Privacy

Privacy Policy

Last updated: 10 August 2026

MDSA Project & Construction Management (Pty) Ltd (“MDSA”, “we”, “us”) respects your privacy. This policy explains what personal information we collect through this website, why we collect it, how we use it and what rights you have.

We process personal information in accordance with the Protection of Personal Information Act 4 of 2013 (POPIA).

1. Who we are

MDSA Project & Construction Management (Pty) Ltd is a project management, construction management, tenant coordination and client representation firm operating in South Africa and abroad.

Head office: 649 Sibelius Street, Lukasrand, Pretoria, 0181
Postal: PO Box 1554, Brooklyn Square, 0075
Email: info@mdsapm.co.za

For the purposes of POPIA, MDSA is the responsible party for the personal information described in this policy.

2. Information we collect

Information you give us

When you complete the contact form on this website, we collect your name, email address and the content of your message. Only your email address is required; the rest is optional.

If you contact us by email or telephone using the details published on this site, we hold whatever information you choose to provide in that correspondence.

Information collected automatically

Our hosting provider records standard technical information when you visit, including your IP address, browser type, the pages you view and the time of your visit. This is generated automatically by the web server and is used for security and to keep the site running.

If website analytics are active, aggregated and non-identifying usage statistics may also be collected — see section 9.

3. Why we process it

We process personal information for the following purposes:

• To respond to your enquiry. If you submit the contact form or email us, we use your details to reply and to discuss your project.
• To provide our services. Where we are engaged on a project, we process the contact details necessary to carry out that work.
• To keep the website secure and available. Technical logs help us detect abuse and diagnose faults.
• To comply with the law. We retain certain records where legislation requires it.

Our lawful basis is your consent when you voluntarily submit the form, the performance of a contract where we are engaged by you, and our legitimate interests in operating and securing this website.

We do not sell your personal information, and we do not use it for direct marketing without your consent.

4. AI assistant on this website

5. Who we share it with

We share personal information only where necessary, and only with:

• Our website host and form processor, which stores contact form submissions and forwards them to us by email.
• Our email provider, which delivers and stores our business correspondence.
• The AI provider powering the assistant, limited to the messages you type into the chat.
• Professional advisors and authorities, where we are legally obliged to disclose information.

Some of these providers operate servers outside South Africa. Where personal information is transferred across borders, we take reasonable steps to ensure it receives a level of protection comparable to that required by POPIA.

6. How long we keep it

Contact form submissions and related correspondence are kept for as long as necessary to deal with your enquiry and to maintain a record of our dealings, and thereafter only as long as required by law or for legitimate business purposes. Technical server logs are retained for a short period for security purposes.

You may ask us to delete your information at any time — see section 8.

7. How we protect it

This website is served exclusively over an encrypted HTTPS connection and applies a content security policy and related protections to guard against tampering and injection attacks. Contact form submissions are transmitted over encrypted connections.

No system is completely secure. While we take reasonable technical and organisational measures to safeguard personal information, we cannot guarantee absolute security of information transmitted over the internet.

8. Your rights under POPIA

Subject to the requirements of POPIA, you have the right to:

• Ask what personal information we hold about you;
• Request that we correct or update inaccurate or incomplete information;
• Request that we delete information we no longer have grounds to keep;
• Object to our processing of your information on reasonable grounds;
• Withdraw consent you previously gave, without affecting processing already carried out;
• Lodge a complaint with the Information Regulator.

To exercise any of these rights, email info@mdsapm.co.za. We may need to verify your identity before acting on a request.

9. Cookies and analytics

This website does not set advertising or tracking cookies of its own, and it does not use your information to target advertising.

Fonts are loaded from Google Fonts, which means your browser makes a request to Google's servers when the page loads. Where website analytics are enabled, aggregated statistics such as page views and visitor counts may be collected to help us understand how the site is used. This information is not used to identify you personally.

You can block or delete cookies through your browser settings. The website will continue to function normally if you do.

10. Children

This website is intended for business use and is not directed at children. We do not knowingly collect personal information from anyone under the age of 18. If you believe we have inadvertently done so, please contact us and we will delete it.

11. Changes to this policy

We may update this policy from time to time to reflect changes in our practices or in the law. The revision date at the top of this page shows when it was last amended. Material changes will be reflected on this page.

12. Contact and complaints

If you have questions about this policy or how we handle your personal information, contact us at info@mdsapm.co.za or +27 12 343 6866, or write to PO Box 1554, Brooklyn Square, 0075.

If you are not satisfied with our response, you may lodge a complaint with the Information Regulator using the details in section 8.