Privacy Policy

Draft for legal review. This document is a structural placeholder and is not yet legal advice or a final policy.

Who we are

This policy explains how [StrataCharge (Pty) Ltd] (registration number [Company registration number]) (“StrataCharge”, “we”, “us”) processes personal information as a responsible party under the Protection of Personal Information Act 4 of 2013 (POPIA).

Responsible party: [StrataCharge (Pty) Ltd], [Street address], [Suburb], Johannesburg, Gauteng, [Postal code]
Information Officer: [Name], [email address]
General contact: hello@stratacharge.co.za, +27 [XX XXX XXXX]

What personal information we collect

We collect only what we need to respond to you and deliver our services:

When you call, WhatsApp or email us: your name, phone number, email address and whatever you tell us about your property, vehicles and site, for example your suburb, property type or, for complexes and businesses, the organisation name. The website itself has no forms and does not collect these details.
Photos and documents you send us: for example, photos of your DB board, electricity meter or parking bay, or building plans, sent by WhatsApp or email. Please avoid including people, number plates or personal documents in photos.
Project records: site addresses, installation details, Certificates of Compliance, invoices and warranty records once you become a customer.
Website data: an essential cookie that remembers your cookie choices and, only if you consent, analytics data. See our cookie policy.

Why we use it

To respond to your enquiry and prepare a quote
To plan, carry out and certify installation work
To provide warranty, maintenance and support services
To meet legal, tax and electrical-compliance record-keeping obligations
To keep our website secure and working
To send you marketing, but only if you have opted in separately

Lawful basis

We process personal information with your consent (for example, when you contact us and ask for a quote), where it is necessary to conclude or perform a contract with you, where the law requires it, or where it is in our legitimate interests and does not override your rights. [Legal reviewer to confirm the grounds under POPIA section 11.]

We do not sell personal information. We share it only with operators who process it on our behalf under written agreements, and only as needed:

Website hosting: Cloudflare, Inc. (serves the website; it does not receive enquiry details, because the site has no forms)
Email: [Email provider], for correspondence
WhatsApp: if you choose to message us on WhatsApp, your messages are handled by WhatsApp (Meta Platforms) under its own terms and privacy policy
Subcontractors and suppliers: [e.g. electrical subcontractors or hardware suppliers], where needed to complete your installation or a warranty claim
Authorities: where the law requires it, for example a municipality for a supply application

Cross-border transfers

Some of our operators, including Cloudflare, [Email provider] and WhatsApp, may store or process information outside South Africa. We only use operators that are subject to laws, binding agreements or corporate rules that give an adequate level of protection, as POPIA section 72 requires. [Legal reviewer to confirm transfer mechanisms per operator.]

How long we keep it

Enquiries and quote requests that do not lead to work: [24 months], then deleted
Customer and project records: [X years], in line with tax and compliance obligations
Photos and documents you send us: [24 months] unless they form part of a project record

How we protect it

We use access controls, encrypted connections, secure storage for photos and documents you send us, and limited staff access. If we have reasonable grounds to believe your information has been accessed by an unauthorised person, we will notify you and the Information Regulator as POPIA requires.

Your rights

You may ask us to:

confirm whether we hold your personal information and give you access to it
correct or update it
delete or destroy it, where we are no longer authorised to keep it
stop processing it, or object to processing based on legitimate interests
withdraw consent at any time (this does not affect earlier lawful processing)

Send requests to our Information Officer at [email address]. We may need to verify your identity. Formal access requests are dealt with under our PAIA manual.

Direct marketing

We only send marketing to people who have opted in. Every marketing message includes a simple way to unsubscribe, and you can opt out at any time by contacting us.

Complaints

If you are unhappy with how we handle your information, please contact us first so we can try to resolve it. You also have the right to lodge a complaint with the Information Regulator (South Africa): inforegulator.org.za, [Information Regulator contact details to be confirmed].

Changes to this policy

We may update this policy from time to time. The date at the top shows when it was last changed.