POPIA — Collection of Personal Information

01What we collect

• Identity and contact details — name, email address, phone number and physical/delivery address.
• Transaction information — orders, quotes, invoices and payment confirmations.
• Communication records — enquiries, quote requests and correspondence with our team.
• Technical data — IP address, browser type and website usage collected via cookies.

02Why we collect it (lawful basis)

We only collect personal information for defined purposes, namely:

• Entering into and performing our contracts with you — quoting, ordering, invoicing and delivering goods.
• Complying with legal obligations, including tax, consumer protection and record-keeping laws.
• Our legitimate business interests, such as customer service and improving our services.
• Your consent, where you have freely given it — for example, for marketing communications.

03Data subject rights under POPIA

• Access — you may request confirmation of the personal information we hold about you, free of charge once per year.
• Correction — you may ask us to correct or delete inaccurate personal information.
• Objection — you may object, on reasonable grounds, to the processing of your information.
• Withdrawal of consent — you may withdraw consent for optional processing, such as marketing, at any time.
• Complaint — you may lodge a complaint with the Information Regulator of South Africa if you believe your rights have been infringed.

04Retention and security

We keep personal information only as long as needed for the purposes above or as required by law. Records of transactions are retained for the statutory periods set out in the South African Tax Act. We apply reasonable technical and organisational security measures to protect your information against loss, unauthorised access or disclosure.

05Direct marketing

In line with POPIA, we do not send electronic marketing to customers who have not consented, and every marketing message provides an easy opt-out. We do not sell or rent your personal information to third parties for their own marketing.

06Further processing and transborder transfer

Where your information is processed by service providers (such as PayFast, our online payment service provider, or courier partners), they act under strict confidentiality obligations and only on our instructions. Personal information is only transferred outside South Africa where an adequate level of protection exists and it is necessary to serve you.

Where personal information is required to process an online transaction, we may process or disclose only the information reasonably necessary for: payment processing, payment verification, fraud and security checks, transaction reconciliation, order fulfilment, refund processing, and accounting and record keeping. Payment information is never used for unrelated marketing purposes.