POPIA Information Notice

Labex Pty Ltd ("Labex", "we", "us"), a private company incorporated in South Africa, is the responsible party for the purposes of POPIA. Our principal place of business is 88 17th Avenue, Edenvale, Johannesburg, 1609.

We are responsible for all personal information collected through this website, our sales and ordering processes, our technical support operations, and any other means by which we interact with clients, prospective clients, suppliers, and employees.

We may collect and process the following categories of personal information:

• Identification information: name, job title, company name
• Contact information: email address, telephone number, postal or physical address
• Transaction information: order history, quotation records, invoices, payment references
• Technical enquiry information: equipment specifications, application descriptions, site conditions
• Communications: correspondence by email, telephone, or web form
• Website usage data: IP address, browser type, pages visited, time on site (via analytics)
• Marketing preferences: newsletter subscription status and communication preferences

We do not collect special personal information (as defined in Section 26 of POPIA) in the normal course of our business. If any such information is provided incidentally, it will be treated with heightened confidentiality and not processed without explicit consent.

We process personal information for the following purposes:

• To respond to product enquiries, quotation requests, and technical support queries
• To process orders, manage deliveries, and handle invoicing and payments
• To maintain our client relationship and provide after-sales technical support
• To send relevant product news, technical guides, and service updates (where consent has been given)
• To comply with legal obligations including tax, accounting, and export control requirements
• To improve our website and digital services through anonymised analytics

We rely on the following processing grounds under POPIA Section 11: performance of a contract (orders and service delivery), compliance with a legal obligation (tax and accounting), and legitimate interests (sales follow-up, relationship management) subject to appropriate balancing against data subjects' rights.

Personal information is stored on secure servers located in South Africa or in jurisdictions that provide an adequate level of protection equivalent to POPIA requirements. We apply industry- standard technical and organisational measures to protect personal information against unauthorised access, loss, destruction, or alteration.

Access to personal information is restricted to staff members who require it for their legitimate job functions. All staff handling personal information are required to comply with this notice and our internal data protection procedures.

We retain personal information only for as long as necessary for the purpose for which it was collected, or as required by law. Client transaction records are retained for seven years in compliance with the Companies Act. Marketing contact records are deleted upon withdrawal of consent.

We do not sell, rent, or trade personal information to third parties. We may share personal information with:

• Our principal suppliers (e.g. Heidolph, Sartorius) where required to process a warranty claim, service order, or specialised technical query — and only to the extent necessary
• Logistics and courier service providers for the purposes of order fulfilment and shipment tracking
• Our IT service providers and cloud platform operators who process data on our behalf under written data processing agreements
• Regulatory authorities or law enforcement agencies where required by law

As a data subject, you have the following rights in terms of POPIA:

• Right of access: to request confirmation of whether we hold your personal information and to obtain a copy
• Right of correction or deletion: to request that inaccurate or incomplete information be corrected or destroyed
• Right to object: to object to the processing of your personal information on grounds relating to your specific situation
• Right to withdraw consent: where processing is based on consent, to withdraw that consent at any time
• Right to lodge a complaint: to lodge a complaint with the Information Regulator of South Africa

To exercise any of these rights, please contact our Information Officer using the details below. We will respond within 30 days of receiving a verifiable request.

All POPIA-related queries, requests, and complaints should be directed to our designated Information Officer:

The Information Regulator of South Africa can be contacted at inforegulator.org.za or complaints.IR@justice.gov.za.