Stelios Group South Africa – Website Privacy Policy
Last Updated: 18 August 2026
1. Introduction
Stelios Group South Africa (“we,” “our,” or “us”) respects your privacy and is committed to protecting your personal information in compliance with the Protection of Personal Information Act, 4 of 2013 (POPIA) and other applicable laws. This policy explains how we collect, use and safeguard your information when you visit our website (https://steliosgroup.co.za) or engage our services.
2. Who we are (Responsible Party)
The responsible party for personal information processed under this policy is Stelios Group South Africa, 202 Robert Sobukwe St, Sunnyside, Pretoria, 0082. Our Information Officer is the head of the business and can be reached at [email protected] or (012) 755 3723.
3. Information we collect
We may collect and process the following:
- Personal information you provide: name, email address, phone number and company details submitted via our contact form, by email, by phone or by WhatsApp.
- Client engagement information: where you become a client, the financial, tax, payroll and company records needed to deliver the services you engage us for.
- Automated information: our website host and security services (including Cloudflare) process technical data such as your IP address and browser type to serve and protect the site.
4. How we use your information, and on what basis
We process personal information to respond to enquiries, deliver the services you request, administer our client relationships, and comply with legal obligations (for example tax and audit requirements). POPIA allows this processing where it is necessary to perform a contract with you, where the law requires it, where it serves our or your legitimate interests, or where you have consented. We only send marketing communications with your consent, and you can opt out at any time.
5. Providing your information is voluntary
You are not obliged to provide personal information through this website. If you choose not to, the only consequence is that we may be unable to respond to your enquiry or provide the service you have asked about. Where we act as your accountants, certain information is required by law (for example by SARS or CIPC), and without it we cannot perform those services.
6. Cookies
This website does not use advertising or marketing cookies. Cookies that may be set are limited to: strictly necessary cookies from our security provider (Cloudflare, including the Turnstile anti-spam check on our contact form); cookies set by Google when you interact with the embedded map on our contact page; and first-party analytics cookies set by Google Analytics, which we use to understand, in aggregate, how visitors find and use this website (pages viewed, approximate region, device type). Google Analytics does not show us your identity, and we do not use it for advertising or to build individual profiles. Analytics data is processed by Google and may be stored outside South Africa (see section 8). You can block cookies in your browser — including analytics cookies — without losing access to our content.
7. Sharing of information
We do not sell your personal information. Limited sharing may occur with: service providers (such as IT, hosting and professional partners) under confidentiality obligations; and regulators and authorities (such as SARS or CIPC) where we are legally required or authorised to do so, or where it is necessary to deliver the services you have engaged us for.
8. Cross-border transfers
Some of our service providers (for example website hosting, email and security services) may store or process information outside South Africa. Where this happens, we ensure the recipient is subject to laws or contractual commitments that provide a substantially similar level of protection to POPIA, as required by section 72 of the Act.
9. Security and breach notification
We protect personal information with appropriate, reasonable technical and organisational measures, including encryption in transit (SSL/TLS), firewalls and access controls. If we ever have reasonable grounds to believe your personal information has been accessed or acquired by an unauthorised person, we will notify the Information Regulator and, where required, you, as soon as reasonably possible, in line with section 22 of POPIA.
10. Retention
We keep personal information only as long as necessary for the purposes it was collected, or as long as the law requires us to keep it (tax and accounting records carry statutory retention periods). Thereafter it is deleted, destroyed or de-identified.
11. Your rights under POPIA
You may at any time:
- Request confirmation of whether we hold personal information about you, and request access to it;
- Request correction of inaccurate, out-of-date or misleading information;
- Request deletion or destruction of personal information we are no longer entitled to keep;
- Object, on reasonable grounds, to the processing of your personal information;
- Withdraw consent for marketing communications;
- Lodge a complaint with the Information Regulator (South Africa).
To exercise any of these rights, contact our Information Officer at [email protected]. The Information Regulator can be reached at: Woodmead North Office Park, 54 Maxwell Drive, Woodmead, Johannesburg, 2191 · 010 023 5200 · [email protected] (complaints) · [email protected] (enquiries) · inforegulator.org.za.
12. Access to records (PAIA)
Our manual in terms of section 51 of the Promotion of Access to Information Act, 2 of 2000 (PAIA) is available at steliosgroup.co.za/paia-manual and on request from our offices.
13. Changes to this policy
Updates will be posted on this page with a revised “Last Updated” date.
14. Contact us
For privacy-related questions or to exercise your rights, contact: Email: [email protected] · Phone: (012) 755 3723 · Address: 202 Robert Sobukwe St, Sunnyside, Pretoria, 0082