Paint & AccessoriesPINETOWN
Legal

Privacy notice

Last updated 4 August 2026 · Protection of Personal Information Act (POPIA), South Africa

This page explains what we do with your details when you reserve an order, ask for a colour match, or sign up for the newsletter. Plain English, no small print. If anything here isn't clear, phone the shop and ask.

Who we are

Paint & Accessories Pinetown is a paint and panel-shop supplier trading from 13 Railway St, Pinetown CBD, Durban 3620. In POPIA terms we are the responsible party for the personal information described below.

Registered company name
[To be confirmed]
CIPC registration number
[To be confirmed]
VAT number
[To be confirmed]
Address
13 Railway St
Pinetown CBD
Durban 3620, KwaZulu-Natal
Open in Maps →
Phone
Trading hours
  • Mon–Fri 08:00–17:00
  • Sat 08:00–13:00
  • Closed Sunday

Our Information Officer

POPIA requires every business to have a named Information Officer — the person responsible for how personal information is handled and the person you deal with if you have a query or a complaint.

Information Officer
[To be confirmed]
Their email address
[To be confirmed]

Until that is published here, ask for the owner on 031 709 1191 and your request will be dealt with in the same way.

What we collect, and why

We only ask for what we need to do the job in front of us. We do not buy lists, and we do not sell or rent your details to anyone.

Reserving an order for collection

What we collect
Your name, phone number, email address, and your company name if you give one.

Why
To put the order together, phone you to confirm stock and the final price, and hold it at the counter under your name.

Colour-match enquiries

What we collect
Whatever you tell us over the phone or on WhatsApp — usually your contact details, the vehicle make, model and year, and the paint code.

Why
To work out the colour and quote you. These come in by phone and WhatsApp, not through this website.

Newsletter

What we collect
Your email address. We also record the date, your IP address and your browser's user-agent string at the moment you sign up and again when you confirm.

Why
The IP and user-agent are kept as proof that you consented — POPIA and the electronic-communications rules put the burden on us to show that you asked to be on the list, not on you to prove you didn't.

Enquiries by phone, WhatsApp or the enquiry form

What we collect
Whatever you tell us — usually a name, a number and what you need.

Why
To answer you.

There is no online payment on this website, so we never see or store your card or banking details. Payment happens at the counter when you collect.

We do not knowingly collect information about children, and we do not ask for special personal information such as race, health or religion.

Photos you send us

This website does not ask for or accept photo uploads. If you send us a picture of a panel for a colour match, it comes to us on WhatsApp or by phone, and it sits on the shop's phone — not on this website and not in any system described here.

That is worth knowing, because a photo of a car usually shows more than paint: often the number plate, sometimes a VIN through the windscreen, and the file itself can carry the GPS location where it was taken.

We only use those pictures to work out your colour, we don't post them anywhere or pass them on, and you can ask us to delete one at any time. If you would rather not send a photo at all, bring the panel in or read us the paint code off the plate in the door jamb — that is usually enough.

What allows us to use your information

  • Orders, colour matches and enquiries — we need the information to do what you asked us to do. POPIA allows processing that is necessary to carry out or conclude a contract with you, and processing that serves our legitimate interest in running the shop.
  • Newsletter and any other direct marketing consent only. You opt in yourself, you confirm by clicking a link in an email we send you (double opt-in), and every newsletter carries a working unsubscribe link. Nothing is pre-ticked. Buying something from us does not put you on the list.
  • Records we are legally required to keep — tax and company law obliges us to keep certain transaction records for a set period, regardless of consent.

Withdrawing consent is easy and free: click unsubscribe, reply to any newsletter, or phone 031 709 1191. We stop, and we don't ask why.

Where your information is processed (including outside South Africa)

POPIA requires us to tell you when your personal information leaves the country. It does, so here it is plainly:

Supabase

Servers in the European Union

Database and private file storage

Collection orders and newsletter records.

Resend

United States of America

Email delivery

Order confirmations, the newsletter confirmation email and the newsletter itself — so your email address and the contents of those messages pass through them.

Website hosting

Outside South Africa

Serving this website

Standard server logs, which include IP addresses, for security and troubleshooting.

These are service providers acting on our instructions — operators, in POPIA's language. They process the information to provide the service to us and are not permitted to use it for their own purposes. Both the EU and the USA involve a cross-border transfer under section 72 of POPIA; we rely on the fact that the transfer is necessary to perform the service you asked for and on the contractual data-protection terms in our agreements with these providers.

If you would rather nothing of yours crossed a border, order by phone or WhatsApp and come into the shop instead of using the website.

Cookies and tracking

We do not run advertising trackers or analytics on this site. Your collection list is kept in your own browser's local storage on your device — it does not leave your phone until you submit an order. Clearing your browser data clears it.

How long we keep things

  • Colour-match enquiries — these reach us on the shop phone and WhatsApp, so they stay there. We keep them while we may still need to re-mix or match the same colour for you, and you can ask us to delete a message or photo at any time.
  • Collection orders and enquiries — kept for as long as we need them for the order and any follow-up or warranty query.
  • Newsletter records— kept while you are subscribed. When you unsubscribe we keep a minimal record that you unsubscribed, so that we don't email you again by mistake.
  • Invoices and financial records — kept for the period South African tax and company law requires.

Keeping it safe

Personal information sits in access-controlled systems and the website is served over HTTPS. Access is limited to the people who need it to do the work.

We are not going to tell you that this is unbreakable, because no system is. If personal information is compromised in a way that could cause you harm, POPIA requires us to notify you and the Information Regulator, and we will.

Your rights under POPIA

You can, at any time and free of charge:

  • Ask what we hold about you, and get a copy of it.
  • Correct itif it's wrong or out of date.
  • Have it deleted where we no longer have a reason to keep it.
  • Object to direct marketing — unsubscribe, or just tell us to stop.
  • Object to other processing on grounds relating to your situation.
  • Complain to us, or to the Information Regulator.

How to exercise them

Phone or WhatsApp 031 709 1191 and say what you want done, or come into the shop — Mon–Fri 8–5 · Sat 8–1 · Closed Sun. Ask for the owner. We may need to check you are who you say you are before handing over or deleting anything; usually the phone number on the order is enough.

We aim to deal with a request within 30 days. There is no charge, unless a request is repetitive or excessive, in which case POPIA allows us to charge a reasonable fee and we would tell you the amount first.

Once the Information Officer's email address above is confirmed, you will be able to send requests in writing to that address as well.

Complaining to the Information Regulator

If you are not happy with how we have handled your personal information or your request, you can complain to the Information Regulator of South Africa. You do not need our permission and you don't need a lawyer.

Complaints are made on the Regulator's own complaint form (Form 5 under POPIA), which is downloadable from their website along with the current submission instructions and postal address:

Website
inforegulator.org.za

General enquiries
enquiries@inforegulator.org.za

The Regulator also publishes a dedicated address for POPIA complaints. Check their website for the current one before you send a completed Form 5 — we would rather point you at the source than print an address here that goes stale.

Changes to this notice

If we change how we handle personal information, we update this page and change the date at the top. This version is dated 4 August 2026.

See also our returns, warranty and collection page.