Definitions
Our Privacy Notice is based on the prescripts of POPIA, which requires our documentation to be understandable to our data subjects. To ensure this, we have set out terminology used herein for ease of reference. In this Notice, we use, inter alia, the following terms:
“We” and “Us” shall mean: W Kehls Equipment CC
Registration Number: 1986/012027/23
403 Voortrekker Road, Maitland
“POPIA” shall mean: Protection of Personal Information Act 4 of 2013
“You” and “Your” shall mean: the person to whom personal information relates.
“Personal Information” shall mean information relating to an identifiable, living, natural person, and where applicable, an identifiable, existing juristic person, including but not limited to:
a) Race, gender, sex, pregnancy, marital status, national, ethnic or social origin, colour, sexual orientation, age, physical or mental health, disability, religion, conscience, belief, culture, language, and birth.
b) Education, medical, financial, criminal, or employment history.
c) Any identifying number, symbol, email address, telephone number, location information, online identifier, or other assignment.
d) Biometric information.
e) Personal opinions, views, or preferences.
f) Correspondence revealing the contents of original communications.
g) Opinions of another individual about the person.
h) The person’s name if included with other identifying information.
“Data Subject” shall mean: the person to whom personal information relates, including any identifiable, living natural person or identifiable juristic person.
“Processing” shall mean any operation performed on personal information, whether automated or not, including collection, recording, organisation, storage, adaptation, retrieval, consultation, use, transmission, dissemination, alignment, restriction, erasure, or destruction.
“Consent” shall mean any freely given, specific, informed, and unambiguous indication of the data subject’s wishes signifying agreement to the processing of their personal information.
Purpose
We are committed to respecting privacy concerns and will process all personal information in alignment with POPIA and any other prevailing privacy legislation.
All personal information furnished, collected, and processed by us—regardless of form or medium—shall be processed in accordance with the provisions below.
Collecting Personal Information
We endeavour to collect and process information directly from data subjects. This policy excludes personal information collected from employees, which is governed by a separate agreement.
The processing of your personal information is necessary for the purposes set out below, and we will only request information relevant and necessary for such processing. Failure to provide such information may delay or prevent fulfilment of our obligations.
We collect and process the following information:
-
Identity Data: Full name, company name, identifiers
-
Contact Data: Email address, phone number, postal address
-
Transaction Data: Purchase history, payment details, order information
-
Technical Data: IP address, browser type, device identifiers, website interaction data
-
Marketing & Communication Data: Preferences and customer feedback
Legal Basis for Processing
We and our service providers process personal information exclusively for the following purposes:
1. Consent
We will process your personal information where you have expressly consented. Examples include:
-
Marketing and promotions (if you opt in)
You may opt out at any time.
2. Contractual Obligations
We process information to fulfil obligations to our data subjects, including:
-
Processing orders
-
Managing payments
-
Delivering products
-
Communicating order updates
-
Responding to enquiries and support requests
3. Legal Obligations
We process personal information to comply with legal requirements, including monitoring and notifications as required by law.
4. Legitimate Interests
We may process your data to pursue legitimate interests, including:
-
Enforcement or defence of legal claims
-
Prevention and investigation of criminal acts
-
IT security and operational improvements
-
Service optimisation and website performance analysis
Sharing Information with Third Parties
We do not sell or trade personal data.
We may share your personal information with trusted third-party service providers for:
-
Order fulfilment (payment processors, shipping providers)
-
Marketing and advertising support
-
Legal compliance (government authorities, regulators)
All third-party providers must be subject to privacy legislation equivalent to POPIA.
Retention of Records
Personal information is retained for the period required by statutory obligations. Once the retention period expires, data is deleted unless required for contractual or legal purposes.
Cookies
Information and data may be collected automatically through server operations and cookies.
Cookies help:
-
Recognise repeat users
-
Facilitate access to the website
-
Track usage behaviour
-
Compile data for website improvements
You may disable cookies in your browser settings, but doing so may limit website functionality.
Security Safeguards
We will:
-
Treat your personal information as strictly confidential.
-
Implement technical and organisational measures to secure your information.
-
Notify you promptly of any unauthorised access or disclosure.
-
Provide proof of compliance upon reasonable request.
-
Retain information only as long as necessary or required by law.
Disclaimer:
Although we take precautions to protect your information, we are not liable for loss or damage resulting from information disclosure beyond our reasonable control.
Minors
We do not process the personal information of minor children.
Transborder Flow of Information
Your information may be transferred outside South Africa where required for retention or where service providers operate cross-border. We only engage providers with comparable privacy protections.
Your Rights
Right of Access
You may request confirmation of whether we process your personal information and receive a record thereof, submitted in accordance with our PAIA Manual (www.kehls.co.za).
Right to Rectification
You may request correction of inaccurate personal information.
Right to Erasure
You may request deletion of your information. Requests may be refused if restricted by law or contract.
Right to Object
You may object to processing. We will cease processing unless legitimate grounds override your request or required for legal claims.
Proof of identity may be required.
Automated Decision-Making
We do not use automated decision-making or profiling.
Promotion of Access to Information Act (PAIA)
Requests for information must comply with procedures in our PAIA Manual, available upon request or via www.kehls.co.za.
Changes to This Privacy Policy
We may update this policy from time to time. Significant updates will be communicated via email or prominent website notices.
Contact Us
All enquiries, concerns, or complaints regarding personal information must be directed to:
Michele Kehl
📩 michele@kehls.co.za
If you are not satisfied with our response, you may contact:
The Information Regulator (South Africa)
JD House, 27 Stiemens Street, Braamfontein, Johannesburg
-
POPIA Complaints: POPIAComplaints@inforegulator.org.za
-
PAIA Complaints: PAIAComplaints@inforegulator.org.za
-
General Queries: enquiries@inforegulator.org.za