Privacy Policy
Last Updated: 26 August 2025
This Privacy Policy explains how Imbewu Metabolomics Group (“we”, “our”, or “us”) collects, uses, stores, and protects your personal information in line with the Protection of Personal Information Act, 4 of 2013 (“POPIA”).
1. Introduction
Imbewu Metabolomics Group is committed to protecting the privacy of individuals and ensuring that personal information is handled responsibly and in compliance with POPIA. This Privacy Policy describes:
- What personal information we collect
- How we collect, use, store, and protect it
- Your rights under POPIA
- How you can exercise your rights and lodge complaints
By engaging with us or using our website at imbewumetabolomics.co.za, you consent to the terms outlined in this Privacy Policy.
2. Definitions
For the purposes of this policy:
- “Personal Information” means information relating to an identifiable, living natural person or juristic person, including but not limited to names, contact details, identification numbers, online identifiers, and correspondence.
- “Processing” means any operation or activity concerning personal information, including collection, use, storage, modification, transfer, or destruction.
- “Data Subject” means the person to whom the personal information relates.
- “Responsible Party” means Imbewu Metabolomics Group, as the party who determines the purpose and means of processing personal information.
3. Information We Collect
We may collect the following categories of personal information:
- Directly Provided Information: Names, phone numbers, email addresses, professional or academic details when you contact us, request information, or participate in our services.
- Automatically Collected Information: IP addresses, browser type, device identifiers, operating system, location data, and website usage activity (through cookies and analytics).
- Correspondence and Communication: Records of emails, telephone conversations, or other communications between you and us.
We do not knowingly collect information from minors without the consent of a competent person as defined in POPIA.
4. Purpose of Processing
Your personal information is processed for legitimate business purposes, including:
- Providing and maintaining our services
- Managing customer relationships and responding to enquiries
- Facilitating research, projects, and service improvements
- Ensuring compliance with applicable laws and regulations
- Monitoring and securing our digital platforms
- Marketing and communication purposes, where you have not objected
5. Legal Basis for Processing
In terms of POPIA, we rely on the following grounds for lawful processing:
- Your consent, where required
- Processing necessary to carry out a contract or provide services requested by you
- Compliance with a legal obligation
- Processing necessary for our legitimate interests, balanced with your rights
- To protect your vital interests or those of another individual
6. Sharing and Disclosure of Information
We do not sell or rent your personal information. We may disclose personal information:
- To service providers and contractors who assist us in operating our business
- To business or academic partners where collaboration is necessary
- To regulators, law enforcement, or other authorities where required by law
- In the context of a merger, acquisition, or restructuring of the organisation
7. Cross-Border Transfers
Where it is necessary to transfer personal information outside of South Africa, such transfer will only take place if:
- The recipient is subject to a law or binding agreement providing an adequate level of protection substantially similar to POPIA
- You have consented to the transfer
- The transfer is necessary for the performance of a contract or to protect your legitimate interests
8. Data Retention
Personal information will only be retained for as long as is necessary to fulfil the purposes for which it was collected, or for longer periods where retention is required by law, regulation, or contractual obligation. When no longer required, personal information will be securely deleted, anonymised, or destroyed.
9. Security Safeguards
We implement appropriate, reasonable, and organisational security measures to safeguard personal information against unauthorised access, disclosure, alteration, or destruction. These include:
- Access controls and authentication measures
- Secure servers and encrypted communication where applicable
- Regular system monitoring and vulnerability assessments
- Internal policies and staff training on information protection
However, we cannot guarantee that information transmitted over the internet is fully secure. You share information with us at your own risk.
10. Your Rights Under POPIA
You have the right to:
- Be informed about how your personal information is used
- Request access to the personal information we hold about you
- Request correction or updating of inaccurate or incomplete information
- Request deletion of personal information where legally permissible
- Withdraw consent at any time
- Object to the processing of your personal information
- Lodge a complaint with the Information Regulator of South Africa
11. Data Subject Participation
To exercise your rights, you may contact us. Requests must be submitted in writing, and we may require verification of identity before processing your request. We will respond to requests within the timeframes prescribed by POPIA.
12. Complaints
If you are not satisfied with how we handle your personal information, you may contact the Information Regulator:
Information Regulator (South Africa)
Email: enquiries@inforegulator.org.za
Complaints: POPIAComplaints@inforegulator.org.za
13. Updates to This Policy
We may update this Privacy Policy from time to time. Any revisions will be effective upon posting, with the “Last Updated” date adjusted accordingly. Material changes may be communicated directly to users where appropriate.
14. Contact Us
If you have any questions, concerns, or requests about this Privacy Policy or the way we handle personal information, you may contact us at:
Email: info@imbewumetabolomics.co.za
Address: Imbewu Metabolomics Group, Biochemistry Department,
University of Johannesburg, Auckland Park Kingsway Campus,
Johannesburg, Gauteng, South Africa

