SafriCanna

Legal

Privacy policy

Who processes your information

SafriCanna Pharmaceutical Agritech, Centurion, Pretoria, Gauteng, South Africa, is the responsible party under South Africa's Protection of Personal Information Act (POPIA) and the controller under the EU General Data Protection Regulation (GDPR) where that regulation applies.

What we collect

Enquiry data: company or practice name, contact name, business email, country of licence, the capacity in which you enquire, your message, and your licensed-capacity declaration.

Portal data: account email, name, assigned access tier, and records of actions taken in the portal such as document access and votes recorded.

Technical data: standard server and error logs needed to operate and secure the site.

Why we process it

To respond to a business enquiry and to verify that a counterparty holds the authorisation required before technical documentation is released — processing necessary for our legitimate interests and for steps preparatory to a contract.

To operate access-controlled corporate and investment material, and to maintain the audit records that our regulatory obligations require.

We do not process patient data

SafriCanna does not supply the public and does not seek, want or knowingly process health information about identifiable individuals through this website. Do not send clinical or patient information through the enquiry form.

Sharing and transfers

Personal information is shared only with service providers who host and secure this website and its database under contract, and with professional advisers or regulators where we are legally required to do so. Where information is transferred outside South Africa or the EEA, it is transferred under an appropriate legal transfer mechanism.

Retention

Enquiry records are retained for as long as needed for the commercial relationship and for the period our regulatory and audit obligations require, then deleted or anonymised.

Your rights

You may request access to, correction of, or deletion of your personal information, object to processing, or request that we restrict it. Under the GDPR you may also request portability and lodge a complaint with your supervisory authority; under POPIA you may complain to the Information Regulator of South Africa.

Requests can be made through the enquiry channel on this website.

Security

Access to portal content is authenticated and role-restricted, documents are held in private storage and served through short-lived signed links, and database access is governed by row-level security policies.