Jewellery Council of South Africa
Privacy Policy
Last updated: 2025-12-09
The Jewellery Council of South Africa NPC (referred to as “JCSA”, “we”, “us”, or “our”) is committed to protecting your privacy and handling your personal information responsibly.
This Privacy Policy explains how we collect, use, share, and protect your personal information when you use our website, member portal, online directory, and related services (together, the “Services”).
By using our Services, you agree to the practices described in this Privacy Policy.
1. Who we are
The Jewellery Council of South Africa NPC is an industry body representing the South African jewellery trade.
Registered office:
2 Le Paradis, 3 Oak Avenue, Bedfordview, 2007
Email: admin@jewellery.org.za
For the purposes of South Africa’s Protection of Personal Information Act, 2013 (“POPIA”), we act as the “responsible party” (data controller) for the personal information we process in connection with our Services.
2. Information we collect
We collect and process different types of personal information depending on how you interact with us.
2.1 Information you provide to us
This includes information you submit when you:
- Apply for membership or accreditation
- Create or manage a member or portal account
- Submit or update a directory listing
- Register for events, initiatives, or newsletters
- Request information, make an enquiry, or lodge a complaint
- Upload documents, logos, or other materials via the portal
The information may include:
- Name and surname
- Job title and role
- Business name, registration details, and contact details
- Email address and telephone numbers
- Physical and postal addresses
- Membership and accreditation numbers
- Order history for marketing materials or badges
- Any information you choose to include in forms, messages, or uploaded files
Where you provide personal information about another person (for example, a contact person at your business), you confirm that you are authorised to do so and that they have been informed about this Privacy Policy.
2.2 Information we collect automatically
When you use our website or portal, we may automatically collect:
- IP address and general location (for example, city or region)
- Device and browser type
- Pages viewed and actions taken (such as searches run, resources downloaded)
- Dates, times, and duration of visits
- Referral information (for example, the site you came from)
We use this information to improve security, diagnose problems, and understand how our Services are used.
2.3 Information from third parties
We may receive information about you from:
- Payment or invoicing providers
- Email and communication service providers
- Public records and industry databases
- Other industry bodies and stakeholders
We use this information to verify membership or accreditation details, maintain accurate records, and support our governance responsibilities.
3. How we use your information
We use personal information for the following purposes:
- Membership and accreditation administration – To process applications, manage membership and accreditation status, maintain registers, and communicate with members.
- Directory and portal management – To create, publish, and maintain member and supplier listings; to provide portal access; and to allow you to manage your business details, branches, and marketing tools.
- Communication and updates – To send important notices about membership, policy changes, events, initiatives, news, or service updates.
- Events, initiatives, and training – To manage registrations, attendance, and communication for events, campaigns, and training programmes.
- Improvement and analytics – To monitor usage, improve the design and performance of our website and Services, and develop new tools for members and consumers.
- Legal and governance purposes – To comply with legal obligations, respond to lawful requests, enforce our terms, manage complaints, and support industry standards and ethical conduct.
We only process personal information when we have a lawful basis to do so, such as your consent, the performance of a contract with you, compliance with legal obligations, or our legitimate interests in running an effective industry body.
4. Cookies and analytics
We may use cookies and similar technologies to:
- Keep you signed in to the portal
- Remember your preferences (such as search filters)
- Understand how visitors use the website and portal
- Improve usability and performance
You can control cookies through your browser settings. Blocking certain cookies may affect how some parts of the website or portal function.
We may use privacy-respecting analytics tools to generate aggregated, anonymised usage statistics. These statistics do not identify individual users.
5. Sharing your information
We do not sell your personal information.
We may share personal information with:
- Service providers who assist us with hosting, email delivery, payment processing, analytics, or other technical and administrative services
- Industry partners and regulators where required to support industry standards, ethics, or legal compliance
- Event and initiative partners where collaboration is necessary to deliver specific programmes or benefits
- Professional advisers such as auditors or legal advisers, where necessary for governance or legal matters
- Law enforcement or regulators, where required by law or to protect our rights or the rights of others
Where we use service providers, we require them to handle your information securely and only for the purposes we specify.
6. International transfers
Some service providers or systems we use may be located outside South Africa. Where your personal information is transferred across borders, we take reasonable steps to ensure that it is protected by appropriate safeguards and that the receiving party will provide a level of protection substantially similar to POPIA’s requirements.
7. Retention of your information
We keep personal information only for as long as is reasonably necessary for the purposes set out in this Policy, or as required by law.
Retention periods may differ depending on:
- Statutory requirements (for example, financial records)
- Membership and accreditation life cycles
- The need to resolve disputes or enforce agreements
When information is no longer required, we will delete or de-identify it in a secure manner.
8. How we protect your information
We use a combination of technical and organisational measures to protect personal information against loss, misuse, unauthorised access, disclosure, alteration, or destruction.
While we take reasonable precautions, no system can be guaranteed to be completely secure. You are responsible for keeping your login details confidential and notifying us if you suspect any unauthorised use of your account.
9. Your rights
Under POPIA and other applicable laws, you may have the right to:
- Request access to the personal information we hold about you
- Request correction or update of inaccurate or incomplete information
- Request deletion of information, where legally permissible
- Object to certain types of processing, or withdraw consent where processing is based on your consent
- Opt out of non-essential communications at any time
We may require proof of identity before responding to certain requests. Some rights may be limited where we are required to retain information for legal or legitimate business reasons.
To exercise your rights, please contact us using the details below.
10. Third-party websites
Our website and portal may contain links to third-party sites or services. We are not responsible for the privacy practices or content of those third parties. We encourage you to read their privacy policies before providing them with your personal information.
11. Contact us
If you have any questions about this Privacy Policy, or if you wish to exercise your rights, please contact:
Jewellery Council of South Africa NPC
2 Le Paradis, 3 Oak Avenue, Bedfordview, 2007
Email: admin@jewellery.org.za
Telephone: (011) 484 5528
You may also lodge a complaint with the Information Regulator (South Africa) if you believe your rights have been infringed.
12. Changes to this Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements.
The “Last updated” date at the top of this page indicates when it was last revised. Material changes will be highlighted where appropriate. Your continued use of our Services after changes take effect will indicate that you have read and understood the updated Policy.