This application has been designed to help facilitate and streamline the electronic proof of delivery documentation process for Anglo American and for Valterra Platinum.
This Privacy Notice applies to the processing of personal data by Sishen Iron Ore Company (Proprietary) Ltd (“Anglo American”) and by Rustenburg Platinum Mines Ltd (“Valterra Platinum”), with each company processing personal data as independent data controllers.
In this notice, we will use the terms “we”, “us” and “our” to refer to both Anglo American and Valterra Platinum and the company that applies will depend on which company it is that employs you or to which you are providing services.
What data will we be collecting and where does it come from?
We collect your personal information directly from you when you use the application.
The kind of information that we process includes, where applicable:
- Name and surname
- The company you work for
- Information about the delivery (including the date and time the delivery was made, PO number, the unloading point, the item and production number, recipient reference, and where the delivery came from and was stored)
- Signature
- Employee ID number
- Your business unit/section
- Information about your vehicle (including make, model and registration number)
- Technical information from the devices you use to access the application, for example, the collection of diagnostics (e.g. errors and system statuses), the device’s operating system (Android or iOS) and the device’s location at the moment a user confirms an inbound or outbound process (we do not perform continuous location tracking). Please note that devices and applications have their own privacy settings and notices under which they collect your information, so please check and manage your device and application settings.
How we use your information
We will only use your personal information for the purposes for which we collected it. If we need to use your personal information for an unrelated purpose, we will notify you and we will explain the legal basis which allows us to do so (which may be via an update to the notice).
The main purpose for processing your personal information is in reliance on legitimate business interests, including to process data in the following ways:
- To help streamline the electronic proof of delivery documentation process by recording the delivery of goods (both stock and non-stock) from the warehouse to the end users and generating the corresponding electronic proof of delivery to be later attached to the relevant material document.
- To prevent unauthorised deliveries from taking place outside of approved locations.
- For traceability and governance purposes – to help prevent and detect fraud, and to help conduct audits and investigations and answer queries where required.
How we share your information
Anglo American and Valterra Platinum respectively work with various suppliers to process your personal data for the purposes described above. Where these suppliers act on behalf of each of those organisations, they must only process your personal data in accordance with their instructions.
The categories of suppliers that each organisation uses includes:
- IT and technology service providers;
- Consultants and other professional advisors;
- Valterra Platinum may also share information with Anglo American as part of the provision of technical support by Anglo American.
The information processed by the application will be stored outside of South Africa on Anglo American’s cloud-hosted servers in the European Economic Area (EEA). The data may also be accessed globally, particularly in India and Brazil, by the categories of suppliers listed above in order to assist us with the processing. In these cases, we grant these companies access to personal data only where necessary and only where appropriate security measures and controls are in place to protect your personal information in accordance with applicable data protection laws, regulations and regulatory guidance. This means that these transfers will take place where a binding agreement has been put in place to meet the data protection requirements.
We may also share your personal information in other situations, including:
- When required to do so by law, regulation or court order
- In response to a legitimate request for assistance by the police or other law enforcement agency; and
- In connection with the sale, purchase or merger of a business.
How is the personal data protected?
We are committed to protecting the security of the personal data you share with us, or we otherwise process about you. In support of this commitment, we have implemented appropriate technical, physical and organisational measures to ensure a level of security appropriate to the risk. We limit the number of people who have access to the data to those who need it to support the proper functioning and operation of the app, while a small number of system administrators may also have controlled access to the information to ensure the app is working properly.
How long will keep your information?
The data we keep includes core delivery and supplier information and we will retain this information for as long as necessary to fulfil the purposes for which it was collected, as well as for business, legal and regulatory purposes where required. In general, these records are retained securely for 5 years from the end of the contract with the supplier to help us investigate any complaints or issues.
What are your rights with regard to the data, and how do you exercise them?
You have the following rights in respect of this data:
- You have the right to a complete copy of your data, as well as a clear explanation of the purposes for which it’s being used and the details of the processing. If you would like to discuss any of this further, please use the contact information below.
- If you feel that the data is inaccurate, you can ask us to correct it. We may ask you to show why it’s incorrect before making any requested changes.
- You may then request erasure of the data, although we may refuse to erase it or delay that erasure if we feel retaining it is necessary; we will give you our reasons for so doing at the time of your request.
- To request us to restrict the processing of the personal data of yours that is being processed.
- You have the right to lodge a complaint with the data protection regulator. We would ask that you always speak to us first before raising a complaint so that we can try to remedy the situation.
How to contact us
For all communications regarding data privacy and this processing by Anglo American, please contact the Data Protection team at [email protected].
For all communications regarding data privacy and this processing by Valterra Platinum, please contact the Data Protection Team at [email protected].
How to raise a complaint
If you wish to raise a complaint about how Anglo American or Valterra Platinum uses your information, please contact the Data Protection Teams at the above email addresses and they will both do their best to help.
If you are still unhappy, you can contact the South Africa Data Protection Regulator (the Information Regulator) via email at [email protected] or by telephoning +27 (0) 10 023 5200.
This Privacy Notice was last updated on 01 October 2025.