CMO Group
POPIA Privacy Notice
Protection of Personal Information Act (POPIA)
This privacy notice explains how CMO Group processes personal information when you use cmogroup.io and related contact channels. It is published to support transparency under South Africa’s Protection of Personal Information Act 4 of 2013 (POPIA).
Last updated: August 2026
Who we are
CMO Group operates AI-driven compliance infrastructure for global supply chains. Our international headquarters are at:
CMO INTERNATIONAL Fourth Floor, Ebene Mews, 57 Cybercity, Ebene 72201, Mauritius
We also operate through regional entities, including CMO South Africa. General enquiries: info@cmogroup.io.
Information Officer
For POPIA-related requests (access, correction, deletion, objection, or complaints about how we handle personal information), contact:
- Email: info@cmogroup.io (mark the subject “POPIA”)
- South Africa operations: cherona@cmogroup.io
What personal information we collect
Website contact form (“Contact Leadership”)
- Name
- Email address
- Company (optional)
- Subject and message
- Technical metadata such as submission time and IP address (for security and abuse prevention)
Essential cookies
We use essential cookies only so the site works securely (for example, remembering cookie-notice acceptance). We do not use advertising or analytics cookies.
Other channels
If you email us or otherwise contact a published CMO address, we process the personal information you choose to send.
We do not intentionally collect special personal information through this website.
Why we process personal information
We process personal information to:
- Respond to leadership and business enquiries
- Operate and secure the website
- Comply with legal and regulatory duties
- Keep records of correspondence where reasonably necessary
The lawful bases we rely on include legitimate interests in operating our business and responding to enquiries, contractual or pre-contractual steps where relevant, and legal obligations where applicable.
Who receives personal information
Depending on the enquiry, personal information submitted via the contact form may be sent to:
- Leadership / HR contact: taylor@cmogroup.io
- General contact: info@cmogroup.io
- Relevant CMO regional managers where needed to respond
We use service providers to host the website and send transactional email (including Amazon Web Services). They process information on our instructions and only as needed to provide those services.
We do not sell personal information.
Cross-border transfers
CMO is an international group. Personal information may be processed in Mauritius, South Africa, and other countries where we or our service providers operate (including cloud hosting regions). Where we transfer personal information across borders, we take reasonable steps consistent with POPIA to protect it.
How long we keep information
We keep contact enquiries and related records only as long as needed to respond, manage the relationship, meet legal requirements, or resolve disputes — then we delete or anonymise them where practicable.
Your rights under POPIA
Subject to POPIA, you may request to:
- Access personal information we hold about you
- Correct or update inaccurate information
- Delete or destroy information in certain circumstances
- Object to processing based on legitimate interests
- Lodge a complaint with the Information Regulator (South Africa)
Information Regulator: https://inforegulator.org.za
To exercise your rights, email info@cmogroup.io with enough detail for us to verify and respond.
Security
We apply reasonable organisational and technical measures to protect personal information against loss, misuse, and unauthorised access. No method of transmission or storage is completely secure; please use discretion when sending sensitive details by email.
Related notices
For requests for access to records under the Promotion of Access to Information Act, see our PAIA Manual.
For Thailand PDPA and other regional notices (Malaysia, Vietnam, Namibia, East Africa), see PDPA & Regional Data Protection.
Changes
We may update this notice from time to time. The “Last updated” date above will change when we do. Continued use of the website after an update constitutes notice of the revised terms for website visitors.