Privacy Policy

Last updated: October 2026

This policy explains how Vumah Group collects, uses and protects your personal information, in line with the Protection of Personal Information Act 4 of 2013 (POPIA).

1. Who we are

This website is run by Vumah Management Group (Pty) Ltd, registration number 2013/015946/07, trading as Vumah Group. In this policy, "we", "us" and "our" mean Vumah Group and its divisions: Professional Services, Construction and Developments.

We are the responsible party for the personal information you give us through this website. If you have a question about this policy or your information, contact our Information Officer.

Information Officer: Vusi Mahlangu, Director
Email: info@vumah.co.za
Phone: 012 035 1762
Address: Building and Design Office, 267 West Avenue, Centurion

2. What we collect

We only collect information you choose to give us, and basic technical information about how the website is used.

When you contact us

Your name, email address and phone number
Your company name, if you give it
What your enquiry is about, and your message

When you apply for a position

Your name, email address and phone number
The position you are applying for
Your CV and any note you add

When you visit the website

Technical information such as your browser, device type, and the pages you visit, collected through cookies (see section 5)

Please do not send us sensitive information such as ID numbers, banking details or health information through the website.

3. How we use it

To reply to you about your project, tender or question
To consider your application for a position, and contact you if you are shortlisted
To prepare quotes and proposals you have asked for
To improve the website, using anonymous visitor statistics
To meet legal obligations, for example tax and procurement records

We do not sell your information, and we do not use it to send you marketing unless you have asked us to.

We only share your information when it is needed to do what you asked, or when the law requires it. This may include:

Our own team across the group's divisions, where your enquiry needs their input
Service providers who run our website, hosting and email, under agreements to keep it confidential
Authorities, if we are legally required to

Some of these providers may store information outside South Africa. When this happens, we make sure they protect it to a standard at least equal to POPIA.

5. Cookies and analytics

Cookies are small files saved on your device when you visit a website. We use them to keep the website working properly and to understand, in general terms, how visitors use it.

We use Google Analytics to count visits and see which pages are popular. This information is grouped and does not identify you personally. You can block or delete cookies in your browser settings; the website will still work.

6. How long we keep it

Enquiries: for as long as needed to respond and manage any project that follows, and then as required by law
Job applications and CVs: for the recruitment process for that position, and no longer than 12 months afterwards
Project and tender records: for the periods required by tax and procurement law

When we no longer need your information, we delete or destroy it securely.

7. How we protect it

We use reasonable technical and organisational measures to keep your information safe, including a secure (encrypted) website connection, protected email accounts, limited staff access and regular software updates.

CVs sent through the careers form are emailed directly to our team and are not stored on the website.

8. Your rights

Under POPIA, you have the right to:

Ask whether we hold personal information about you, and for a copy of it
Ask us to correct information that is wrong or out of date
Ask us to delete information we no longer have a reason to keep
Object to us using your information for a particular purpose
Withdraw your consent at any time, where we rely on it

To make a request, email info@vumah.co.za with the subject "Personal information request". We may ask you to confirm your identity before we act on it. For formal requests for records, see our PAIA Manual.

9. Complaints

If you are unhappy with how we have handled your information, please contact our Information Officer first so we can put it right. You also have the right to complain to the Information Regulator:

Website: inforegulator.org.za
Email: POPIAComplaints@inforegulator.org.za
Address: JD House, 27 Stiemens Street, Braamfontein, Johannesburg

10. Changes to this policy

We may update this policy from time to time. The latest version will always be on this page, with the date it was last updated at the top.