Privacy Policy

This Privacy Policy explains how Aggregated Aggregates ("we", "us", "our"), a division of Besbpo Group (Pty) Ltd, collects, uses, discloses, and protects personal information when you use aaggregates.store and app.aaggregates.store (the "Platform"), in accordance with the Protection of Personal Information Act 4 of 2013 ("POPIA").

1. Who we are

Aggregated Aggregates is a trading division of Besbpo Group (Pty) Ltd, operating the Platform for the sale of sub-base, crushed stone, sand, cement, ready-mix concrete and related products, and for arranging plant hire and site services carried out by independent partners. Besbpo Group (Pty) Ltd is the responsible party for personal information processed through the Platform, as defined under POPIA.

2. Information we collect

• Account information: name, email address, phone number, and password (or an account identifier if you sign in with Google, Microsoft, X, Facebook or Instagram).
• Trade account information: company name, registration number, VAT number, and standing delivery addresses, where you register a Contractor/ Trade or Volume/Civil Bulk tier account.
• Order and delivery information: products ordered, delivery address, delivery distance, and payment confirmation (we do not store full card numbers — see Section 6).
• Communications: messages sent through our contact form, RFQ/quote requests (including any bill of quantities file you upload), and related correspondence.
• Trade credit applications: the credit limit and terms your company asks for, years trading, estimated spend, trade references, an accounts contact, who applied and when they accepted the trade credit terms, our decision, and the payment position of orders on account.
• Proof of delivery: the name of the person who received a delivery, their signature, any shortage or damage they noted, and, where recorded, a photo of the delivery and the location of the driver's phone when it was signed for.
• Supplier portal users: for people at our partner suppliers who use the supplier portal — their account details, and their answers on the orders given to their supplier.
• Enquiries and bookings: what you ask for through our plant hire, site services, job pack, estimator, design brief and other request forms (including the site address, province, dates and any erf number), and, for bookings, the quote you accepted, payment reference, job cards recorded by the partner, your sign-off, rating, and any dispute.
• Booking messages: messages exchanged in a booking between you, the partner and our staff (see Section 5A).
• Partner information: for businesses that apply to or work with us as partners — business and contact details, the people who use the partner portal, fleet and availability, documents provided for vetting (registration, insurance, operator certificates), bank details for payouts, and records of offers, jobs, ratings and disputes.
• Job applications: your application, CV and contact details if you apply for a vacancy or join our talent pool.
• Newsletter: your email address, optional name, audience and province, and the dates you consented and confirmed your subscription, if you subscribe. You confirm by clicking the link in the email we send when you sign up; until you do, we don't send you the newsletter.
• Email delivery information: whether an email we sent you was delivered, bounced, or reported as spam, so we stop emailing an address that can't receive our emails or doesn't want them.
• Technical information: IP address, browser type, and usage data collected via cookies — see our Cookie Policy.

3. How we use your information

We process personal information to:

1. Fulfil orders and quote requests, including calculating delivery fees and routing orders to the appropriate partner-supplier location.
2. Respond to enquiries and run plant hire and site service bookings — quoting, taking payment, offering the job to partners, recording the work, handling disputes and paying partners.
3. Administer trade accounts, including applying the correct customer tier discount and standing supply agreement terms.
4. Communicate with you about your orders, quotes, bookings and account, by email and, where you've opted in, by WhatsApp.
5. Consider job applications, and send our newsletter to subscribers who asked for it and confirmed their email address.
6. Comply with tax, invoicing, and other legal obligations (invoices are issued under Besbpo Group's company VAT registration).
7. Improve the Platform and prevent fraud or abuse, including keeping bookings on the Platform (see Section 5A).

3A. Shopping assistant

The shopping assistant on the Platform is automated: it answers from our own catalogue, prices and published policies, and does not use any outside artificial-intelligence service. To answer, it receives your question, the page you are on and the items in your cart. We do not store or log your questions, and the conversation is kept only in your browser tab (see the Cookie Policy). Please don't enter personal details in the chat — use the quote, contact or account pages for anything that needs them.

3B. Product ratings and reviews

If you rate or review a product, we keep your star rating, any title and text you write, the product, the date, and — for a written review — which of your paid orders included the product, so the review can show as a verified purchase. Your review is published on the product page with your first name and the initial of your surname only; we never publish your email address, phone number, company or order details. Phone numbers, email addresses and links in a review are removed automatically before it is saved. Our staff can see the reviewer's name and email address to moderate reviews and follow up on problems. You can change or remove your rating or review at any time from the product page, and we may hide reviews that are abusive or not about the product.

4. Legal basis for processing

We process your personal information where necessary to perform a contract with you (e.g. fulfilling an order), where you have consented (e.g. marketing communications), where necessary to comply with a legal obligation, or where necessary for our legitimate business interests, balanced against your rights under POPIA.

5. Sharing your information

We share personal information with:

• Partner suppliers in our approved network, to fulfil delivery of your order. Through the supplier portal, the supplier loading your order sees the products and quantities, the delivery address and province, any delivery note on the order, the delivery dates, and who signed for each delivery — not your name, email address, phone number or what you paid.
• Drivers, through the proof-of-delivery link for a delivery: the order number and the products and quantities on it, so the receiver can sign for them. The link doesn't show your name, address or contact details.
• Plant hire and site service partners, for a booking: the job, dates, site address and site notes, and your first name. We don't give partners your surname, email address or phone number. Once a partner accepts your job, you see the partner's business name — not its contact details.
• Bellwether Architecture & Engineering (BAE), Besbpo Group's architecture and engineering practice, for a design brief: the brief and your contact details, so BAE can reply, prepare a proposal and do the work you appoint it for. When BAE submits plans to a municipality for you, the application carries the owner details the municipality requires.
• Delivery partners, including Besfleet (Besbpo Group's own trucking division) and our external tipper-truck delivery partners, to the extent necessary to complete delivery.
• Payment processors, such as payment gateways and buy-now-pay-later or trade-credit providers, when you choose to pay with them — see Section 6.
• Besbpo Group entities, for group VAT invoicing and administrative purposes.
• Service providers who host, maintain, or support the Platform (e.g. our hosting and database providers, and our email and WhatsApp messaging providers), under contractual confidentiality obligations. Our emails are sent through Resend, an email delivery provider based outside South Africa, so the emails we send you — including your email address — are processed outside South Africa under Resend's data processing terms. Our newsletter list is kept in Listmonk, a newsletter system we run on our own hosting.
• Regulators or authorities, where required by law.

We do not sell personal information to third parties.

5A. Booking messages and review

Messages in a booking, and notes on job cards, are kept as the record of the job. To protect customers and partners, phone numbers, email addresses, links and social media handles are removed from them automatically before they are stored. When that happens, or when a customer and partner who often worked together stop booking through the Platform, a note is raised for our staff to review. Staff may also read a booking's messages to resolve a dispute or a problem with the job. These reviews are carried out by people, and are not used to make automatic decisions about you.

6. Payments

Card and payment details are processed directly by our third-party payment partners under their own security and privacy practices. We do not store full card numbers on our systems.

• When you pay by bank (instant EFT), you sign in to your bank on the payment partner's or your bank's own page; we never see your banking login, only confirmation of the payment.
• When you choose lay-by, we send LayUp the products, amounts and order reference it needs to set up your plan; your details on LayUp's side are handled under LayUp's own privacy policy. We receive how much of the plan has been paid.
• For each payment we keep its amount, method, status and the payment partner's reference, as part of the order's financial record.
• A payment link our team sends you shows the order's products and amounts (not your address or contact details) to anyone who has it, so please don't forward it. Links expire, and our team can cancel one at any time.

7. Data retention

We retain personal information for as long as necessary to fulfil the purposes described in this policy, including retaining transaction records for the period required by tax and financial record-keeping legislation in South Africa. Job applications and CVs are kept for up to 12 months unless you ask us to delete them sooner. Newsletter details are kept until you unsubscribe; a newsletter sign-up that is never confirmed is deleted after 30 days. Password-reset and email-confirmation links stop working after 60 minutes and 48 hours respectively. Enquiries and booking records are kept while they're needed to deliver and support the job, and then for as long as the related financial records must be kept; you can ask us to delete an enquiry that didn't lead to a booking. Proof-of-delivery records (including signatures and photos), trade credit applications and the bill of quantities attached to a quote request are kept with the order, account or quote they belong to, for as long as those records are kept.

8. Your rights under POPIA

Subject to POPIA, you have the right to:

• Request access to the personal information we hold about you.
• Request correction of inaccurate or incomplete personal information.
• Request deletion or destruction of personal information we no longer have a lawful basis to retain.
• Object to processing of your personal information in certain circumstances.
• Lodge a complaint with the Information Regulator of South Africa.

To exercise these rights, contact us using the details in Section 10.

9. Security

We implement reasonable technical and organisational measures to protect personal information against loss, unauthorised access, and disclosure, consistent with POPIA's security safeguard requirements. No system is completely secure, and we cannot guarantee absolute security.

10. Contact us

For any privacy-related query, or to exercise your POPIA rights, contact our Information Officer at: privacy@aaggregates.store.

11. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be reflected by an updated "Last updated" date at the top of this page.