Privacy Policy of Noordvyk Industries Pty Ltd
Last Updated: August 26, 2025
Noordvyk Industries Pty Ltd (“Noordvyk,” “we,” “our,” or “us”) takes your privacy seriously. This Privacy Policy explains how we collect, use, store, and protect the personal information you provide to us, in accordance with the Protection of Personal Information Act 4 of 2013 (POPIA), and other applicable laws in South Africa.This Privacy Policy applies to all personal information collected through our website, online store, mobile platforms, customer service channels, and any other services we make available.
By using our services, visiting our website, or purchasing products from us, you consent to the processing of your personal information as described in this policy. By engaging with Noordvyk whether by visiting our website, purchasing products, or otherwise using our services you acknowledge that your personal information will be processed as described in this Privacy Policy. Please note that in some cases, our processing is required by law, necessary to perform a contract, or based on our legitimate interests, and not solely on your consent.
-
Information We Collect
We may collect the following types of personal information:
- Identity Information: Name, surname, identity number, contact details or passport number and related identifiers.
- Contact Information: Email address, postal address, telephone numbers.
- Transaction Information: Details of products bought, including order and payment details, invoices, returns, and refunds.
- Technical Information: IP address, browser type, device identifiers, operating system, login data, and browsing activity when interacting with our website. This may include information collected through cookies and similar tracking technologies.
- Communication Data: Any correspondence and communications you send to us.
- If you create an account with us, we collect your username, encrypted password, preferences, and any profile information you choose to provide.
- Information obtained from service providers, business partners (e.g. courier or payment companies), or public sources, where lawful.
We do not intentionally collect special personal information as defined under POPIA (such as information relating to race, ethnic origin, religious beliefs, health, biometrics, or children under 18). If you inadvertently provide such information, it will only be processed where permitted by law or with your explicit consent.
Where certain personal information is mandatory (e.g. your delivery address to ship your order), failure to provide it may result in our inability to provide products or services to you. Other personal information may be voluntarily provided, in which case you may still use our services without submitting it
-
How We Collect Information
- Directly from you when you purchase products, register on our website, subscribe to our communications, complete online forms, or contact us through email, telephone, or customer service channels.
- Automatically through your use of our website or online platforms. When you visit our website or online platforms, we automatically collect certain technical data using cookies, log files, analytics tools (such as Google Analytics), and advertising technologies (such as Facebook Pixel), to improve your browsing experience, analyse usage, and deliver relevant advertising.
- From third parties and service providers where permitted or required by law.
- If you create an online account, we collect data relating to your login activity, preferences, and use of account features.
All collection is carried out lawfully, for specific, defined purposes, and in accordance with the principles of openness, minimality, and purpose specification under POPIA.
-
Purposes for Processing Personal Information
We collect and process your personal information for the following legitimate purposes:
- To provide and manage our products and services.
- To respond to enquiries, provide technical support, send service-related notifications (such as order confirmations, shipping updates, and changes to terms or policies), and manage your relationship with us.
- To process and fulfill your orders.
- To comply with legal and regulatory obligations, including tax and audit requirements.
- To improve our services, website, and marketing efforts.
- To prevent and detect fraud or other criminal activities.
- To analyse usage of our website and services, monitor performance, and enhance functionality, user experience, and content.
-
Legal Basis for Processing
We process your personal information only where a lawful basis exists. Depending on the context, processing may be justified on one or more of the following grounds:
- Where you have freely given, specific, and informed consent for example, to receive marketing communications or to allow non-essential cookies. You may withdraw your consent at any time, without affecting the lawfulness of processing carried out before withdrawal.
- Where processing is required to enter into or perform a contract with you for example, to process and deliver your order, facilitate payment, or provide after-sales services.
- Where processing is required to comply with legal or regulatory requirements, such as tax, accounting, auditing, or consumer protection laws.
- Where processing is necessary to pursue Noordvyk’s legitimate business interests (such as fraud prevention, securing our systems, or improving services), provided that your privacy rights are not unjustifiably infringed.
- Where processing is necessary for the performance of a duty imposed by law, carried out in the public interest, or in the exercise of lawful authority.
-
Information Sharing and Disclosure
We do not sell, rent or trade your personal information to third parties for their own independent use. We may, however, share your personal information with carefully selected third parties in the following circumstances:
- We engage trusted third parties who assist us in operating our business and providing services to you, including:
- Payment processors who securely handle transactions;
- Courier and logistics providers who deliver your orders;
- IT, hosting, and cloud storage providers who support our digital infrastructure;
- Marketing and communication providers who send notifications or promotional material on our behalf (only where lawful); and
- Analytics providers who help us understand how our website and services are used.
- We may disclose personal information where required to do so by law, regulation, legal process, or enforceable governmental request or where necessary to establish, exercise, or defend our legal rights or to prevent, detect, or investigate fraud, security incidents, or other unlawful activity.
- Where third-party service providers are located outside South Africa, your personal information may be transferred across borders. In such cases, we ensure that transfers are made in compliance with POPIA Section 72 and, where applicable, GDPR to ensure an equivalent level of protection.
-
Data Security
We are committed to protecting the confidentiality, integrity, and availability of your personal information. We implement appropriate technical and organizational measures to protect your personal information against loss, theft, unauthorized access, disclosure, alteration, and destruction.
In the event of a data breach that compromises your personal information, we will notify you and the Information Regulator of South Africa as soon as reasonably possible, in compliance with POPIA Section 22, including details of the nature of the breach, the information affected, and measures taken to mitigate harm.We regularly review and update our security practices to ensure ongoing compliance with legal requirements and alignment with industry best practices.
-
Data Retention
We retain your personal information only as long as necessary to fulfill the purposes for which it was collected, including any legal or reporting requirements. Retention periods may vary depending on the type of information and the purpose of processing.Once personal information is no longer required for the stated purpose or any legal obligation, we will take reasonable steps to securely destroy or permanently de-identify it.
You may also request the deletion of your personal information in accordance with your rights under POPIA subject to our legal obligations to retain certain records.
-
Your Rights Under POPIA
You have the right to:
- Request access to your personal information held by us.
- Request correction or deletion of inaccurate or incomplete personal information.
- You may request that we delete your personal information when it is no longer necessary for the purpose for which it was collected, or where you withdraw consent. Please note that we may retain certain information if required by law.
- Object to the processing of your personal information.
- Withdraw your consent at any time, where processing is based on consent.
- You may request that we temporarily suspend processing of your information in certain circumstances, for example while a complaint is being investigated.
- Where technically feasible, you may request a copy of the personal information you have provided to us in a structured, commonly used, machine-readable format, to transfer it to another service provider.
- If you believe that your privacy rights have been violated, you may lodge a complaint with the Information Regulator of South Africa at:
Information Regulator (South Africa)
Complaints email: POPIAComplaints@inforegulator.org.za
Website: https://inforegulator.org.za/contact-us/
To exercise your rights, please contact us using the details provided below.
-
International Transfers
At present, we primarily process and store personal information within South Africa. However, certain service providers we use such as cloud hosting, analytics, or payment processors may transfer or store your personal information outside South Africa.
If we transfer personal information outside South Africa, we will take reasonable steps to ensure that it is protected, and you may contact our Information Officer to request details of the applicable safeguards.
-
Changes to this Privacy Policy
We may update this Privacy Policy from time to time. We encourage you to review it periodically. Continued use of our services after changes indicates your acceptance.
-
Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or the protection of your personal information, please contact:
Noordvyk Industries Pty Ltd
Physical address: TFT House, International Business, Gateway Newroad, Midrand
Email:
Data Protection Officer (DPO): [Name, if appointed]
By providing your personal information and engaging with Noordvyk Industries Pty Ltd, you acknowledge that you have read, understood, and agreed to this Privacy Policy.