Privacy Policy / POPIA Notice

1. Responsible Party

The responsible party for personal information collected through this website is HCC Century City (Pty) Ltd t/a Vector Energy Africa, Reg No. 2016/307054/07, 89A Strawberry Lane, Constantia, Western Cape, 7806.

2. Information We Collect

We may collect names, company and contact details, job titles, site and property information, electricity accounts, consumption and interval data, tariff information, site plans, single-line diagrams and electrical drawings, existing energy agreements or PPAs, information relating to existing Solar PV, battery storage, generators or other infrastructure, enquiry information and other documents or messages voluntarily supplied to us.

Supporting documents such as electricity accounts, site plans, single-line diagrams and existing agreements can contain personal information about people other than the person submitting them, including employees, landlords, tenants, directors or contractors. When submitting documents, please provide only information reasonably necessary for the assessment, remove irrelevant identity numbers, banking details or other sensitive information where possible, and ensure you are authorised to share any personal information relating to someone else.

3. Voluntary or Mandatory Provision

Providing personal information through our enquiry or assessment forms is voluntary. However, information marked as required is necessary for us to respond to your enquiry or conduct the requested preliminary assessment. If required information is not provided, we may be unable to respond to your enquiry or evaluate the opportunity.

4. Purpose of Processing and Lawful Basis

Information is processed for responding to enquiries, assessing commercial energy opportunities, conducting preliminary technical and commercial feasibility reviews, understanding existing energy arrangements, evaluating funding suitability, preparing proposals where appropriate, progressing project-development discussions and administering prospective or existing commercial relationships.

We rely on one or more of the following lawful grounds for this processing, as applicable: your consent where expressly obtained; steps taken at your request before entering into a contract; performance of a contract with you; compliance with a legal obligation; or our legitimate interests in developing and administering commercial energy opportunities, balanced against your rights as a data subject.

5. POPIA Processing Principles

Personal information will be processed lawfully, reasonably and in a manner that does not unjustifiably infringe privacy. We will use information only for the purpose for which it was supplied, or for a compatible lawful purpose, and will take reasonable steps to keep it accurate, relevant and secure.

6. Sharing of Information and Service Providers

Information may be shared with authorised employees, consultants, technical partners, funders and professional advisers where reasonably necessary for the relevant assessment, funding, technical or project-development purpose. We do not sell personal information.

We also use the following categories of service providers, who may process information on our behalf: a website hosting provider; a website traffic and performance monitoring service operated by our hosting provider; Google Forms and Google Workspace, for certain document-upload workflows and business email; and cloud or document-storage services as required for project administration. Where a new service provider or analytics platform is activated, this notice will be updated to reflect it.

7. Security, Retention and Security Compromise

We use reasonable technical and organisational safeguards to protect personal information against loss, unauthorised access, interference, misuse or disclosure.

Retention periods depend on the category of information: unsuccessful preliminary enquiries are retained only briefly before deletion; records relating to active project-development discussions are retained for the duration of that engagement; contractual, financial and statutory records are retained for the periods required by applicable law; marketing consent records are retained for as long as the consent remains valid; and security logs and dispute-related records are retained for as long as reasonably necessary for those purposes.

Where required by POPIA, we will notify the Information Regulator and affected data subjects of a security compromise as soon as reasonably possible, subject to any lawful delay or restriction.

8. Cross-Border Processing

Where cloud, hosting, email or professional service providers process information outside South Africa, including through Google Forms or Google Workspace, we will take reasonable steps to ensure appropriate protection of personal information in line with POPIA.

9. Cookies and Tracking Technologies

This website uses the following categories of cookies and similar technologies:

• Essential: set by Vector or our hosting provider, required for website security and basic operation.
• Performance: set by our hosting provider for website traffic and performance monitoring.
• Google services: where our document-upload workflow directs you to Google Forms, Google may set its own cookies in line with its own privacy and cookie settings.

We do not currently use Google Analytics, Meta Pixel or similar third-party advertising or analytics trackers on this website. If any such technology is activated in future, this notice will be updated and, where required, an appropriate consent mechanism will be implemented before it loads. You can control or disable cookies through your browser settings; disabling cookies may affect certain website functionality.

We do not make any decision that produces legal or similarly significant effects about you solely through automated processing. Preliminary funding-suitability assessments may consider commercial or credit-related information, but any resulting funding, project or contracting decision involves human review.

10. Your Rights and How to Exercise Them

You may request access to your personal information, ask for correction or deletion, object to processing where permitted by law, or complain to the Information Regulator. These rights may be limited where retention is required by law, contract, legitimate business records or dispute protection.

Requests can be made using the contact details in section 11, or using the Information Regulator's prescribed forms (including Form 1 for objections to processing, Form 2 for correction or deletion requests, and Form 5 for complaints), available from the Information Regulator's website. Vector's PAIA Manual is available on request.

11. Contact

Privacy-related requests, access requests, correction requests, deletion requests or questions regarding the processing of personal information may be sent to:

HCC Century City (Pty) Ltd t/a Vector Energy Africa
89A Strawberry Lane, Constantia, Western Cape, 7806
Email: info@vectorenergy.africa

Information Officer:
Mr Murray Louw
Director
HCC Century City (Pty) Ltd t/a Vector Energy Africa

12. Marketing Communications

Where you have provided your details through an enquiry, assessment request or business engagement, we may contact you regarding that specific enquiry or assessment. This does not authorise general newsletters, promotions or unrelated future marketing.

Where Vector wishes to send you direct marketing beyond your specific enquiry, we will only do so with your separate, specific consent, in accordance with POPIA. You may opt out of any marketing communication at any time by using the unsubscribe mechanism provided or by contacting us using the details in section 11, and we maintain a suppression list to ensure opted-out contacts are not re-added.

13. Complaints and the Information Regulator

If you believe your personal information has been processed unlawfully, you may lodge a complaint with us directly using the contact details in section 11, or with South Africa's Information Regulator:

The Information Regulator (South Africa)
Email: enquiries@inforegulator.org.za (general) or popiacomplaints@inforegulator.co.za (POPIA complaints)
Telephone: 010 023 5200
Website: www.inforegulator.org.za

14. Updates to This Policy

This policy may be updated from time to time to reflect changes in our practices, technology, legal or regulatory requirements. The version published on this website is the version currently in effect. Material changes will be reflected by an updated publication date.

Last updated: September 2026. This document is provided for general information and does not constitute legal advice; it is subject to final review by qualified South African legal counsel.