Privacy Policy

1. Who we are and the scope of this policy

Makiti Group Holdings (Pty) Ltd (“Makiti”, “we”, “our” or “us”) is a South African group providing services through Makiti Group Holdings and its operating companies, including Makiti Building & Civils, Makiti Plant & Equipment, Makiti Protection Services, Makiti Training & Development, Makiti Property & Investments and Makiti Workforce Solutions.

This policy applies when you use www.makitigroup.co.za, a linked Makiti candidate, careers, supplier or subcontractor portal, our online forms, or when you communicate with us through email, telephone, WhatsApp or another linked channel. It should be read with any additional notice shown at the point where information is collected.

Makiti processes personal information in accordance with the Protection of Personal Information Act 4 of 2013 (“POPIA”) and other applicable South African laws. Depending on a particular service arrangement, a Makiti company may act as the responsible party or as an operator acting for a client.

2. Personal information we may collect

The information collected depends on how you interact with us and may include:

• Identity and contact details: name, identity or registration information, email address, telephone number, physical or postal address and next-of-kin details where relevant.
• Business and service-request details: organisation, role, service required, project scope, location, budget range, mobilisation date, contract period, site requirements and correspondence.
• Recruitment and workforce information: CV, employment history, qualifications, trade or operator certificates, licences, PrDP, skills, preferred occupation, availability, province, references and interview or assessment information.
• Verification and compliance information: identity, citizenship or work authorisation, qualification and licence verification, criminal checks where lawful and required, medical-fitness coordination for role or client requirements, and other due-diligence information.
• Supplier and subcontractor information: company registration, ownership and contact details, services and commodities, tax and CSD information, B-BBEE evidence, CIDB or industry registrations, COIDA and insurance evidence, banking confirmation, quotations and supporting company documents.
• Technical information: IP address, device and browser information, pages viewed, referral source, timestamps, security events, cookie choices and similar usage data.
• Communications: messages, attachments, call or meeting notes and information you submit to the Makiti AI assistant.

Please do not submit information that is not reasonably necessary for your enquiry or application.

3. Where information comes from

We generally collect information directly from you. We may also receive information from your employer or authorised representative, referees, recruitment sources, verification providers, clients requesting workforce services, public registers, professional bodies, government systems, project partners and service providers where this is lawful and relevant.

4. Why we process personal information

We process information only for a specific, lawful purpose, including to:

• answer enquiries and route requests to the correct Makiti company;
• prepare quotations, proposals, tenders, contracts and project plans;
• provide, manage and improve our services;
• register, screen, verify and communicate with candidates;
• manage recruitment, placement, onboarding, payroll and workforce assignments;
• evaluate and manage suppliers, subcontractors and project partners;
• perform due diligence, fraud prevention, safety, security and access control;
• maintain business, tax, employment, tender and regulatory records;
• operate, secure, analyse and improve our website and portals;
• exercise or defend legal rights and comply with lawful requests; and
• send marketing or opportunity communications where permitted, with an opt-out.

Our lawful grounds may include your consent, steps required before or under a contract, compliance with a legal obligation, protection of a legitimate interest, or another basis allowed by POPIA. Where consent is required, it may be withdrawn, although this will not affect lawful processing already completed.

5. Careers and workforce database

The Careers page is used for vacancies within Makiti Group and its companies. Applications may be restricted to roles that are currently open.

The Makiti Workforce Solutions portal allows candidates to register for a talent database even when no current assignment is advertised. Registration is not an offer or guarantee of employment or placement. Candidate profiles are private and accessible only to authorised Makiti personnel and approved service providers who require access for their duties.

When a suitable opportunity arises, relevant candidate information may be shared with a Makiti company or prospective client for screening or placement, with an appropriate lawful basis and only to the extent needed. Verification results and status labels are internal assessment records and must not be treated as a public endorsement.

6. Supplier and subcontractor registrations

Information submitted through a supplier or subcontractor portal is used for vendor due diligence, service and commodity matching, quotation requests, tender preparation, onboarding, compliance monitoring and contract administration. Registration does not guarantee appointment, an RFQ, work allocation or payment.

Do not upload passwords, portal login credentials or unnecessary personal information. Banking or other high-risk documents should be provided only through the designated secure upload process when specifically requested.

7. Makiti AI assistant

The website may provide an AI assistant called Makiti to answer general questions, explain services and help visitors navigate. Messages may be processed by our technology providers to generate a response and support security or quality monitoring.

Do not provide passwords, identity numbers, banking details, confidential tender information, medical records or other sensitive information in the chat. AI responses are general information and may contain errors. The assistant does not make final employment, supplier, credit, funding, legal or contractual decisions. Important matters should be confirmed with an authorised Makiti representative.

8. Cookies, analytics and website security

We may use necessary cookies for website operation, security, session management and privacy preferences. With appropriate consent where required, we may also use performance, analytics or embedded-content technologies to understand website use and improve our services.

You can manage choices through the website cookie control and your browser settings. Blocking necessary cookies may affect website or portal functionality. Our security tools may process IP addresses and technical events to prevent malicious activity and unauthorised access.

9. When information may be shared

We do not sell personal information. Where necessary and lawful, we may share it with:

• Makiti companies and authorised group personnel;
• clients or project partners involved in a service, workforce assignment or tender;
• hosting, email, cloud, recruitment, verification, payroll, security, analytics, AI and IT providers acting under appropriate controls;
• professional advisers, auditors, insurers and financiers;
• government bodies, regulators, courts or law-enforcement authorities where legally required; and
• a successor or transaction adviser during a lawful restructuring, merger or business transfer.

Recipients are limited to information reasonably required for their role and must process it lawfully.

10. Processing outside South Africa

Some cloud, communications or technology providers may store or process information outside South Africa. Where this occurs, we take reasonable steps required by POPIA to ensure that the recipient is subject to a law, agreement, binding corporate rules or other safeguards that provide an adequate level of protection, or that another lawful basis applies.

11. Information security

We use reasonable organisational and technical safeguards appropriate to the nature of the information, including access restrictions, role-based administration, authentication, security monitoring, backups and controlled sharing. No internet or storage system can be guaranteed completely secure.

If we identify a security compromise involving personal information, we will investigate, contain and notify affected persons and the Information Regulator where required by law.

12. How long information is kept

We keep personal information only for as long as reasonably needed for the purpose collected, a related lawful purpose, contractual or project requirements, dispute resolution, or a statutory retention period. Retention differs by record type.

Candidate records may remain in the workforce database while relevant for potential opportunities and will be reviewed, updated, archived or deleted in line with operational and legal requirements. You may ask us to update or remove your profile, subject to information we must retain by law or for legitimate claims.

When information is no longer required, we take reasonable steps to delete, destroy, de-identify or securely archive it.

13. Direct marketing and opportunity communications

We may send service updates, vacancy alerts, supplier opportunities or business communications where you requested them or where otherwise permitted by law. Every electronic direct-marketing message should provide a practical way to opt out. You may also unsubscribe by contacting us at any time.

14. Your POPIA rights

Subject to POPIA and applicable limitations, you may:

• ask whether we hold your personal information and request access;
• request correction, completion, updating, deletion or destruction;
• object to processing in permitted circumstances;
• withdraw consent where processing depends on consent;
• object to direct marketing;
• request information about relevant third parties who have had access; and
• lodge a complaint with the Information Regulator.

Send a request to info@makitigroup.co.za. To protect personal information, we may verify your identity and authority before acting. We will respond within the period required by law and explain if a request cannot be fully granted.

15. Children’s information

Our general services, careers, workforce and supplier portals are intended for adults. We do not knowingly collect personal information from a person under 18 through these channels without a lawful basis and appropriate authorisation. Where a youth, learner or training programme lawfully involves a minor, additional consent and safeguarding measures will apply.

16. Third-party websites and social channels

Our website may link to WhatsApp, LinkedIn, Facebook, TikTok, maps, client systems or other third-party services. Those parties apply their own terms and privacy practices. Please review them before submitting information. Makiti is not responsible for an external service’s independent processing.

17. Policy changes

We may update this policy when our services, systems or legal obligations change. The latest version will be published on this page with a revised effective date. Material changes may also be communicated through an appropriate website or direct notice.

18. Privacy contact and complaints

Information Regulator (South Africa)

If you believe your personal information has been processed contrary to POPIA, you may lodge a complaint with the Information Regulator:

• POPIA complaints: POPIAComplaints@inforegulator.org.za
• General enquiries: enquiries@inforegulator.org.za
• Telephone: 010 023 5200 or toll-free 0800 017 160
• Address: Woodmead North Office Park, 54 Maxwell Drive, Woodmead, Johannesburg, 2191
• Information Regulator complaints guidance

This policy explains Makiti’s general privacy practices and does not remove or limit any rights provided by POPIA or another applicable law.