Privacy Policy

INTRODUCTION

This privacy notice explains how Wattshot SA (Pty) Ltd collects and processes your personal data through your use of our website and services.

By providing us with your data, you confirm that you are 18 years of age or older.

Wattshot SA (Pty) Ltd is the data controller and is responsible for your personal data (referred to as “we”, “us” or “our” in this privacy notice).

Our full contact details are:

  • Legal entity: Wattshot SA (Pty) Ltd
  • Company registration: 2022/597151/07
  • VAT registration: 4900322217
  • Director: Brett Taylor
  • Email: brett@wattshot.co.za
  • Address: Table View, Cape Town, South Africa
  • Telephone: +27 74 569 8889

The information we hold about you must be accurate and up to date. Please notify us of any changes by contacting us directly.

WHAT DATA WE COLLECT, FOR WHAT PURPOSE, AND ON WHAT GROUNDS

Personal data means any information capable of identifying an individual. It does not include anonymised data.

We may process the following categories of personal data:

Communication Data

Includes any communication you send to us via contact forms, email, text, social media, or other channels.

We process this data to communicate with you, maintain records, and, where necessary, establish or defend legal claims.

Our lawful basis is our legitimate business interest in managing communications and operations.

Customer Data

Includes data relating to purchases of goods and/or services such as your name, billing and delivery address, email address, phone number, and purchase details.

We process this data to supply goods and services and maintain transaction records.

Our lawful basis is the performance of a contract between you and us.

User Data

Includes data about how you use our website and any content you post or interact with.

We process this data to operate and maintain our website, ensure security, and improve user experience.

Our lawful basis is our legitimate interest in managing and improving our business.

Technical Data

Includes information such as your IP address, browser type, device information, time zone setting, page views, and navigation paths.

We process this data to analyse website usage, improve functionality, and support marketing efforts.

Our lawful basis is our legitimate interest in growing and protecting our business.

Sensitive Data

We do not collect sensitive personal data such as information relating to health, beliefs, or biometric data.

Where we are required to collect personal data by law or under a contract, and you do not provide it, we may not be able to fulfil that contract. We will notify you if this is the case.

We will only use your personal data for the purpose for which it was collected or a reasonably compatible purpose. Where required, we will inform you of any new purpose and the legal basis for processing.

We do not carry out automated decision-making or profiling.

HOW WE COLLECT YOUR PERSONAL DATA

We may collect data about you by:

– You are providing data directly, for example by placing orders, completing forms, or contacting us
– Automatically collecting data through cookies and similar technologies — please read our Cookie Policy for more details
– Receiving data from third parties such as:

  • Payment providers
  • Delivery and logistics partners
  • Analytics and advertising providers (e.g. Google, Facebook)
DISCLOSURES OF YOUR PERSONAL DATA

We may share your personal data with:

– Service providers who provide IT and system administration services
– Professional advisers, including accountants, auditors, and legal advisors
– Government authorities, where required by law
– Third parties involved in the restructuring, sale, or transfer of our business

We require all third parties to respect the security of your personal data and to process it in accordance with applicable South African data protection laws.

INTERNATIONAL TRANSFERS

Some of our service providers may be located outside of South Africa. Where this occurs, we ensure that appropriate safeguards are in place to protect your personal data, including:

– Transfers only to countries or recipients that provide an adequate level of protection for personal data
– Use of specific contracts, codes of conduct, or certification mechanisms that provide equivalent protection
– Where no such safeguards are available, we may request your explicit consent to the specific transfer, which you may withdraw at any time

DATA SECURITY

We have implemented appropriate security measures to prevent your personal data from being:

– Lost
– Used or accessed without authorisation
– Altered or disclosed improperly

Access to your personal data is limited to employees and partners who have a legitimate business need. We have procedures in place to deal with suspected data breaches and will notify you and the Information Regulator of South Africa where required by law.

DATA RETENTION

We will retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including legal, accounting, and reporting requirements.

For tax and accounting purposes, we retain basic customer information (including contact, identity, financial and transaction data) for a minimum of five years after the end of the customer relationship, in line with South African tax legislation.

Where appropriate, we may anonymise data for research or statistical purposes, in which case it may be retained indefinitely without further notice to you.

YOUR LEGAL RIGHTS

Under the Protection of Personal Information Act (POPIA) and applicable South African data protection law, you have the following rights:

– The right to access your personal data
– The right to request correction or deletion of your personal data
– The right to object to the processing of your personal data
– The right to withdraw consent where processing is based on consent
– The right to lodge a complaint with the Information Regulator of South Africa

To exercise any of the above rights, please contact us at brett@wattshot.co.za. We may request verification of your identity before processing your request.

We aim to respond to all legitimate requests within 30 days. If your request is particularly complex, we will notify you and may take up to 60 days.

If you are not satisfied with how we handle your data, you have the right to complain to the Information Regulator of South Africa at www.inforegulator.org.za. We would appreciate the opportunity to address your concerns first, so please contact us in the first instance.

THIRD-PARTY LINKS

Our website may include links to third-party websites or services. We are not responsible for the privacy practices of these third parties and encourage you to review their privacy policies before providing any personal data.

COOKIES

Our website uses cookies to enhance your experience and analyse website traffic. You can manage or disable cookies through your browser settings. Please note that disabling cookies may affect website functionality. For more information, please read our Cookie Policy.