Privacy Policy

Responsible Party & Information Officer Details (POPIA Section 18)

1. Introduction

1.1 We, 10 Zeros (Pty) Ltd, are the responsible party for the personal information described in this policy and are committed to protecting your privacy and processing your personal information lawfully under POPIA.

1.2 This policy applies to personal information we collect through our website at www.10zeros.co.za, our online store, engineering services, and direct dealings with you. It should be read together with our Website Terms of Use.

1.3 In this policy, “personal information”, “processing”, “data subject”, “responsible party”, and “operator” have the statutory meanings defined in POPIA.

2. What We Tell You When We Collect Your Information (POPIA Section 18)

2.1 When we collect your personal information, POPIA requires us to make you aware of the following:

• (a) Source of Information: The information we collect and, where we do not collect it directly from you, its source;
• (b) Responsible Party Identity: Our legal name and registered address (see the details table above);
• (c) Purpose: The specific purpose for which we collect the information (see clause 4);
• (d) Voluntary or Mandatory: Whether providing the requested information is voluntary or mandatory;
• (e) Consequences of Non-Provision: For example, that we may be unable to process orders or provide quotes;
• (f) Applicable Law: Any statutory requirements authorising collection;
• (g) Cross-Border Transfers: Whether we transfer data outside South Africa and safeguards applied (see clause 10);
• (h) Your Rights: Your right to access, correct, object to processing under section 11(3), and complain to the Information Regulator (see clauses 6 and 10).

3. Information We Collect

3.1 Information that does not identify you: When you browse our Website, we collect standard technical information including your IP address, operating system, browser type, and internet service provider. On its own, this does not identify you personally.

3.2 Personal information you give us: We collect and process personal details provided when you:

• Fill in forms on the Website, create a customer account, or request an engineering quote;
• Report an issue, inquire about HVAC/ducting products, or correspond with our customer support team;
• Complete feedback surveys or reviews;
• Carry out an online purchase or commercial transaction with us; and
• Interact with the Website (including traffic, location, and log data).

3.3 Third-Party Processors: We utilise trusted third-party providers (such as secure payment gateways and analytics providers) who process data on our behalf under strict data security standards.

3.4 Special Personal Information & Children: We do not seek to collect special personal information (such as religious beliefs, health, or biometric data) or personal details of children under 18 without explicit legal grounds or parental consent. If you believe a child has provided us personal data, contact us immediately for deletion.

4. How and Why We Use Your Information

4.1 Purpose of Processing: We use your personal information to:

• Deliver website functionality, products, and engineering services effectively;
• Process, fulfil, invoice, and deliver your orders and inquiries;
• Manage customer accounts, authenticate logins, and provide warranty support;
• Send essential service-related notifications and lawful marketing updates (with opt-out mechanisms);
• Compile anonymised, aggregated analytical insights to enhance our products and service delivery; and
• Comply with South African statutory, tax, and accounting obligations.

4.2 Lawful Basis: We process personal data only where POPIA allows: with your consent; where required to perform a contract; to comply with statutory duties; to protect your legitimate interests; or for our legitimate business interests without infringing your fundamental privacy rights.

5. Our Commitment — The Eight POPIA Conditions

5.1 We adhere strictly to the eight core conditions for lawful processing prescribed by POPIA:

• Accountability: We ensure ongoing compliance with POPIA requirements.
• Processing Limitation: We collect data lawfully, minimally, and transparently.
• Purpose Specification: Data is collected for defined, explicit purposes.
• Further-Processing Limitation: We do not use information for incompatible secondary purposes.
• Information Quality: We take reasonable steps to maintain accurate, up-to-date data.
• Openness: We remain completely transparent about our information handling practices.
• Security Safeguards: We implement rigorous technical and organisational measures against data loss or unauthorised access.
• Data Subject Participation: We provide full access and correction mechanisms to all users.

6. Your Statutory Rights (POPIA Sections 23–25 and 11)

6.1 Under POPIA, you have the right to:

• Access: Confirm free of charge whether we hold personal information about you, and request a copy (Section 23);
• Correction / Deletion: Request correction or deletion of inaccurate, irrelevant, out-of-date, incomplete, or unlawfully obtained personal data (Section 24);
• Objection: Object on reasonable grounds to the processing of your personal information (Section 11(3));
• Withdraw Consent: Withdraw previously given consent at any time; and
• Regulator Complaints: Lodge a complaint with the Information Regulator of South Africa.

6.2 To exercise any of these rights, contact our Information Officer at info@10zeros.co.za.

7. Storage, Security and Data Retention

7.1 Security Measures: We employ industry-standard technical measures (including SSL/TLS encryption and firewall protection) to safeguard personal data. We do not store complete payment card credentials on our servers; card payments are tokenised and processed via certified payment gateways.

7.2 Retention: Personal information is retained only for as long as needed to fulfil operational and statutory obligations, after which it is securely erased or de-identified.

7.3 Breach Notifications: In the unlikely event of a security compromise affecting personal information, we will notify both the Information Regulator and affected data subjects promptly in terms of POPIA Section 22.

8. Cookies and Similar Technologies

8.1 We use cookies to maintain active login sessions, remember cart contents, speed up navigation, and evaluate site traffic patterns.

8.2 You may configure your browser to decline cookies; however, certain interactive features (such as shopping cart persistence) may be impaired.

9. When We Share Your Information

9.1 Operators & Couriers: We disclose necessary shipment information to verified courier partners and cloud service operators under binding confidentiality agreements.

9.2 Legal Disclosures: We may disclose information if required by a court order, statutory regulation, or to enforce our legal terms.

10. Cross-Border Transfers & Information Regulator

10.1 Cross-Border Transfers: Where data is hosted or processed internationally (such as cloud hosting), we ensure compliance with Section 72 of POPIA through adequate contractual protections.

10.2 Direct Marketing: You may opt out of promotional messages at any time using the unsubscribe link in our emails or by messaging us directly.

10.3 Information Regulator Contact: