Legal
Privacy Policy
How BMS Holdings collects, uses and protects your personal information under the Protection of Personal Information Act (POPIA).
Last updated: 21 October 2026
Who we are
Business Made Safe Holdings (Pty) Ltd, trading as BMS Holdings ("BMS", "we", "us"), is an occupational health and safety company based at The Colosseum, First Floor, Century Way, Century City, Cape Town, 7441. We are the responsible party for the personal information described in this policy under the Protection of Personal Information Act 4 of 2013 (POPIA).
Contact details: info@bmsholdings.co.za · 064 549 5312
Information Officer: the head of BMS Holdings (our Managing Director), contactable at info@bmsholdings.co.za.
What we collect
- Enquiry and quote details you send through this website: your name, company, email address, phone number, the services you need and any message you write.
- Booking details for training and medicals, such as delegate numbers, preferred dates and site location.
- Occupational health records when we perform medicals. These are special personal information. They are collected with your consent, kept confidential and are accessible only to our occupational health practitioners and to people entitled to them by law, such as your employer for your certificate of fitness.
- Basic technical data such as IP address, browser type and the pages requested, which our website host records to keep the site secure and running. We do not use advertising or tracking cookies.
Why we use it
- To respond to your enquiry and prepare quotes.
- To deliver the services you ask for: medicals, consulting, ISO implementation and training.
- To issue certificates and keep the records the law requires us to keep.
- To improve our website.
We do not sell your personal information, and we do not use it for unrelated marketing without your consent.
Who we share it with
We share personal information only where needed to deliver our services or meet legal duties, for example with your employer (for medicals and training records they are entitled to), accredited laboratories, certification bodies, and service providers who host our email and website. These providers process information on our instructions and under appropriate safeguards. They include our website host (Vercel) and our email provider (Google Workspace), which delivers emails from our website forms.
Some providers store data outside South Africa. Where that happens, we make sure the protection is substantially similar to POPIA, as section 72 requires.
How long we keep it
We keep personal information only as long as we need it for the purpose it was collected, or as long as the law requires. Training and occupational health records are kept for the periods set by the Occupational Health and Safety Act and its regulations. Enquiries that do not lead to work are deleted when we no longer need them.
How we protect it
We use reasonable technical and organisational measures to protect personal information against loss, damage and unauthorised access, including encrypted connections (HTTPS), access controls and confidentiality obligations for staff.
Your rights
Under POPIA you may ask us to confirm what personal information we hold about you, ask for a copy, ask us to correct or delete it, or object to how we use it. To make a request, email info@bmsholdings.co.za. Our PAIA manual explains how to request access to records.
If you're not satisfied with our response, you may complain to the Information Regulator: inforegulator.org.za.
Changes to this policy
We may update this policy from time to time. The latest version is always on this page.