POPIA Compliance Statement

1. What Personal Information We Collect

We collect personal information only when it is voluntarily provided to us or generated through your use of our website, including:

• Contact and enquiry forms: your name, email address, telephone number, company name, and any message or enquiry details you submit to us.
• Basic technical information: our website hosting provider automatically logs standard technical information, such as your IP address and browser type, for website security and technical operation purposes. Our website does not use cookies or analytics/tracking tools.

We do not knowingly collect banking, payment, or other special personal information (as defined in POPIA) through our website.

2. Purpose of Processing

We process your personal information for the following purposes:

• To respond to enquiries submitted through our contact or enquiry forms;
• To provide quotes, information, or assistance relating to our products and services;
• To maintain the security and technical operation of our website; and
• To comply with any applicable legal or regulatory requirements.

We do not use your personal information for any purpose other than those listed above, unless we obtain your consent or are required to do so by law.

3. Lawful Basis for Processing

We process personal information on one or more of the following lawful grounds recognised under POPIA: your consent, the necessity of processing to respond to your enquiry or provide a requested service, and our legitimate business interests in operating and improving our website, provided these interests do not override your rights to privacy.

4. Sharing of Personal Information

We do not sell, rent, or distribute your personal information to third parties for marketing purposes, and we do not currently use any cookies or analytics/tracking tools on our website.

The only third party involved in operating our website is our website hosting provider, which stores and serves our website and, in doing so, has access to standard technical server information (such as IP address logs) for hosting and security purposes.

Should we begin using any additional third-party service provider — for example a courier, payment processor, or marketing platform — we will update this statement to reflect that processing and, where required by POPIA, obtain your consent beforehand.

5. Retention of Personal Information

We retain personal information only for as long as necessary to fulfil the purposes described in this statement, or as required by applicable law, after which it is securely deleted or anonymised.

6. Security of Personal Information

We take reasonable technical and organisational measures to protect personal information in our possession against loss, unauthorised access, misuse, interference, and disclosure, in line with the requirements of POPIA. However, no method of electronic transmission or storage can be guaranteed to be completely secure, and personal information is provided to us via our website at your own risk.

7. Your Rights as a Data Subject

Under POPIA, you have the right to:

• Be informed that your personal information is being collected and processed;
• Access the personal information we hold about you;
• Request the correction, updating, or deletion of your personal information where it is inaccurate, irrelevant, excessive, out of date, incomplete, misleading, or unlawfully obtained;
• Object to the processing of your personal information on reasonable grounds;
• Withdraw consent, where processing is based on consent, at any time; and
• Lodge a complaint with the Information Regulator if you believe your personal information has been processed unlawfully.

To exercise any of these rights, please contact our Information Officer using the details below.

8. Information Officer

In accordance with POPIA, A-C & R Components has appointed an Information Officer responsible for compliance with the Act and for handling requests and queries relating to personal information.

9. Complaints to the Information Regulator

If you are not satisfied with how we have handled your personal information or a request relating to it, you have the right to lodge a complaint with the Information Regulator of South Africa:

10. Future Website Functionality

Should A-C & R Components introduce online ordering, quotation requests, customer account functionality, or online payments on our website in future, additional personal information — such as delivery and billing addresses, order and transaction details, and payment-related information — may be collected and processed. Any such processing will take place in accordance with this statement, which we will update accordingly before that functionality goes live.

11. Changes to This Statement

We may update this POPIA Compliance Statement from time to time to reflect changes in our practices or legal requirements. The “Last updated” date at the top of this statement indicates when it was last revised. We encourage you to review this statement periodically.

12. Contact Us

If you have any questions about this statement or how we handle your personal information, please contact us at: