PRIVACY POLICY

In terms of the Protection of Personal Information Act, 4 of 2013 (“POPIA”)

This Privacy Policy explains how First Fire collects, uses, stores, and protects your personal information, in line with the requirements of POPIA.

At First Fire, we are committed to protecting your privacy. We collect and process your personal information lawfully, fairly, and transparently, and only for legitimate purposes.

By using our website or sharing your personal information with us, you consent to the processing of your information in accordance with this Policy.

What is Personal Information?

Under POPIA, “personal information” means any information that relates to an identifiable, living, natural person, and, where applicable, an identifiable juristic person (such as a company).

Information We Collect

We may collect:

• Your contact details (e.g., name, email address, phone number, organisation).
• Information you provide directly when you engage with us or request services.
• Website usage data via cookies to help us understand how our site is used.

Where possible, we will indicate which information is mandatory and which is optional.

Please note that this Policy does not cover third-party websites, platforms, or services we do not control. We encourage you to review their privacy policies separately.

Employment Applications

If you apply for employment, we may collect personal information including details contained in letters of application and curriculum vitae or resume, previous employment background, education history, work-related licenses, certifications, or other professional credentials, languages and other relevant skills. You may also voluntarily choose to provide other relevant information as part of your application.

If you share personal details about someone else (such as a referee), it is your responsibility to first obtain their consent before providing that information to us.

How we use your information

We use your personal information only for purposes that are clear, lawful, and relevant.

These may include:

• Responding to your enquiries and providing services.
• Confirming and verifying your identity.
• Detecting and preventing fraud, money laundering or unlawful activities.
• Processing job applications and employment matters.
• Conducting surveys, analysis, or customer research.
• Meeting legal, regulatory, or accounting requirements.
• Managing legal or contractual obligations.

We take reasonable steps to keep your information accurate and up to date. Please notify us if your details change.

How We Store and Protect Your Information

Your information may be stored securely in physical or electronic format, including cloud services provided by trusted third parties.

We apply strict security measures to safeguard your data, including:

• Physical and digital access controls.
• Network and communication security.
• Secure retention and disposal procedures.
• Regular monitoring and incident response processes.

When we work with service providers, we require them to maintain the same level of security and confidentiality.

Sharing Your Information

We may share your personal information with trusted service providers who assist us in delivering services. These providers are bound by agreements to protect your information.

We may also disclose information:

• Where required by law or regulation.
• To protect our legal rights, property, or safety.

If you do not provide personal information when required, this may affect our ability to provide services or meet legal obligations.

Data Breaches

A data breach occurs when personal information is accessed without authorisation (for example, through theft, hacking, or accidental loss).

If a breach occurs, we will act in line with POPIA, including notifying affected individuals and the Information Regulator, where required.

Your Rights

You have the right to request access to, correction of, or deletion of the personal information we hold about you, as well as the right to withdraw consent (where applicable).

To exercise these rights:

• Submit a written request to us, clearly stating what information you require or what changes you would like made.
• Provide proof of identity (such as a certified copy of your ID or passport) so we can confirm that we are interacting with the correct person.
• We will respond to your request within a reasonable time, as required by POPIA. Please note that, in certain circumstances, a prescribed fee may be payable for access to your information.
• If we require additional information to process your request, we will inform you promptly.

Retention of Information

We keep your personal information only for as long as necessary to fulfil the purposes outlined in this Policy, unless a longer retention period is required by law.

Updates to This Policy

We may update this Privacy Policy from time to time. Any changes will be published on our website, and the latest version will always apply.

Contact Us

If you have any questions about this Privacy Policy, need assistance with your personal information, or wish to exercise any of your rights, you can contact us directly:

Email: info@first-fire.co.za

JHB: 087 152 0563

CPT: 021 518 1099

When contacting us, please include sufficient details for us to identify you and to understand the nature of your query or request.