Privacy Policy & Data Protection Statement

01. Responsible Party Identification

Dabres Precision Engineering (Pty) Ltd ("Dabres", "we", "us", or "our") operates manufacturing and precision fabrication facilities providing CNC machining, drill rod engineering, and MES (Manufacturing Execution System) tracking services. We are dedicated to safeguarding the privacy and integrity of information entrusted to us by our corporate clients, suppliers, and website visitors.

02. Scope & Categories of Data Processed

We collect and process personal and corporate technical data necessary to execute manufacturing contracts, generate formal quotations, and fulfill client fabrication job orders:

• Client Company Profiles: Registered company name, registration number, VAT number, and billing/shipping addresses.
• Contact Identifiers: Authorized engineering contact person, email address, telephone numbers, and designated procurement officers.
• Proprietary Engineering Artifacts: CAD files (STEP, DXF, DWG, IGES, STL), engineering drawings, dimensional specifications, material grade requirements, and quality control tolerances.
• MES Operational Telemetry: Machine cycle logs, shift sign-offs, digital dispatch handover signatures, and quality assurance inspection measurements.
• Digital Identifiers: Secure session cookies, IP addresses, and authenticated access tokens strictly for multi-tenant MES access security.

03. Purpose of Processing & Lawful Basis

All processing is performed under Section 11 of POPIA for the following legitimate business purposes:

• Processing requests for quotation (RFQ), engineering feasibility audits, and toolpath configurations.
• Managing manufacturing work orders, machine tool scheduling, and real-time client status tracking.
• Generating dispatch manifests, delivery documentation, and digital signature capture upon handover.
• Invoicing, statutory tax reporting under SARS compliance, and dispute resolution.
• Securing client portal access via role-based access control (RBAC).

04. Technical & Operational Security Safeguards

In accordance with Section 19 of POPIA, Dabres maintains robust technical and organisational security controls:

• End-to-End Encryption: All communications are secured using TLS/HTTPS encryption with HTTP Strict Transport Security (HSTS) headers.
• Database Security: All queries use PDO parameterized prepared statements preventing SQL injection; sensitive credentials use standard bcrypt cryptographic hashing.
• Access Controls: Multi-tenant isolation ensures client accounts can only query and view work orders and CAD files belonging to their authenticated organisation.
• File Storage Hardening: Uploaded CAD drawings and engineering assets are strictly filtered against unauthorized executable MIME types with execution denied at web server level.

05. Data Retention & Destruction

Technical CAD drawings and quality inspection sheets are retained for a minimum of 5 years to comply with manufacturing traceability requirements and engineering warranties. Financial and tax records are retained in compliance with the Companies Act 71 of 2008 and Tax Administration Act 28 of 2011. Upon expiry of statutory retention periods, records are safely expunged.

06. Data Subject Rights under POPIA

You possess statutory rights regarding your personal and corporate information:

• Right of Access: Request confirmation of what personal information we hold about you or your organisation.
• Right to Rectification: Request correction or updating of outdated, inaccurate, or incomplete information.
• Right to Object / Deletion: Object to processing on reasonable grounds or request deletion where retention is no longer authorized.

To exercise these rights, submit a written request to our Information Officer at admin@dabres.co.za. If dissatisfied, you may contact the Information Regulator of South Africa at complaints.IR@justice.gov.za.