Last updated: 25 October 2026
1. About this policy
This Privacy Policy explains how Dispose-IT (Pty) Ltd (Registration No. 2013/024675/07) (“Dispose-IT”, “we”, “us” or “our”) collects, uses, shares and protects personal information. As a responsible party, we process personal information in accordance with the Protection of Personal Information Act 4 of 2013 (“POPIA”) and other applicable South African law.
Under POPIA, “personal information” can relate to both individuals and existing juristic persons (such as companies). By using our website or services, or by providing us with personal information, you acknowledge that your information will be processed as described in this policy.
2. What personal information we collect
The personal information we collect depends on how you deal with us, and may include:
- Contact details – name, email address, telephone number and physical or collection address;
- Business information – company name and registration number, VAT number, job title and billing details;
- Service information – collection bookings, asset registers, serial numbers, quotes, invoices and records of our communications with you;
- Technical information – IP address, browser and device type, pages visited and other website usage data (including via cookies);
- any other information you choose to give us, for example through our contact or collection request forms.
We do not intentionally collect special personal information (such as health or biometric information) or personal information of children. If you do not provide information we reasonably request, we may not be able to respond to your enquiry or provide our services.
3. How we collect personal information
- directly from you – when you complete a form on our website, request a quote, schedule a collection, email or call us;
- from your organisation – where you are the contact person for a business customer;
- automatically – through cookies and analytics tools when you use our website; and
- from third parties – such as our related companies, referral partners or public sources, where lawful and reasonably necessary.
4. Why we process personal information
We process personal information where it is necessary to conclude or perform a contract with you, to comply with a legal obligation, to protect our legitimate interests or yours, or with your consent. We use it to:
- respond to enquiries and provide quotes;
- arrange collections, logistics and the processing of IT assets;
- provide data destruction, recycling, resale and value recovery services, including certificates and reports;
- manage customer accounts, invoicing and payments;
- operate, secure and improve our website and services;
- send you information about our services, where permitted (see section 9); and
- comply with our legal, tax, regulatory and environmental (including e-waste) reporting obligations.
5. Data stored on equipment you send us
IT equipment you provide to us for disposal may contain personal or confidential information. When we handle such equipment we act as an operator on your behalf: we do not access, use or disclose data stored on devices except as strictly necessary to carry out our data sanitisation or destruction processes. Data-bearing devices are wiped or physically destroyed in line with our data destruction procedures, and certificates of destruction are provided where agreed. You remain responsible for backing up any data you wish to keep before handing equipment to us.
6. Customer portal and systems
We may provide customers with access to a secure online portal linked to our business systems, which allows authorised users to view information about IT assets submitted to us (such as asset registers and processing status). Access is restricted to authorised users and is used only for operational and service delivery purposes.
7. Who we share personal information with
We may share personal information with:
- our related companies within the Go Rentals Group;
- operators and service providers who help us deliver our services, such as transport and logistics providers, recyclers and IT service providers, who are bound by written agreements to keep it confidential and secure;
- technology providers that host or support our website, email, CRM and business systems;
- professional advisers such as auditors, accountants and lawyers;
- government bodies and regulators, where required or permitted by law; and
- any other party with your consent.
We do not sell personal information.
8. Cross-border transfers
Some of our related companies and service providers are located outside South Africa. Personal information may be transferred to our related entity in Australia and to cloud service providers that may store data in countries such as the United States, the European Union and other locations. We only transfer personal information outside South Africa as permitted by section 72 of POPIA, for example where the recipient is subject to laws, binding corporate rules or an agreement that provide an adequate level of protection.
9. Direct marketing
We will only send you electronic direct marketing where you have consented or where you are an existing customer and the marketing relates to similar services, as permitted by section 69 of POPIA. Every marketing message will give you a simple way to opt out, and you may also opt out at any time by contacting us.
10. Cookies and analytics
Our website uses cookies and similar technologies to make the site work, to understand how visitors use it, and to measure the effectiveness of our advertising. We may use third-party tools such as Google Analytics and Google Ads for these purposes. You can disable or delete cookies through your browser settings, although some parts of the website may not function properly as a result.
11. Security and retention
We take appropriate, reasonable technical and organisational measures to protect personal information against loss, damage, unauthorised destruction and unlawful access or processing. These include access controls, secure systems and staff confidentiality obligations. We keep personal information only for as long as needed for the purposes in this policy or as required by law, after which it is securely destroyed, deleted or de-identified.
12. Security compromises
If we have reasonable grounds to believe that your personal information has been accessed or acquired by an unauthorised person, we will notify you and the Information Regulator as required by section 22 of POPIA.
13. Your rights
Subject to POPIA, you have the right to:
- ask whether we hold personal information about you and request access to it;
- request correction or deletion of personal information that is inaccurate, irrelevant, excessive, out of date, incomplete, misleading or unlawfully obtained;
- object to the processing of your personal information on reasonable grounds, and to direct marketing at any time;
- withdraw your consent, where processing is based on consent; and
- lodge a complaint with the Information Regulator.
Requests for access to records are dealt with in terms of the Promotion of Access to Information Act 2 of 2000 (PAIA). Our PAIA manual is available on request from our Information Officer. We may need to verify your identity before responding.
14. Information Officer and complaints
If you have a question or concern about how we handle your personal information, please contact our Information Officer first:
Information Officer
Dispose-IT (Pty) Ltd (Reg. No. 2013/024675/07)
33 6th Street, Wynberg, Sandton, Johannesburg
Email: info@dispose-it.co.za
Phone: +27 (0)10 140 0877
If you are not satisfied with our response, you may complain to the Information Regulator (South Africa) at inforegulator.org.za or by email at POPIAComplaints@inforegulator.org.za.
15. Changes to this policy
We may update this Privacy Policy from time to time. The current version will always be published on this page, with the date it was last updated.