1. Introduction
Nolte Kitchens Sandton (Pty) Ltd trading as Nolte Kitchens Sandton respects your privacy and is committed to protecting your personal information.
This Privacy Policy explains how we collect, use, disclose, retain, transfer, and safeguard personal information when you:
- Visit our website;
- Submit an enquiry or contact form;
- Book a consultation;
- Request a quotation;
- Visit our showroom;
- Communicate with our employees or representatives;
- Purchase products or services from us; or
- Otherwise interact with our business.
We process personal information in accordance with the Protection of Personal Information Act 4 of 2013, referred to as POPIA, and other applicable South African laws. POPIA establishes conditions for lawful processing and gives data subjects rights relating to access, correction, deletion, objection, direct marketing, and complaints.
2. Responsible Party
For the purposes of POPIA, the responsible party is:
Nolte Kitchens Sandton (Pty) Ltd
Trading as: Nolte Kitchens Sandton
Company registration number: 2016/110794/07
VAT number: 4010274407
Physical address:
6 Kramer Road
Kramerville
Sandton
2090
South Africa
Email: showroom@noltegp.co.za
Telephone: 063 296 5432
Website: www.nolte-sandton.co.za
Nolte Kitchens Sandton (Pty) Ltd determines the purposes for which, and the manner in which, personal information is processed in connection with its website and South African business operations.
3. Information Officer
Our Information Officer is responsible for overseeing our compliance with POPIA and handling privacy-related enquiries and requests.
Information Officer: [Insert full name]
Position: [Insert position]
Email: showroom@noltegp.co.za
Telephone: 063 296 5432
Address: 6 Kramer Road, Kramerville, Sandton, 2090, South Africa
The Information Officer’s name and details must correspond with the Information Officer registered with the South African Information Regulator. The Information Regulator states that Information Officers of private bodies must be registered before taking up their duties.
4. Meaning of Personal Information
“Personal information” has the meaning assigned to it under POPIA and includes information relating to an identifiable natural person and, where applicable, an identifiable juristic person.
Personal information may include names, contact details, identification information, online identifiers, business information, project information, correspondence, and information concerning a person’s interactions with us.
5. Personal Information We Collect
5.1 Information you provide directly
We may collect the following information when you contact us, book a consultation, request a quotation, visit our showroom, place an order, or communicate with us:
- Full name;
- Email address;
- Telephone or mobile number;
- Residential, delivery, installation, or business address;
- Company name and position;
- Country, province, city, or location;
- Preferred consultation dates and times;
- Kitchen, bathroom, living-space, or project requirements;
- Design preferences and product selections;
- Floor plans, drawings, measurements, photographs, and property information;
- Budget or preferred project range;
- Quotation, order, payment, delivery, installation, and warranty information;
- Communications and correspondence;
- Feedback, reviews, complaints, and support requests;
- Marketing preferences; and
- Any other information you voluntarily provide.
Where certain information is required to respond to an enquiry, prepare a quotation, manage a project, or perform a contract, failure to provide that information may prevent us from supplying the requested service.
5.2 Information collected automatically
When you visit our website, we may automatically collect:
- IP address;
- Browser type and version;
- Device type;
- Operating system;
- Approximate location derived from the IP address;
- Pages visited;
- Date and time of access;
- Time spent on individual pages;
- Referring website or source;
- Website navigation and interaction information;
- Cookie identifiers;
- Consent preferences;
- Website errors and diagnostic data; and
- Security and performance information.
5.3 Information obtained from other sources
We may receive personal information from:
- Architects, designers, contractors, developers, installers, or property professionals involved in your project;
- Persons who refer you to our business;
- Manufacturers, suppliers, or other Nolte business partners;
- Social media platforms where you communicate with us;
- Payment, delivery, or installation providers;
- Publicly available sources; and
- Other persons authorised by you to provide information to us.
We will only process personal information received from another source where the processing is permitted by law.
6. Special Personal Information and Children
We do not ordinarily request or intentionally collect special personal information through our website.
Special personal information includes information relating to matters such as health, biometric information, religious or philosophical beliefs, political views, trade-union membership, race or ethnic origin, sex life, or criminal behaviour.
Please do not provide special personal information unless it is reasonably necessary for a specific service and we have requested it for a lawful purpose.
Our website and services are not directed at children under the age of 18. We do not knowingly collect personal information directly from children without the consent of a parent, guardian, or other competent person, unless another lawful basis under POPIA applies.
7. Purposes for Which We Use Personal Information
We may process personal information to:
- Respond to enquiries and requests;
- Arrange and manage consultations;
- Understand your project and design requirements;
- Prepare designs, plans, specifications, quotations, and proposals;
- Process orders and payments;
- Arrange manufacturing, delivery, and installation;
- Provide warranty and after-sales support;
- Communicate with you regarding your enquiry, order, project, or contract;
- Manage customer, supplier, and business relationships;
- Maintain records of consultations, orders, installations, and communications;
- Improve our products, services, website, and customer experience;
- Analyse website traffic and performance;
- Manage cookie and marketing preferences;
- Send marketing communications where legally permitted;
- Detect and prevent fraud, misuse, or security incidents;
- Protect our website, systems, employees, customers, and business operations;
- Resolve complaints and disputes;
- Establish, exercise, or defend legal claims;
- Comply with tax, accounting, regulatory, consumer-protection, and record-keeping obligations; and
- Carry out purposes compatible with the reason for which the information was originally collected.
We will not use personal information for a materially unrelated purpose unless we have a lawful basis for doing so.
8. Lawful Grounds for Processing
Depending on the circumstances, we may process personal information where:
- You have consented to the processing;
- Processing is necessary to enter into or perform a contract with you;
- Processing is necessary to comply with a legal obligation;
- Processing protects your legitimate interests;
- Processing is necessary for our legitimate business interests or the legitimate interests of a third party, provided that your privacy rights are not unjustifiably infringed; or
- Another lawful ground recognised under POPIA applies.
Where processing is based on consent, you may withdraw that consent. Withdrawal will not affect processing that took place lawfully before consent was withdrawn.
POPIA recognises consent, contractual necessity, legal obligations, the legitimate interests of a data subject, and the legitimate interests of a responsible party or third party as possible grounds for lawful processing.
9. Website Enquiries and Consultations
Information submitted through a contact form, booking form, quotation request, telephone call, email, or showroom consultation may be used to:
- Identify and communicate with you;
- Understand your requirements;
- Arrange a consultation;
- Supply requested information;
- Prepare a design, proposal, or quotation;
- Follow up on your enquiry; and
- Maintain a record of our interaction.
Submitting an enquiry does not automatically subscribe you to general marketing communications.
10. Cookies and Similar Technologies
Our website may use cookies and similar technologies.
A cookie is a small data file stored on your device when you visit a website.
10.1 Necessary cookies
Necessary cookies may be used for:
- Website security;
- Session management;
- Network management;
- Form functionality;
- Fraud prevention; and
- Recording cookie preferences.
These cookies may be necessary for the website to operate correctly.
10.2 Functional cookies
Functional cookies may support additional website features, including:
- Embedded maps;
- Embedded media;
- Social media functionality;
- Saved preferences; and
- Other third-party features.
10.3 Analytics and performance cookies
Subject to your cookie preferences, we may use analytics technologies to understand:
- How visitors reach our website;
- Which pages are viewed;
- How users navigate the website;
- Website performance;
- Errors and usability problems; and
- General visitor engagement.
Where installed and enabled, these services may include:
- Google Analytics; and
- Microsoft Clarity.
These providers may collect information such as IP addresses, device information, cookie identifiers, pages visited, session details, heatmaps, interaction information, and session recordings.
The actual analytics and tracking services installed on the website should be verified before this policy is published.
10.4 Managing cookies
Where required, optional analytics, advertising, or functional cookies should not be activated until you have made a selection through the website’s cookie-consent mechanism.
You may:
- Accept optional cookies;
- Reject optional cookies;
- Select specific cookie categories;
- Change your selection through the cookie settings tool; or
- Block or delete cookies through your browser settings.
Disabling certain cookies may affect the website’s functionality.
11. Direct Marketing
We may send marketing communications by email, SMS, telephone, WhatsApp, or another electronic channel only where permitted under POPIA.
This may occur where:
- You have provided the required consent;
- You are an existing customer and the communication relates to our own similar products or services; or
- Another lawful basis applies.
Where marketing is based on an existing customer relationship, you will be provided with a reasonable opportunity to object.
Electronic marketing communications will include an appropriate method for unsubscribing or opting out.
You may object to direct marketing at any time by:
- Selecting the unsubscribe option in the communication;
- Responding to the sender;
- Emailing showroom@noltegp.co.za; or
- Calling 063 296 5432.
Section 69 of POPIA regulates direct marketing by unsolicited electronic communication and permits data subjects to object to such marketing.
12. Disclosure of Personal Information
We do not sell, rent, or trade personal information.
We may share personal information with appropriately authorised third parties where reasonably necessary, including:
- Website hosting providers;
- Website developers and technical-support providers;
- Cloud-storage and infrastructure providers;
- Email and communication providers;
- Customer relationship management providers;
- Analytics and cookie-management providers;
- Kitchen manufacturers and suppliers;
- Designers, architects, consultants, contractors, installers, and delivery providers;
- Payment and accounting service providers;
- Auditors, insurers, attorneys, and professional advisers;
- Relevant members of the Nolte manufacturing or distribution network;
- Government departments, courts, regulators, law-enforcement authorities, or other bodies where disclosure is required or permitted by law; and
- Parties involved in a proposed business restructuring, merger, acquisition, or sale.
Service providers processing personal information on our behalf must only process it under appropriate authority and must implement reasonable security safeguards.
13. Cross-Border Transfers
Some manufacturers, affiliated businesses, technology providers, cloud-service providers, analytics providers, or other service providers may be located outside South Africa.
We will only transfer personal information outside South Africa where the transfer complies with section 72 of POPIA.
A cross-border transfer may take place where:
- The recipient is subject to a law, binding corporate rules, or a binding agreement that provides an adequate level of protection;
- You have consented to the transfer;
- The transfer is necessary to perform a contract with you;
- The transfer is necessary to implement pre-contractual measures requested by you;
- The transfer is necessary for a contract concluded in your interests; or
- Another condition permitted under POPIA applies.
Where appropriate, we will use contractual, technical, and organisational safeguards designed to ensure that foreign recipients protect personal information to a standard substantially similar to that required by POPIA.
Section 72 of POPIA restricts transfers of personal information to recipients in foreign countries unless one of the permitted safeguards or transfer grounds applies.
14. Information Security
We implement reasonable and appropriate technical and organisational measures designed to protect personal information against:
- Loss;
- Damage or destruction;
- Unauthorised access;
- Unlawful processing;
- Accidental disclosure;
- Alteration; and
- Misuse.
Depending on the nature of the information and relevant risks, measures may include:
- User-access controls;
- Authentication controls;
- Secure website hosting;
- Encryption during transmission;
- System updates and security patching;
- Malware protection;
- Backups;
- Logging and monitoring;
- Employee confidentiality obligations;
- Service-provider security requirements; and
- Incident-response procedures.
No website, electronic transmission, or storage system can be guaranteed to be completely secure. However, we will take reasonable steps to identify foreseeable risks and maintain safeguards appropriate to those risks.
15. Security Compromises
Where there are reasonable grounds to believe that personal information has been accessed or acquired by an unauthorised person, we will:
- Investigate the incident;
- Take reasonable steps to contain and remediate it;
- Notify the Information Regulator where required;
- Notify affected data subjects where required; and
- Provide available information regarding measures affected persons may take to reduce possible harm.
Sections 19 and 22 of POPIA respectively address security safeguards and notifications following security compromises.
16. Retention of Personal Information
We retain personal information only for as long as:
- It is required for the purpose for which it was collected;
- It is reasonably required for a lawful business activity;
- Retention is required or authorised by law;
- Retention is required by a contract;
- It is needed to establish, exercise, or defend legal claims; or
- You have consented to a longer retention period.
Retention periods may differ according to the type of information involved. Records may include:
- Website enquiries;
- Consultation and design records;
- Quotations and proposals;
- Customer contracts and orders;
- Invoices and payment records;
- Installation and warranty records;
- Marketing-consent records;
- Cookie-consent records;
- Complaints and correspondence; and
- Website security and technical logs.
When information is no longer lawfully required, we will securely delete, destroy, or de-identify it in a manner intended to prevent its reconstruction.
17. Your Rights Under POPIA
Subject to applicable legal limitations, you may have the right to:
- Ask whether we hold personal information about you;
- Request access to your personal information;
- Request correction of inaccurate, incomplete, misleading, or outdated information;
- Request deletion or destruction of information that we are no longer authorised to retain;
- Object to processing on reasonable grounds relating to your circumstances;
- Object at any time to processing for direct-marketing purposes;
- Withdraw consent where processing is based on consent;
- Request information about relevant third parties who have had access to your information;
- Not be subject, in certain circumstances, to a decision based solely on automated processing;
- Lodge a complaint with the Information Regulator; and
- Institute civil proceedings where permitted by law.
These rights are subject to POPIA, the Promotion of Access to Information Act 2 of 2000, commonly known as PAIA, and other applicable laws.
18. Exercising Your Rights
Requests may be submitted to our Information Officer at:
Email: showroom@noltegp.co.za
Telephone: 063 296 5432
Address: 6 Kramer Road, Kramerville, Sandton, 2090, South Africa
Your request should include sufficient information to allow us to:
- Confirm your identity;
- Locate the relevant information;
- Understand the nature of your request; and
- Confirm that you are authorised to make the request.
We may request reasonable proof of identity before providing access, making corrections, or deleting information.
A prescribed fee may apply to certain formal access requests under PAIA. Where applicable, you will be informed before the request is processed.
19. Complaints
We encourage you to contact our Information Officer first so that we can attempt to resolve your concern.
You may also submit a complaint to the South African Information Regulator if you believe that your personal information has been processed contrary to POPIA.
Information Regulator South Africa
Toll-free number: 0800 017 160
Telephone: 010 023 5200
General enquiries: enquiries@inforegulator.org.za
The Information Regulator currently provides an electronic complaint process for general POPIA complaints and direct-marketing complaints.
20. Third-Party Websites
Our website may contain links to:
- Product manufacturers;
- Social media platforms;
- Map providers;
- Business partners;
- Suppliers; and
- Other external websites.
Third parties operate under their own privacy policies and terms. We do not control and are not responsible for their privacy practices, information security, or website content.
You should review the privacy policy of each third-party website before submitting personal information.
21. Changes to This Privacy Policy
We may update this Privacy Policy to reflect:
- Changes in our business activities;
- Changes to our website or services;
- New technologies or service providers;
- Changes in legal or regulatory requirements; or
- Improvements to our privacy practices.
The latest version will be published on this page with the applicable effective date or last-updated date.
Material changes may also be communicated through the website, email, or another appropriate method.
22. Contact Information
Responsible party
Nolte Kitchens Sandton (Pty) Ltd
Trading as: Nolte Kitchens Sandton
Company registration number: 2016/110794/07
VAT number: 4010274407
6 Kramer Road
Kramerville
Sandton
2090
South Africa
Email: showroom@noltegp.co.za
Telephone: 063 296 5432
Website: www.nolte-sandton.co.za
Privacy enquiries
Information Officer: [Insert registered Information Officer’s full name]
Email: showroom@noltegp.co.za
Telephone: +27 (10) 054 9502
.svg)