last updated: 9 September 2026
This is the Privacy Policy for Globerisk (Pty) Ltd, registration number 2021/989415/07. This policy details how we collect, store, protect, and use Personal Information—that is, information that can be used to identify an individual (natural person) or an established business entity (juristic person)—in connection with the services we may offer through our website www.globerisk.co.za (referred to as the “Site”) and through your interactions with us (referred to as the “Services”).
Personal Information submitted to us by using this Site or our Services is governed strictly by this Privacy Policy and the Protection of Personal Information Act, No. 4 of 2013 (POPIA).
Words with capitalised initial letters have specific meanings defined in this section under South African law:
Information relating to an identifiable, living, natural person, and where it is applicable, an identifiable, existing juristic person (company). This includes, but is not limited to, contact details, identity numbers, online identifiers, and financial histories.
Data collected automatically, either generated by the use of the Service or from the website infrastructure itself (e.g., the duration of a page visit, browser type).
Small files stored on your device (computer or mobile device) via your web browser.
The entity that determines the purposes and means of processing Personal Information (historically referred to internationally as the Data Controller).
An entity or service provider that processes Personal Information on behalf of a Responsible Party in terms of a contract or mandate, without coming under the direct authority of that party.
The voluntary user, client, or visitor whose Personal Information is being processed.
Where we have been contracted by another company (such as your direct provider), please be aware that we act purely as an Operator. We are not responsible for decisions made regarding your data. Please refer directly to the Privacy Policy of the business you are dealing with.
Where you deal with us directly via our Services or our Site, this Privacy Policy applies natively. You are not required to provide us with any Personal Information when simply browsing the Site. However, engaging with us via contact forms, quote requests, or newsletters will require explicit input.
We process Personal Information lawfully, minimally, and transparently based on your explicit consent, contractual requirements, or legitimate business interest:
In cases where we act as the Responsible Party, data processing is handled by us using the structural controls below:
In some instances, your data may be hosted, processed, or backed up outside of South Africa (for example, on secure cloud infrastructure or downstream international applications like Google or Microsoft). We take reasonable steps to ensure that any international Operator provides data security baselines that meet or exceed the requirements set out under POPIA.
We will never sell your information. We only share critical details with trusted technical Operators (e.g., cloud security checkpoints, remote site administration tools, analytics platforms, or external email service providers) necessary to deliver our Services. All Operators are contractually bound to process your data with strict confidentiality.
To deliver our services and process your inquiries efficiently, we share data captured on this website with the following third-party platforms, who act as Operators under POPIA:
To safeguard user data integrity, optimize operational performance, and comply with POPIA’s data minimization and security requirements, we employ several internal software utilities locally within our secure web hosting environment. These tools process data directly on our local South African server infrastructure without transferring user database payloads to independent third parties:
We implement robust technical and organisational security measures to protect information against accidental loss, unauthorised destruction, or unlawful access. In the highly unlikely event of a confirmed security compromise or data breach, we will notify the South African Information Regulator and all affected Data Subjects without undue delay via written notification or prominent public publication.
In the event of a confirmed breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to, personal data, we shall promptly assess the risk to people’s rights and freedoms and without undue delay report this breach to the appropriate authorities, controllers, responsible parties, and subjects as required by law.
We will cooperate with you and take such reasonable commercial steps as are directed by you to assist in the investigation, mitigation, and remediation of each such data breach.
As a Data Subject in South Africa, you hold the following rights:
You may exercise any of these rights seamlessly by contacting our Information Officer directly at: