Skip to content
All policies

SBS public notice

Privacy Policy

How SBS collects, uses and protects personal information, and how to make a request.

Updated 13 September 2026

Who we are and how to contact us

This notice covers SBS Waterprufe Trading CC, SBS Gutters (Pty) Ltd and SBS Holdings, referred to collectively as the SBS Group. The responsible business depends on your enquiry, quotation, contract, employment or other relationship. Sharing a group name or system does not make every group business a party to a transaction or give every employee access to your information.

For privacy questions or requests, contact info@sbs-waterproofing.co.za, call 021 555 0149, or write to Unit 1, Alternator Park, 7 Alternator Avenue, Montague Gardens, Cape Town, South Africa. Please identify the business, project or relationship concerned so your request can be routed correctly.

Information we use

We process contact and business details, enquiry information, site addresses, correspondence, inspections, photographs and documents you provide, quotations, instructions, project and warranty records, and relevant finance administration. Information can come directly from you or through an authorised representative, managing agent, contractor, supplier or connected business channel.

Our websites and systems can also process account identifiers, device and connection information, access logs, pages visited, referral and campaign information, and interactions with forms and contact links. Staff records are covered in more detail by the staff privacy policy available inside DIOS.

Please provide only information relevant to your enquiry. Avoid sending passwords, banking credentials, identity documents or medical information through a general website form. Contact details and an explanation of the enquiry are needed for a useful response; a site address may be needed for an inspection. Without necessary information, we may be unable to assist.

Why information is used

We use relevant information to respond to enquiries, arrange inspections, prepare quotations, perform and administer work, coordinate authorised project participants, communicate, manage warranties and disputes, maintain business records, meet legal obligations, prevent misuse and measure marketing activity.

The appropriate basis depends on the purpose and relationship: for example, steps relating to a requested service or contract, a legal obligation, legitimate interests recognised by law, or consent where relied on. Optional promotional consent is separate from an ordinary enquiry or requested service.

Websites, cookies and marketing choices

SBS websites may use Google Analytics, campaign and advertising click identifiers, and browser storage to understand how visitors find SBS and interact with its services. Maps and other third-party content can send technical information to their providers. DIOS uses sign-in and security functions to support authorised access. A link to a third-party website is subject to that provider's own privacy practices.

You can use your browser's storage, cookie and tracking controls and the relevant platform controls to restrict these technologies; restricting essential functionality can affect sign-in or site features. Available controls vary between websites and services. Contact SBS if you need help understanding processing related to a particular service.

A WhatsApp choice for project updates and arrival notifications applies to those service messages. It does not subscribe you to general promotional marketing. Ask us to stop optional communications through the channel used or the contact above. We may retain the minimum information needed to honour that preference and meet other lawful obligations.

DIOS, business mail and AI assistance

DIOS supports business enquiries, correspondence, projects and authorised staff administration. Access depends on assigned permissions. It does not make every mailbox, project or HR record visible to every employee.

When a user selects AI transcription or drafting, relevant audio or selected text and context may be sent to an external provider. DIOS Mail uses OpenAI for these features. Drafting may include sender and recipient details, the subject, instructions, the existing draft and relevant material the user is permitted to access. Returned text is editable and must be reviewed before sending.

The Mail transcription operation does not save the recording in the DIOS Mail archive or attach it to an email. A transcript saved in a draft or message becomes part of that record. External provider processing and retention depend on the applicable service terms and controls; absence of a DIOS audio archive is not a promise of zero provider retention.

DIOS records AI usage metadata, such as the user, module, model, usage units, timing, outcome and estimated cost. The usage meter itself does not store raw prompts. Other business records may contain material supplied to a task. Material employment, financial, contractual and technical decisions require authorised human review.

Access, service providers and overseas processing

Relevant information may be shared with authorised SBS staff, project contractors, technology and communications providers, accountants, legal advisers, insurers and competent authorities for the purposes described. SBS does not sell personal information. Group sharing must have a defined purpose and appropriate access.

DIOS technology includes hosting, database, identity, AI and Google services. Some providers may process or access information outside South Africa. The relevant service and configuration determine the locations and transfer arrangements. Ask the contact above for information about a particular processing activity or recipient. A South African domain name is not a guarantee of South African-only processing.

Authorised Google connections are used for the relevant SBS business integration and permissions granted to it. The company-controlled Google Ads connection supports advertising administration, reporting and authorised campaign management. Its permissions do not authorise unrelated mailbox or Drive access. You can revoke a connection through the relevant account controls or ask SBS for assistance. Credentials are not part of public reporting.

Retention and security

Information is assessed according to its purpose, applicable obligations, project and warranty needs, disputes and legal holds. Business email and attachment originals may be preserved as evidence. Deleting a message from a connected mailbox does not necessarily erase that preserved record from DIOS or other relevant systems.

Junk quarantine is designed to avoid importing unwanted message bodies and attachments into the business archive. Its 30-day expiry process depends on provider identity and safe selective deletion checks. Protected, ambiguous or failed operations are held for review; it is not a guarantee that every junk message disappears on a fixed date.

SBS's internal policies require appropriate access controls, secure administration and incident handling. No system can guarantee absolute security. A personal-information request is assessed across the relevant records and lawful retention requirements; a mailbox deletion alone is not treated as proof of erasure.

Your rights and concerns

You may ask whether SBS holds your information, request access or correction, object where applicable, or request deletion or restriction where appropriate. Consent can be withdrawn where it is relied on, without undoing earlier lawful processing. We will verify identity proportionately, assess the request and explain relevant limitations or further steps. Please avoid sending unnecessary sensitive evidence in your first email.

You can also contact the Information Regulator. The Regulator's PAIA guide and forms explain formal access requests. This notice will be updated when the relevant processing changes.