your consent. For a booking, the partner who does the work records job cards (hours, readings, loads and notes) about your job.

5. Recipients of information

Personal information may be shared with our approved partner-supplier network, delivery partners (Besfleet and external tipper-truck partners), plant hire and site service partners (the job details and your first name only — never your contact details), payment processors, our email and WhatsApp messaging providers, and Besbpo Group entities for VAT invoicing purposes — see Section 5 of our Privacy Policy for the full list.

6. Cross-border transfers

Where any service provider processing personal information on our behalf operates outside South Africa, we take reasonable steps to ensure that provider is subject to a level of data protection that is at least substantially similar to POPIA's conditions for lawful processing, as required under Section 72 of POPIA.

7. Your rights

You have the right to request access to, correction of, or deletion of your personal information, and to object to its processing, subject to POPIA. See Section 8 of our Privacy Policy for how to exercise these rights.

8. Complaints

If you believe your personal information has been processed unlawfully, you have the right to lodge a complaint with:

The Information Regulator (South Africa) Email: complaints.IR@justice.gov.za Website: inforegulator.org.za