Privacy Policy
Last updated: 18 August 2026
Directive Compliance Systems (Pty) Ltd respects your privacy and handles personal information in line with the Protection of Personal Information Act, 2013 (POPIA).
Who is responsible
- Responsible party: Directive Compliance Systems (Pty) Ltd
- Registration number: 2026/002540/07
- Address: 8 Crystal Close, Kloofendal, Roodepoort, Gauteng, 1709
- Information Officer: Contactable via the email and phone number below
- Email: info@dcscompliance.co.za
- Phone: 065 074 8009
What we collect
When you buy from us or make an enquiry, we collect your name, business name, email address, phone number, delivery address and billing address.
If you engage us for pharmacy compliance work, we collect information about your premises — licence details, staff registers, SOPs and compliance records — as needed for the work.
When you use the monitoring system, we collect temperature and humidity readings from your sensors, along with device and connection data.
We do not collect or store your card details. Payments are handled by Yoco, and your card information goes directly to them.
Why we collect it
- To process and deliver your order
- To provide the services you have engaged us for
- To send temperature alerts and compliance reports
- To respond to your enquiries
- To issue invoices and keep accounting records
- To meet our legal and regulatory obligations
We process this information because it is necessary to perform our contract with you, to comply with the law, or because you have consented.
Who we share it with
- Yoco — payment processing
- Our appointed courier partner — delivery, receiving your name, address and phone number
- Afrihost — website and data hosting
- Our monitoring platform provider — carries your sensor readings
- Our accountant — for financial records
- Regulatory authorities — where a submission on your behalf requires it, or where the law compels us
We do not sell your information, and we do not share it for marketing.
Where it is stored
Website and order data is hosted in South Africa. Monitoring data is stored on the monitoring provider’s cloud platform, which may be outside South Africa. Where information leaves the country, we take reasonable steps to ensure it remains adequately protected as POPIA requires.
How long we keep it
- Order and financial records: five years, as tax legislation requires
- Compliance records and pharmacy documentation: seven years, or longer where regulation requires
- Monitoring data: for as long as your plan is active, plus 12 months
- Enquiries that do not lead to work: deleted after 12 months
Your rights
Under POPIA you may:
- Ask what personal information we hold about you
- Ask us to correct or delete information that is wrong or no longer needed
- Object to us processing your information
- Withdraw consent where processing relies on it
- Complain to the Information Regulator
To exercise any of these, email info@dcscompliance.co.za. We will respond within 30 days.
Complaints
If you are unhappy with how we have handled your information, contact us first. If we cannot resolve it, you may complain to the Information Regulator of South Africa.
Information Regulator (South Africa)
Woodmead North Office Park, 54 Maxwell Drive, Woodmead, Johannesburg, 2191
Telephone: 010 023 5200 | Toll free: 0800 017 160
General enquiries: enquiries@inforegulator.org.za
POPIA complaints: POPIAComplaints@inforegulator.org.za
Website: inforegulator.org.za
Security
We use encrypted connections, access controls and secure hosting to protect your information. No system is perfectly secure, but if a breach affects your personal information we will notify you and the Information Regulator as POPIA requires.
Cookies
This website uses cookies to keep your shopping cart working, remember your preferences, and understand how the site is used. You can block cookies in your browser, though parts of the site may stop working properly.
Changes
We may update this policy. The current version is always published here.