Privacy Policy

2. Information we collect and its sources

• Information you provide: name, email address, telephone number, property location, project and property type, budget, timeline, project messages and correspondence.
• Estimator information: selected systems, property scale, installation preferences, zones, estimated price ranges and any project brief you choose to submit. Contact details and a project summary are saved when you request a consultation or detailed estimate.
• Account information, where you use an account: profile, email, account identifier, authentication and access records. Authentication is managed by our hosting platform.
• Technical and usage information: IP address, browser and device information, page activity, timestamps, diagnostic and security logs, and stored preferences associated with using the site and its service providers.
• Communications: information you send by email, telephone, WhatsApp, social media or an embedded chat service. If you use the Microsoft-powered chat on our website, Microsoft processes the messages and relevant technical information needed to provide that service.
• Third-party sources: information you authorise a representative to provide and, where you interact with our Facebook or Instagram presence or submit a Meta lead form, the contact details, profile information, enquiry answers and communication records made available to us through that interaction.

We collect information directly from you wherever practicable. Required fields are marked on forms. Providing information is voluntary, but without the necessary contact and project details we may not be able to answer an enquiry or provide the requested estimate or service. Please do not submit passwords, alarm codes, identity documents, financial credentials or unnecessary sensitive information in project briefs or chat messages.

3. Why we process information and our lawful grounds

We process relevant information to answer enquiries; assess and scope projects; prepare indicative estimates and quotations; arrange consultations; provide and support requested services; maintain correspondence and business records; operate, secure and improve the website; prevent misuse; and meet legal obligations or resolve disputes.

As appropriate under section 11 of POPIA, we rely on your consent, steps requested by you before entering a contract or performance of a contract, compliance with a legal obligation, or the legitimate interests of you, us or a third party, subject to your rights. We limit processing to what is adequate, relevant and not excessive for the purpose. Reading this policy or submitting an enquiry does not, by itself, constitute consent to unrelated marketing.

4. Facebook, Instagram, WhatsApp and Meta information

If you contact us through a Meta service or submit a Facebook or Instagram lead form, we use the information made available through that interaction to handle your request, contact you about the relevant project and provide the service you requested. Additional marketing requires an appropriate lawful basis as explained below. We do not obtain your Facebook password through these interactions.

We do not sell personal information or Meta platform data. Meta information is not used for unrelated purposes or shared except as necessary for the disclosed purpose, with appropriate service providers, as you authorise, or where legally required. If a Meta-connected feature is offered, any additional permissions and purposes must be explained when you use it.

You may request deletion of information we received through Meta using section 11 below, whether or not you have an account with us. Disconnecting an app in your Meta account settings does not necessarily delete information previously supplied to us; please also send a deletion request. Meta separately processes information on its platforms under its own Privacy Policy; WhatsApp’s practices are described in its Privacy Policy.

5. Direct marketing and your choices

We distinguish responding to your enquiry and necessary service communications from promotional marketing. Unsolicited electronic direct marketing is subject to section 69 of POPIA: we obtain consent where required, or rely on the limited existing-customer exception only where its requirements are met, including marketing our own similar products or services and providing an opportunity to object when collecting details and with each communication.

You can decline marketing, use an unsubscribe facility where provided, or contact us with “Stop marketing” in the subject. We honour objections and withdrawals, and may retain a minimal suppression record to avoid contacting you again. Withdrawing consent does not affect lawful processing before withdrawal or processing required on another lawful ground.

6. Hosting, service providers and other recipients

Information is available to personnel who need it for their work and relevant service providers supporting our operations. These include Base44 for application hosting, storage, authentication and integrations; email and communications providers; Microsoft for the embedded chat; and AI processing providers used through Base44 when you choose the optional AI estimator assistant.

Where necessary for your project, relevant details may be shared with authorised installation or support contractors and professional advisers. We may also disclose information to authorities where the law requires it, or as necessary to establish, exercise or defend legal rights. Processing by operators on our behalf must be governed by appropriate confidentiality, security and processing obligations under POPIA. We do not give suppliers unrestricted permission to use your information for their own marketing.

External links, maps, social platforms and services have their own privacy notices. Visiting them or loading externally hosted images and fonts may disclose technical information, such as your IP address, to their providers.

7. Processing outside South Africa

Hosting, messaging, chat and AI providers may process or store information in countries outside South Africa. The embedded Microsoft chat is configured for a European region. A foreign provider’s legal requirements and protections may differ from those in South Africa.

Transfers must satisfy section 72 of POPIA, for example through adequate protection under applicable law, binding corporate rules or binding agreements, or another permitted ground such as valid consent or contractual necessity. You may contact us for information about the safeguards applicable to your information.

8. Cookies, local storage and optional AI

The website uses browser storage for preferences, including light/dark mode, and may use cookies or similar technologies for authentication, security and operating hosted services. Hosting and embedded services may also process usage or diagnostic information. You can manage cookies and storage through your browser; blocking or clearing them may affect preferences, sign-in or some functionality.

Non-essential advertising or tracking technologies, if introduced, require appropriate disclosure and any legally required consent before use. A link to Facebook or WhatsApp alone is not permission for advertising tracking.

The optional AI estimator assistant sends the project description you choose to submit through Base44’s AI integration to generate suggested estimator selections. You can use the manual estimator instead. AI output and price ranges are indicative and subject to human review; the estimator does not make a final contractual or similarly significant decision about you. Avoid including personal details that are not needed to describe the project.

9. Retention and security

We retain identifiable information only for as long as reasonably necessary for the purpose for which it was collected, a lawful related purpose, or a retention period required or permitted by law. Relevant considerations include whether an enquiry is active, the duration of a customer relationship, support and warranty needs, applicable accounting and tax obligations, and a dispute or legal hold. Information no longer needed is deleted, destroyed or de-identified in accordance with POPIA. You can ask us about the retention period applying to your records.

Reasonable technical and organisational safeguards must protect information against loss, unauthorised access, disclosure and misuse, including appropriate access restrictions and service-provider safeguards. No internet transmission or storage method can be guaranteed completely secure. Where there are reasonable grounds to believe personal information has been accessed or acquired by an unauthorised person, we will notify the Information Regulator and affected individuals as required by section 22 of POPIA, as soon as reasonably possible and subject to lawful exceptions or delays.

10. Your rights under South African law

Subject to applicable legal requirements and exceptions, you may:

• Ask whether we hold personal information about you and request access to it and information about recipients.
• Request correction of inaccurate information, or deletion or destruction of information that is inaccurate, irrelevant, excessive, out of date, incomplete, misleading, unlawfully obtained or no longer authorised for retention.
• Object on reasonable grounds to processing where POPIA permits, and object to direct marketing.
• Withdraw consent where processing relies on consent, without affecting the lawfulness of earlier processing.
• Raise concerns about a decision based solely on automated processing that has legal or substantial effects, where applicable under POPIA.
• Complain to the Information Regulator or seek an available legal remedy.

We may request proportionate proof of identity before releasing, changing or deleting records, to protect you from unauthorised requests. Access requests may be subject to POPIA and the Promotion of Access to Information Act 2 of 2000 (PAIA), including prescribed procedures, time limits and lawful fees. We will explain any applicable fee or lawful refusal rather than requiring payment merely to raise a privacy concern.

12. Children and sensitive information

Our enquiry and project-planning services are intended for adults, and we do not intentionally solicit children’s information or special personal information through general forms. Processing such information, if necessary, requires a specific lawful basis and the protections required by POPIA, including authorisation by a competent person where applicable. Contact us if you believe such information has been submitted without lawful authorisation so we can investigate and remove or otherwise lawfully handle it.

13. Complaints and the Information Regulator

Please contact us first if you would like us to address a concern, but you are not required to do so before approaching the Information Regulator (South Africa). You may lodge a complaint under POPIA or PAIA through the Regulator’s official complaints page, which provides current procedures, forms and contact details, or visit inforegulator.org.za.

14. Changes to this policy

We update this policy when our practices or legal requirements change. The current version and effective date will remain publicly available here. Where a material change requires a new notice or consent, we will provide that notice or seek consent rather than treating continued browsing as automatic agreement.