Our Commitment to Data Protection
Slate Heath is committed to protecting the privacy and security of personal data. While we are based in South Africa and primarily serve South African clients, we extend data protection standards to all visitors, including those from the European Economic Area who are protected under the General Data Protection Regulation (GDPR).
Data Controller
Slate Heath acts as the data controller for personal information collected through this website. We determine the purposes and means of processing personal data in connection with our services.
Contact details:
Email: [email protected]
Address: 42 Greenway Road, Rosebank, Johannesburg 2196, South Africa
Legal Basis for Processing
We process personal data based on the following legal grounds:
- Consent: Where you have given clear consent for us to process your personal data for a specific purpose
- Contract: Where processing is necessary for a contract we have with you, or because you have asked us to take specific steps before entering into a contract
- Legitimate Interests: Where processing is necessary for our legitimate interests or those of a third party, unless there is a good reason to protect your personal data which overrides those interests
- Legal Obligation: Where processing is necessary for us to comply with the law
Your Rights Under GDPR
If you are located in the European Economic Area, you have the following rights regarding your personal data:
Right to Access
You have the right to request copies of your personal data. We may charge a small fee for this service in certain circumstances.
Right to Rectification
You have the right to request that we correct any information you believe is inaccurate. You also have the right to request that we complete information you believe is incomplete.
Right to Erasure
You have the right to request that we erase your personal data, under certain conditions. This is also known as the right to be forgotten.
Right to Restrict Processing
You have the right to request that we restrict the processing of your personal data, under certain conditions.
Right to Object to Processing
You have the right to object to our processing of your personal data, under certain conditions, particularly where we are processing data based on legitimate interests.
Right to Data Portability
You have the right to request that we transfer the data we have collected to another organisation, or directly to you, under certain conditions.
Exercising Your Rights
To exercise any of these rights, please contact us using the details provided above. We will respond to your request within one month. In complex cases or where we receive numerous requests, we may extend this period by up to two months, but we will inform you of any extension within the first month.
Data Transfers
As we are based in South Africa, any personal data you provide may be transferred to and processed in South Africa. When transferring data from the EEA to South Africa, we implement appropriate safeguards to ensure that your personal data receives an adequate level of protection.
Data Security
We have implemented appropriate technical and organisational measures to ensure a level of security appropriate to the risk, including:
- Encryption of personal data where appropriate
- Regular review of our security measures
- Staff training on data protection requirements
- Access controls to limit who can view personal data
Complaints
If you believe that your data protection rights have been violated, you have the right to lodge a complaint with a supervisory authority. For EEA residents, this would be the data protection authority in your country of residence.
Updates to This Information
We may update this GDPR information from time to time. Any changes will be posted on this page with an updated revision date.