Privacy Policy

Last updated: 10 July 2026

1. Introduction

AQRate (Pty) Ltd (“AQRate”, “we”, “us”) is committed to protecting the personal information of everyone we deal with, including website visitors, prospective and current clients, employees of client entities, and other data subjects whose information we process in the course of providing B-BBEE verification and related services.

This Privacy Notice is issued in terms of sections 18 and 19 of the Protection of Personal Information Act, 4 of 2013 (“POPIA”), and explains what personal information we collect, why we collect it, how we use, store, and protect it, and what rights you have in relation to that information.

This notice applies to information collected via our website (www.aqrate.co.za), during client engagements, and through any other channel by which we collect personal information.

2. Responsible Party and Information Officer

AQRate (Pty) Ltd, Reg No. 2002/001364/07, of Unit OL012, First Floor Oak Leaf Terrace, Old Oak Office Park, C/O Old Oak and Durban Road, Bellville, 7535, is the Responsible Party for personal information collected via this website and through our direct client relationships.

Information Officer contact details:

Name / designation: Jeanette Buys, CEO
Email: [email protected]
Telephone: 0861 277 283

Where AQRate processes personal information on behalf of, and under the instruction of, another Responsible Party, this notice is supplemented by the terms of the applicable Operator Agreement.

3. What Personal Information We Collect

Depending on the nature of your interaction with us, we may collect:

Contact details (name, email address, telephone number, physical/postal address)
Identification information (ID number, company registration number, tax and VAT numbers)
B-BBEE verification information (ownership, management control, skills development, enterprise and supplier development, socio-economic development data, and supporting documentary evidence)
Financial information required to substantiate verification claims
Employment information of client-entity employees, where relevant to verification
Website usage information (submitted via online forms, quote requests, and contact forms)
Correspondence and records of communication with AQRate

Processing of Special Personal Information

In the course of providing B-BBEE verification, rating, monitoring, due diligence and related services, AQRate may process special personal information, including information concerning a data subject’s race or ethnic origin.

AQRate relies on lawful grounds under POPIA (Section 27) and limits processing to what is reasonably necessary.

4. Purpose of Collection and Legal Basis for Processing

We collect and process personal information for the following purposes:

To perform B-BBEE verification services
To maintain AQRate’s accreditation as a B-BBEE Rating Agency with SANAS
To respond to quote requests and general enquiries
To administer the client relationship (certificates, invoicing, etc.)
To comply with legal, regulatory, and accreditation obligations

5. Source of Information

Where personal information is not collected directly from the data subject, it is sourced from the relevant client entity acting under its own lawful basis.

6. Voluntary or Mandatory Provision

Provision of information required for B-BBEE verification is mandatory. General website enquiries are voluntary.

7. Recipients of Personal Information

We do not sell or trade personal information. It may be shared with SANAS, regulatory bodies, service providers (e.g. Microsoft), and professional advisors under confidentiality agreements.

8. Cross-Border Transfers

Certain service providers may process information outside South Africa. We ensure adequate protection in accordance with section 72 of POPIA.

9. Retention of Information

We retain verification records for the current SANAS Accreditation Cycle plus the preceding cycle (up to ~8 years). Other records are retained only as long as necessary.

10. Security Safeguards

AQRate implements appropriate technical and organisational measures including encryption, access controls, audit trails, and Microsoft 365 security features.

11. Notification of Security Compromises

In case of a security compromise, we will notify the Information Regulator and affected data subjects as required by section 22 of POPIA.

12. Data Subject Rights

You have the right to access, correct, delete, or object to the processing of your personal information. Requests should be directed to the Information Officer.

13. Information Regulator Contact Details

Website: www.justice.gov.za/inforeg
Email: [email protected]
Physical address: JD House, 27 Stiemens Street, Braamfontein, Johannesburg, 2001

14. Changes to This Notice

We may update this notice from time to time. The “Last updated” date will indicate when it was last revised.

15. Contact Us

If you have any questions, please contact our Information Officer (details in section 2) or general enquiries: [email protected] / 0861 277 283.

AQRate Privacy Policy