1. Scope and responsible party
This policy applies to personal information processed by [KYN legal entity name and registration number]. Information Officer: [Name or role, email, telephone and address].
2. Information collected
KYN Energy may collect contact details, company and property information, electricity bills, consumption data, operating hours, loads, equipment details, photographs, error codes, communications and website-usage information.
3. Purposes
Information may be used to respond, qualify enquiries, coordinate assessment and delivery, manage customers and partners, secure the website, improve services, maintain records and send lawful marketing communications.
4. Lawful grounds
Processing should rely on an appropriate lawful justification, including consent, requested pre-contract steps, contract performance, legal obligations, legitimate interests or another ground permitted by law.
6. Cross-border processing
Where providers process information outside South Africa, KYN should document the destination and safeguards. Current providers: [List or state none confirmed].
7. Retention
Information should be kept only as long as required for the purpose, legal obligations, disputes, warranties and legitimate records. Retention periods: [Verified periods or criteria].
8. Security
KYN should use reasonable access controls, HTTPS, secure hosting, backups, malware protection, staff confidentiality and incident-response procedures. No online transmission can be guaranteed completely secure.
9. Rights
Subject to law, a person may request access, correction or deletion, object to certain processing, withdraw consent where relevant and complain to KYN or the Information Regulator. Requests: [Privacy email].
10. Direct marketing
Electronic marketing should use an appropriate lawful basis, identify the sender and provide a working opt-out route.
11. Changes and complaints
Publish the current version and effective date. Privacy complaints: [Information Officer contact].