Privacy Centre
Version: March 2026
CCBA Privacy Notice
Coca-Cola Beverages Africa Proprietary Limited (“CCBA” or “We” or “Us”) is committed to protecting your privacy and ensuring that your personal information is processed lawfully. Reference to CCBA includes its affiliates, controlled subsidiaries and entities in which it either owns a majority interest or manages operations. We may amend this Notice from time to time.
This Privacy Notice (“Notice”) sets out:
- Who We are
- What personal information We collect
- How We use your personal information
- To whom we may disclose your personal information to
- How we safeguard your personal information
- Your rights in relation to your personal information
- How to contact Us
Who we are
CCBA is the 8th largest Coca-Cola bottling partner worldwide and the biggest on the African continent. CCBA serves 14 countries in Africa including: The Republic of South Africa, the Kingdom of Eswatini, the Kingdom of Lesotho, the Republic of Kenya, the Federal Democratic Republic of Ethiopia, the Republic of Mozambique, the United Republic of Tanzania, the Republic of Uganda, the Republic of Namibia, the Department of Mayotte, the Union of the Comoros, the Republic of Botswana, the Republic of Zambia and the Republic of Malawi.
When We collect personal information through this website, We will be a “responsible party” or “data controller”. We are responsible for deciding how We will collect and use your personal information.
What personal information we collect
Personal information is any information that can be used to identify you, or that CCBA can link to you.
We may collect and process the following personal information:
- Contact details: such as name, address, phone number, email address, country of residence, and emergency contact details.
- Professional/Job details: such as academic qualifications, professional experience, current company name, and job title;
- Correspondence: such as the content, date and time of emails, chats, social media messages and other communications with you;
- Login credentials: such as your username and (hashed) password, recovery email address, secret questions, and security logs;
- Personal characteristics: such as age, gender, date of birth, place of birth, civil status and nationality.
- Preferences: such as your personal preferences for our products and services, lifestyle and social circumstances, languages and marketing preferences;
- Customer and vendor classification information: such as unique categories defined by the size, sector, geographical location and other parameters;
- User-generated content: such as your postings on any blogs, forums, wikis and any other social media applications and services that We provide;
- Website and service usage information: such as the host name and IP address of your device, your browser type and version, your operating system, the pages you visit, the time and duration of your visit and the website that referred you to us;
- Cookies: small data files that are placed on your computer or mobile device when you visit our website. For more information about our use of cookies, please see our Cookie Policy.
We may also collect “special personal information” or “sensitive personal information”, in limited instances, which requires a higher level of protection. This can include information about your health, sexual orientation, race, or criminal convictions.
How we use your personal information
Personal information may be processed by CCBA from the website for the following reasons:
- Communicating with you in relation to your enquiry when you use the Contact Us feature on the website;
- To receive and evaluate your career applications and assist you with managing your career account;
- Allowing you to register and participate in promotions, special offers, loyalty programs, prize draws etc.;
- Data analytics to derive trends and to improve our products, website, and services;
- Confirming, verifying, and updating your details;
We process your personal information based on one or more lawful grounds, like our legitimate interests, compliance with legal obligations, the performance of a contract, or consent. We use your personal information for the purposes for which We collect it and in compliance with applicable law.
To whom we may disclose your personal information
CCBA may share your personal information, where necessary, with:
- The CCBA group of companies;
- Third parties contracted by CCBA;
- Relevant authorities, to the extent required by law, regulation or court order.
- Acquirers, successors, or assignees of CCBA as part of any merger, acquisition, debt financing, sale of assets, or similar transaction.
We only share the minimum amount of personal information.
How we safeguard your personal information
We take appropriate technical and organisational measures to ensure that the personal information in our possession, or under our control, is secure and protected against unauthorised or unlawful access, use, acquisition, disclosure, interference, modification, accidental loss, destruction, disclosure or damage.
We impose security, privacy, and confidentiality obligations on our third parties to ensure that they process personal information appropriately.
As We are an international organization, We may need to transfer your personal information to another country depending on where you are situated. We will ensure that personal information transferred is done in accordance with applicable data protection laws and / or under appropriate agreements.
Your rights in relation to personal information
You have the right to:
- Be informed about how we process your personal information;
- Access and obtain a copy of your personal information;
- Request correction, deletion, or restriction of your personal information;
- Object to process on reasonable grounds;
- Not to be subject to decisions based solely on automated processing – which We do not do;
- Lodge a complaint with the relevant data protection authority.
You can exercise your rights by emailing privacyoffice@ccbagroup.com. We may need to request more information from you to help us assist you in exercising your rights.
You can also exercise your right to lodge a complaint with the South African Information Regulator by following this link: https://inforegulator.org.za/complaints/. The Information Regulator is situated at Woodmead North Office Park, 54 Maxwell Drive, Woodmead, Johannesburg, 2191. You can also email them on POPIAComplaints@inforegulator.org.za or PAIAComplaints@inforegulator.org.za or https://inforegulator.org.za/
Changes to this Notice
Please note that we may amend this Notice from time to time. Please check our website periodically to inform yourself of any changes.
How to contact us
Please address your questions, comments, and/or requests to our Data Protection Officer, Mikhael Cain, by emailing privacyoffice@ccbagroup.com. We are also happy to assist by referring you to the appropriate local office where appropriate.
Version: July 2026
CCBA Business Customer Privacy Notice
Coca-Cola Beverages Africa Proprietary Limited (“CCBA”) is committed to protecting your privacy and ensuring that your personal information is processed lawfully. Reference to CCBA includes its affiliates, controlled subsidiaries and entities in which it either owns a majority interest or manages operations. We may amend this Privacy Notice (“Notice”) from time to time.
This (“Notice”) sets out:
- Who we are
- What personal information we collect
- How we use your personal information
- To whom we may disclose your personal information to
- How we safeguard your personal information
- How long we retain your personal information for
- Your rights in relation to your personal information
- How to contact us
Who we are
CCBA is the 8th largest Coca-Cola bottling partner worldwide and the biggest on the African continent. CCBA serves 14 countries in Africa including: The Republic of South Africa, the Kingdom of Eswatini, the Kingdom of Lesotho, , the Republic of Kenya, the Federal Democratic Republic of Ethiopia, the Republic of Mozambique, the United Republic of Tanzania, the Republic of Uganda, the Republic of Namibia, the Department of Mayotte, the Union of the Comoros, the Republic of Botswana, the Republic of Zambia and the Republic of Malawi.
When we process information your personal information in the context of our commercial relationship in thecontext when you purchase products from us, we act as “responsible party” or “data controller”. We are responsible for deciding how we will collect and use your personal information.
What personal information we collect
Personal information is any information that can be used to identify an individual. In this Notice, we mainly collect personal information relating to individuals who act for, represent, own, manage or work for our business customers, including distributors, wholesalers, retailers, outlets and other commercial customers.
Depending on the nature of our relationship with the business customer, we may collect and process the following personal information:
Business contact details: name and surname, job title or role, business email address, business phone number, business address, delivery address, and other contact details of the relevant business representative.
Customer account and relationship information: business customer name, customer account number customer type, trading name, purchase history, order records, delivery preferences, communication preferences, feedback, complaints and other relationship management information.
Transactional and contractual information: purchase orders, invoices, delivery records, signed agreements, correspondence, account instructions, and other information relating to our business dealings with the customer.
Payment and financial information: bank account details, payment history, billing information, credit information where relevant, tax numbers and financial records linked to the business customer relationship.
Compliance and due diligence information: information needed to verify the business customer, assess credit or compliance risk, manage anti-bribery and sanctions requirements, conduct due diligence, and comply with legal or regulatory obligations.
Identification and verification information: where required, identification documents, company registration documents, beneficial ownership information, directorship information, authorisations, mandates or similar verification information.
Site access and security information: visitor logs, access credentials, CCTV footage where applicable, vehicle registration details, delivery or collection records and other information needed to manage access to our sites, systems or facilities.
How we use your personal information
We may process personal information collected from vendors, suppliers and other business partners for the following purposes:
To manage our commercial relationship;
To process payments and maintain financial records;
To conduct due diligence and compliance checks;
To facilitate access to our premises or systems
To maintain accurate and up-to-date records.
To improve our services to you, like optimizing delivery routes and ensuring product availability
To comply with legal obligations
We use your personal information for the purposes for which we collect it and in compliance with applicable law.
To whom we may disclose your personal information to
CCBA may share your personal information, where necessary, with:
The CCBA group of companies;
Third parties contracted by CCBA – like logistics and delivery partners to payment processors.
Relevant authorities, to the extent required by law, regulation or court order.
Acquirers, successors, or assignees of CCBA as part of any merger, acquisition, debt financing, sale of assets, or similar transactions.
We only share the minimum amount of personal information necessary.
How we safeguard your personal information
We take appropriate technical and organisational measures to ensure that the personal information in our possession, or under our control, is secure and protected against unauthorised or unlawful access, use, acquisition, disclosure, interference, modification, accidental loss, destruction, disclosure or damage.
We impose security, privacy, and confidentiality obligations on our third parties to ensure that they process personal information appropriately.
As we are an international organisation, we may need to transfer your personal information to another country depending on where you reside. We will ensure that personal information transferred is done in accordance with applicable data protection laws and / or under appropriate agreements.
How long we retain your personal information for
We retain personal information only for as long as necessary to fulfil the purposes for which it was collected, including legal, regulatory, and operational requirements.
Your rights in relation to personal information
Depending on where you reside, your rights may include:
The right to be informed about how we process your personal information and your rights in respect thereof.
The right to access the personal information that we hold about you.
The right to request that we correct, update, destroy or delete any of your personal information.
The right to object on reasonable grounds, and the right to request that we restrict our processing of your personal information.
The right to access your personal information held by us,
The right not to be subject to a decision which is based solely on automated processing, and which produces legal or other significant effects on you; and
The right to lodge a complaint with the relevant data protection authority if you think that any of your rights have been infringed upon by us.
You can exercise your rights by emailing privacyoffice@ccbagroup.com. We may need to request more information from you to help us assist you in exercising your rights
Changes to this Notice
Please note that we may amend this Notice from time to time. Please check our website periodically to inform yourself of any changes.
How to contact us
Please address your questions, comments and/or requests to privacyoffice@ccbagroup.com
Version: July 2026
CCBA Vendor Privacy Notice
Coca-Cola Beverages Africa Proprietary Limited (“CCBA”) is committed to protecting your privacy and ensuring that your personal information is processed lawfully. Reference to CCBA includes its affiliates, controlled subsidiaries and entities in which it either owns a majority interest or manages operations. We may amend this Privacy Notice (“Notice”) from time to time.
This (“Notice”) sets out:
- Who we are
- What personal information we collect
- How we use your personal information
- To whom we may disclose your personal information to
- How we safeguard your personal information
- How long we retain your personal information for
- Your rights in relation to your personal information
- How to contact us
Who we are
CCBA is the 8th largest Coca-Cola bottling partner worldwide and the biggest on the African continent. CCBA serves 14 countries in Africa including: The Republic of South Africa, the Kingdom of Eswatini, the Kingdom of Lesotho, , the Republic of Kenya, the Federal Democratic Republic of Ethiopia, the Republic of Mozambique, the United Republic of Tanzania, the Republic of Uganda, the Republic of Namibia, the Department of Mayotte, the Union of the Comoros, the Republic of Botswana, the Republic of Zambia and the Republic of Malawi.
When we process information in relationship to you as a vendor or supplier, we will be a “responsible party” or “data controller”. We are responsible for deciding how we will collect and use your personal information.
What personal information we collect
Firstly, personal information is any information that can be used to identify you.
We may collect and process the following personal information:
Contact details: name, business address, phone number and country of residence.
Professional details: Job title, company name, business registration number, tax number and relevant qualifications and certifications.
Banking and payment information: Bank account details, payment history , and invoicing records.
Contractual and transactional data: purchase order, delivery records, signed agreements, and correspondence related to business dealings.
Site access and security logs: visitor logs, access credentials, and CCTV footage (where applicable)
Compliance and due diligence data: Background checks, BBBE status, and other regulatory disclosures.
Vendor onboarding information: supplier registration forms, vendor master data, authorised signatory details and supporting documents.
Tax and financial compliance information: VAT registration details, tax clearance or tax status information, withholding tax information, payment terms and credit checks where applicable.
Ethics and anti-bribery information: conflict of interest declarations, sanctions screening results, politically exposed person checks, gifts and hospitality declarations, and anti-bribery due diligence information.
Insurance, health and safety, and operational compliance records: licenses, permits, insurance certificates, safety records, induction records and site compliance documents.
System and IT access data: usernames, access logs, device information, IP addresses, authentication records and activity logs where vendors access CCBA systems.
Communication and relationship management records: emails, meeting notes, call records, complaints, queries, service delivery records, audit findings, quality assessments, dispute records and contract management notes.
Special categories of personal information: where permitted by law and necessary for a specific purpose, such as health or disability information for site access, safety or accommodation purposes.
Criminal record information: where permitted by law and necessary for screening, security, site access or compliance purposes.
How we use your personal information
We may process personal information collected from vendors, suppliers and other business partners for the following purposes:
To manage our commercial relationship;
To process payments and maintain financial records;
To conduct due diligence and compliance checks;
To facilitate access to our premises or systems
To maintain accurate and up-to-date records.
We use your personal information for the purposes for which we collect it and in compliance with applicable law.
To whom we may disclose your personal information to
CCBA may share your personal information, where necessary, with:
The CCBA group of companies;
Third parties contracted by CCBA;
Relevant authorities, to the extent required by law, regulation or court order.
Acquirers, successors, or assignees of CCBA as part of any merger, acquisition, debt financing, sale of assets, or similar transactions.
We only share the minimum amount of personal information necessary.
How we safeguard your personal information
We take appropriate technical and organisational measures to ensure that the personal information in our possession, or under our control, is secure and protected against unauthorised or unlawful access, use, acquisition, disclosure, interference, modification, accidental loss, destruction, disclosure or damage.
We impose security, privacy and confidentiality obligations on our third parties to ensure that they process personal information appropriately.
As we are an international organisation, we may need to transfer your personal information to another country depending on where you reside. We will ensure that personal information transferred is done in accordance with applicable data protection laws and / or under appropriate agreements.
How long we retain your personal information for
We retain personal information only for as long as necessary to fulfil the purposes for which it was collected, including legal, regulatory, and operational requirements.
Your rights in relation to personal information
Depending on where you reside, your rights may include:
The right to be informed about how we process your personal information and your rights in respect thereof.
The right to access the personal information that we hold about you.
The right to request that we correct, update, destroy or delete any of your personal information.
The right to object on reasonable grounds, and the right to request that we restrict our processing of your personal information.
The right to access your personal information held by us,
The right not to be subject to a decision which is based solely on automated processing, and which produces legal or other significant effects on you; and
The right to lodge a complaint with the relevant data protection authority if you think that any of your rights have been infringed upon by us.
You can exercise your rights by emailing privacyoffice@ccbagroup.com. We may need to request more information from you to help us assist you in exercising your rights
Changes to this Notice
Please note that we may amend this Notice from time to time. Please check our website periodically to inform yourself of any changes.
How to contact us
Please address your questions, comments and/or requests to privacyoffice@ccbagroup.com
Version: March 2026
