Privacy Notice

1. Introduction

MSR Industrial Holdings (Pty) Ltd and its subsidiaries (collectively referred to as the “MSR Group”, “MSR”, “we”, “us” or “our”) respect your privacy and are committed to protecting your personal information.

This Privacy Notice explains how we collect, use, store, share and protect personal information submitted through our website and associated business communications, in accordance with the Protection of Personal Information Act 4 of 2013 (“POPIA”) and other applicable South African legislation.

This Notice applies to visitors to the MSR Group website who submit enquiries or otherwise communicate with us.

2. Responsible Party

MSR Industrial Holdings (Pty) Ltd operates the MSR Group website and is responsible for personal information processed under its control.

Contact details:

MSR Industrial Holdings (Pty) Ltd

6 Kobalt Street, CE6

Vanderbijlpark, Gauteng

South Africa

Telephone: +27 16 981 0232

Where an enquiry relates to a particular subsidiary, personal information may be shared with that subsidiary for the purpose of responding to the enquiry or providing the requested assistance.

Each subsidiary remains responsible for complying with POPIA in respect of personal information for which it acts as the responsible party.

3. Personal Information We Collect

When you complete the contact form on our website, we collect the following information:

• First name and surname: To identify you and address you appropriately.
• Business email address: To communicate with you regarding your enquiry.
• Company name: To identify the organisation you represent.
• Telephone number (optional): To contact you regarding your enquiry, where provided.
• Enquiry category: To direct your enquiry to the relevant business division or subsidiary.
• Description of your requirement: To understand and respond to your enquiry or request for information.

The enquiry categories available on our website include:

• Can-Tech™ Technology;
• Manufacturing & Fabrication;
• Machining & Component Recovery; and
• General Enquiry.

Limited technical information, including IP addresses, browser details or website usage information, may also be processed through website hosting, security or analytics technologies where applicable.

We collect only personal information reasonably necessary for the purposes described in this Notice.

4. How We Use Your Personal Information

We process personal information for the following purposes:

• Responding to enquiries and correspondence;
• Providing information about our products, technologies and services;
• Preparing quotations and assessing business opportunities;
• Directing enquiries to the appropriate MSR Group subsidiary or authorised executive;
• Communicating with prospective or existing customers, suppliers and business partners;
• Maintaining appropriate records of business correspondence;
• Managing legitimate commercial relationships;
• Maintaining website functionality and security;
• Complying with legal and regulatory obligations; and
• Conducting direct marketing where permitted under POPIA.

Processing will take place only where an applicable lawful justification exists under section 11 of POPIA.

5. Marketing Communications

The MSR Group may occasionally wish to communicate with interested individuals about its products, technologies, services, developments and business activities.

Where marketing communications constitute unsolicited electronic direct marketing, we will obtain consent where required by POPIA or rely on an applicable statutory exception.

Submitting an enquiry through our website does not automatically constitute consent to receive marketing communications.

Where marketing consent is requested through our website, it will be optional and separate from the submission of an enquiry.

Individuals may withdraw their marketing consent or opt out of marketing communications at any time by following the unsubscribe instructions in the relevant communication or contacting us directly.

We will not use website enquiry information for electronic direct marketing in circumstances prohibited by POPIA.

6. Voluntary and Required Information

Submission of an enquiry through our website is voluntary.

However, our online contact form requires visitors to provide an enquiry category, first name, surname, business email address, company name and description of their requirement.

Providing a telephone number is optional.

The required information enables us to understand and respond to the enquiry.

If the necessary information is not provided, we may be unable to process the enquiry or provide the requested assistance.

Visitors should avoid submitting sensitive personal information or unrelated confidential third-party information through the enquiry form.

7. Storage and Access to Personal Information

Personal information submitted through our website will be retained within the MSR Group’s secure Microsoft 365 business environment.

Access to submitted enquiry information is restricted to authorised company executives for the purposes of reviewing enquiries, responding to visitors, coordinating appropriate business communications and undertaking related lawful business activities.

Where necessary, relevant information may be shared with an authorised Group executive or subsidiary responsible for handling a particular enquiry.

Personal information will not be made available for general employee access or disclosed to unauthorised third parties.

We use reasonable technical and organisational safeguards to protect information against unauthorised access, loss, misuse, alteration or disclosure.

Microsoft and any other authorised technology service providers may process information on our behalf in accordance with their applicable contractual arrangements and data-protection obligations.

8. Sharing and Disclosure

We do not sell, trade or commercially distribute personal information collected through our website.

We may share personal information only where reasonably necessary and legally permitted, including with:

• Authorised MSR Group executives;
• Relevant Group subsidiaries handling particular enquiries;
• Microsoft and other authorised information technology or hosting service providers;
• Professional advisers where legitimately required; and
• Regulatory authorities or other persons where disclosure is required or permitted by law.

Where third parties process personal information on our behalf, we will take appropriate steps to ensure that the processing is subject to suitable confidentiality and security safeguards.

9. Information Security

The MSR Group is committed to protecting personal information through reasonable and appropriate technical and organisational security measures.

Website enquiry information is maintained in a restricted-access Microsoft 365 business environment.

Access is limited to authorised company executives with a legitimate business need.

We will take reasonable measures to prevent unauthorised access, accidental loss, unlawful disclosure or misuse of personal information.

Where a security compromise occurs, MSR will comply with applicable notification and remedial obligations under POPIA.

10. Retention of Personal Information

We retain personal information only for as long as reasonably necessary to fulfil the purpose for which it was collected, to maintain legitimate business records, or where further retention is required or permitted by law.

Website enquiry information may be retained while an enquiry remains active or while a legitimate business relationship or lawful recordkeeping purpose continues.

When personal information is no longer required and no lawful basis for further retention exists, we will securely delete, destroy or de-identify it, as appropriate.

11. Cookies and Website Technologies

Our website may use cookies and similar technologies to support website functionality, maintain security and assess website performance.

Depending on the website’s technical configuration, limited information relating to visits may be processed by authorised website hosting or analytics providers.

Visitors may manage cookies through browser settings or any cookie-preference facilities available on the website.

Where additional consent or other controls are legally required for particular tracking technologies, MSR will implement the appropriate measures.

12. International Transfers

The MSR Group uses Microsoft 365 and may use other authorised website hosting, email and information technology service providers.

Depending on the location and configuration of these services, personal information may be processed or accessed outside South Africa.

Where international transfers occur, MSR will comply with section 72 of POPIA and ensure that the transfers are supported by an appropriate lawful basis and applicable safeguards.

13. Your Rights Under POPIA

Subject to applicable law, you may:

• Request confirmation of whether we hold personal information about you;
• Request access to your personal information;
• Request correction or updating of inaccurate or incomplete information;
• Request deletion or destruction where legally appropriate;
• Object to processing in circumstances permitted by law;
• Withdraw consent where processing is based on consent;
• Object to direct marketing; and
• Lodge a complaint with the Information Regulator of South Africa.

Requests may be directed to enquiries@msrgroup.co.za, marked for the attention of the Information Officer.

We may require reasonable verification of identity before processing certain requests.

14. Information Officer and Privacy Enquiries

For questions regarding this Privacy Notice or the processing of personal information, please contact:

MSR Industrial Holdings (Pty) Ltd

Attention: Information Officer

Address: 6 Kobalt Street, CE6, Vanderbijlpark, Gauteng, South Africa

Telephone: +27 16 981 0232

Where a particular MSR Group subsidiary is responsible for processing personal information, the enquiry may be referred to that subsidiary’s Information Officer or authorised representative.

15. Complaints

If you believe your personal information has been processed unlawfully, you may lodge a complaint with the Information Regulator of South Africa.

16. Changes to This Privacy Notice

We may update this Privacy Notice to reflect changes in our business operations, technology, information-processing arrangements or applicable legal requirements.

The latest version will be made available on our website, together with the applicable last-updated date.

17. Applicable Law

This Privacy Notice is governed by the laws of the Republic of South Africa, including POPIA.

Last Updated: 20 October 2026