Effective date: 8 August 2020
We take our obligation to protect your personal information and privacy seriously.
Your personal information will be treated in a secure and confidential manner in compliance with all applicable laws and regulations. This privacy policy describes our information handling practices.
Morgan Solus (Pty) Ltd (“us”, “we” or “our”) operates several websites (including but not limited to https://morgansolus.com/ and https://bcmtoolkit.com/) and mobile applications. This privacy policy applies to all of our sites and online platforms.
Morgan Solus is a business-to-business (B2B) service provider, and in general we do not collect personal information for our own purposes. Morgan Solus is an “operator” or “processor” of personal information under data protection laws. The “controller” or “responsible party” is our client, and likely to be your employer or an organisation that your work with.
What personal information do we collect?
Because we provide custom tools to help organisations with business continuity, crisis management and disaster recovery, we may need to collect personal information from you for these purposes. This is at the request of the controller and is subject to their internal privacy policies and data handling practices.
Typical information that we may collect includes name, employer, job title, email address, mobile number, but at the discretion of your employer, we may be requested to collect more information. In some cases, this may include sensitive health data.
How we collect and your personal information
In general, we only collect your personal information directly from you (for example by you filling in forms on our websites or apps, or when you send us an email). Due to the nature of the services that we provide, we may also collect some information (like your name and company email address) from your employer (the controller).
We may also automatically collect certain data from you when you use our websites by using cookies and similar technologies. This may include IP address, type of device, usage statistics, geographic location and tracking information for analytics purposes.
Your personal information will only be used for the purposes that it is collected, as directed by the controller. Some of the information which is collected automatically is used for analytics purposes and helps us to understand how our products are being used and improve functionality on our websites or apps.
Sharing and disclosure of your personal information
All information collected via our websites or applications will be provided to the controller as part of the services agreement which we have with them.
We will never sell your personal information to any third parties.
We may share your personal information in the following circumstances:
- To our contractors or service providers who support our business operations
- If the controller has requested us to do so (e.g. for audit purposes)
- If we have your consent to do so
- If we are legally obligated to, or if we have been served with a court order or other valid request
We may occasionally disclose aggregated or statistical data which does not contain personal information and cannot be used to identify you to third parties.
From time to time, we may include links to other websites whose privacy practices may differ from our own. If you submit personal information to any of those sites, you will be governed by their privacy policies. Please carefully read the privacy policy of any website you visit.
Security of your personal information
We take appropriate and reasonable technical and organisational measures designed to secure your personal information and protect it from loss, misuse, unauthorised access, use, changes and disclosure. Although we implement and maintain security measures that are appropriate to our business activities, please be aware that no security measures are perfect or impenetrable and that providing us with your personal information is done at your own risk. If you are provided with login details for our websites or applications, you are responsible for ensuring that these are kept confidential. We are not responsible if you circumvent any privacy or security measures on our websites or applications.
We have procedures in place to deal with any suspected breach related to personal information and we will notify you and any applicable regulator of such a breach if we are legally required to do so.
International transfers of personal information
We make use of technologies, platforms and applications which may collect, process or host your personal information. These are hosted in the Republic of South Africa, which may not have similar data protection laws to your country of residence. If this makes you feel uncomfortable, we recommend that you contact the controller who has requested that you provide personal information into one of our platforms. As a controller, this is governed by our services agreement, but if this is against your corporate policies, then we advise that you do not make use of our products or services.
What are your privacy rights?
- What are your choices?
- You may always choose not to disclose personal information to us, but bear in mind that some information may be required for us to provide our products and services, or a part of the services agreement that we have with your employer (the controller).
- Cookies: you can set your web browser to reject cookies. However, this may significantly restrict your access to some functionality and areas of our websites.
- Marketing communications
- We will not use your contact details for marketing purposes. However, please be aware that we may still send you non-promotional communications, like service-related emails.
- How can you access & update your personal information?
- You have a right to request access to any personal information which you have provided to us. If you need to correct or update any of your personal information, please update it via the controller (i.e. your employer), on the website or app, or send an email to info@morgansolus.com.
- Delete your information
- Similarly, if you would like to remove your personal information from our records, you can make a request to info@morgansolus.com. We will use our best efforts to promptly delete all your personal information and cease the use thereof. Please note, however, that this will not prevent us from using any aggregated or de-identified information that does not identify an individual.
- We may also retain and use your personal information as necessary to comply with legal obligations, dispute resolution, and/or the enforcement of any contractual agreements.
Will Morgan Solus ever change this policy?
From time to time, we may need to make changes to this privacy policy, to cater for changes in laws, our business processes, the technologies that we use, or our products and services. Any material changes will be published on our website, but we recommend that you check this policy periodically, just to be sure. Your continued use of our products or services after we make any changes to this privacy policy will constitute your acknowledgement of the changes and your consent to be bound by the updated privacy policy.
Contact details
If you have any questions or concerns regarding this privacy policy, please send a detailed message to info@morgansolus.com and we will do our best to resolve your concerns.