Privacy Policy

Last updated: 12 June 2026

01Who we are

Anash General Supply and Delivery (“Anash Suppliers”, “we”, “us”) supplies stationery and office furniture to government departments, schools, hospitals, doctors’ rooms and businesses in South Africa. For the purposes of POPIA we are the responsible party for the personal information described in this policy.

Anash General Supply and Delivery
Operating in Johannesburg & Port Elizabeth, South Africa
Email: quotes@anashsuppliers.co.za
Phone / WhatsApp: 081 669 5044

02The information we collect

We only collect what we need to quote you, supply you and keep proper business records:

• Quote and contact details: your name, company or department, sector, email address, phone number, delivery province, required-by date, VAT status and the list of items you need.
• Documents you upload: RFQ, tender or specification documents attached to a quote request, which may contain contact details of officials or staff.
• Correspondence: emails, WhatsApp messages and call records relating to your enquiries and orders.
• Order and billing records: purchase orders, delivery addresses, proof-of-delivery signatures and invoicing details.
• Limited technical data: our website is hosted on Cloudflare, whose infrastructure keeps standard security logs (such as IP addresses). Our quote and contact forms are protected by Cloudflare Turnstile, which may process device and network information and set a strictly necessary cookie to block automated abuse. This is the only cookie we set. For visitor statistics we use our own privacy-first analytics (self-hosted Umami on our infrastructure in South Africa), which is cookieless: it reports only aggregate trends (such as page views and which pages are popular) and does not use cookies, collect personal information, or track you across other websites.

03Where it comes from

We collect personal information directly from you, through the quote and contact forms on this website, by email, phone or WhatsApp, or on delivery documents. When we respond to a tender or formal RFQ, we may also receive the business contact details of officials from your organisation’s procurement documents or from public procurement platforms such as the Central Supplier Database (CSD) and eTenders portal.

04Why we use it

We process personal information for the following purposes, on the following lawful grounds under POPIA:

• To respond to your enquiry and prepare quotations: with your consent, given when you submit the form.
• To conclude and perform a contract: processing orders, arranging delivery, invoicing and managing your account.
• To meet legal obligations: keeping tax, VAT and accounting records required by South African law, and maintaining procurement and audit records where we supply organs of state.
• For our legitimate interests: following up on quotations, maintaining business records and protecting our website and forms from abuse.

We do not sell or rent personal information to anyone, and we do not use it for third-party marketing.

05Supplying the public sector

When we quote or supply government departments, schools, hospitals and other organs of state, the business contact details of officials (names, designations, work email addresses and phone numbers) are processed as part of procurement administration. These details may appear in quotation submissions, delivery notes, invoices and the audit records that public-finance legislation (including the Public Finance Management Act) requires both parties to keep.

06Who we share it with

We share personal information only with service providers who help us run the business, each acting as an “operator” under POPIA and bound to confidentiality and security obligations:

• Cloudflare, which hosts this website and processes form submissions;
• our email and communications providers, used to receive and respond to enquiries;
• couriers and delivery partners, who receive the delivery contact and address details needed to fulfil an order;
• our accountants, auditors and professional advisers, where necessary; and
• regulators, SARS or other authorities, where the law requires disclosure.

07Transfers outside South Africa

Our hosting and form-processing provider (Cloudflare) operates a global network, so security logs and form submissions may be stored or processed outside South Africa. Our visitor analytics are self-hosted on our own infrastructure within South Africa and are not transferred abroad. Where information does leave the country, we only use providers subject to laws or binding agreements giving personal information a level of protection substantially similar to POPIA, as section 72 of POPIA requires.

08How long we keep it

• Quotes that don’t become orders: kept for up to 24 months for follow-up and price history, then deleted, or earlier if you ask us to delete them.
• Order, invoice and delivery records: kept for at least 5 years, as tax and company law require.
• Tender and public-procurement records: kept for the periods required by the relevant procurement rules.

09How we protect it

In line with section 19 of POPIA, we apply reasonable technical and organisational safeguards: this website is served over encrypted connections (HTTPS), form submissions are protected against automated abuse, access to enquiry and order records is limited to the people who need it, and we use reputable service providers with their own security programmes. If we ever have reason to believe your personal information has been accessed by an unauthorised person, we will notify you and the Information Regulator as section 22 of POPIA requires.

10Your rights

Under POPIA you may, at any time and free of charge where the law provides:

• ask what personal information we hold about you, and request a copy;
• ask us to correct or update it;
• ask us to delete it, where we are not required by law to keep it;
• object to processing based on our legitimate interests;
• withdraw consent you have previously given; and
• complain to the Information Regulator if you believe we have mishandled your information.

To exercise any of these rights, contact us at quotes@anashsuppliers.co.za. Requests for access to records are handled in terms of the Promotion of Access to Information Act, 2000 (PAIA); our PAIA manual is available on request.

The Information Regulator (South Africa)
JD House, 27 Stiemens Street, Braamfontein, Johannesburg, 2001
Enquiries: enquiries@inforegulator.org.za
POPIA complaints: POPIAComplaints@inforegulator.org.za
inforegulator.org.za

11Children

This website and our services are aimed at organisations and business buyers, not at children, and we do not knowingly collect personal information from anyone under 18. Where we supply schools, we process the details of staff and officials, never of learners.

12Changes to this policy

If we change how we handle personal information, we will update this page and the “last updated” date above. Significant changes will be flagged on the website.

13Questions

Privacy questions, requests and complaints can be sent to quotes@anashsuppliers.co.za or raised with us on WhatsApp. We aim to respond within a reasonable time, and in any event within the periods POPIA prescribes.