Privacy Policy
Last updated: September 2026
This Privacy Policy explains how Just Salt ("we", "us", "our") collects, uses and protects personal information that you share with us when you use justsalt.co.za (the "Site"), create an account, request a quote or buy from us. We comply with the Protection of Personal Information Act, 2013 (Act No. 4 of 2013) — "POPIA".
1. Responsible Party
Responsible party: Just Salt, trading in Western Cape, South Africa.
Contact for privacy queries: info@justsalt.co.za · 021 706 7575.
Information Officer: Graham Donald (owner).
2. What personal information we collect
- Contact details: name, surname, email, phone, company name.
- Account data: email and password (hashed) if you create a client portal account.
- Quote & service data: pool size, location, equipment list, photos you send us, service history.
- Payment data: bank account details on invoices (we do not store full card numbers — card payments are handled by an independent PCI-DSS compliant processor).
- Technical data: IP address, browser, device, pages visited (via analytics if you consent).
- Cookies: see our Cookie Policy.
3. Purpose & lawful basis (POPI Act s.11)
We only collect information that is needed for a specific, lawful purpose — and we tell you what that is. Our lawful bases under POPIA are:
- Performance of a contract (s.11(1)(a)): to quote, supply, install and service pool equipment, send invoices and manage your account.
- Legal obligation (s.11(1)(c)): to keep tax records (SARS), respond to lawful requests by South African authorities.
- Consent (s.11(1)(a)): to send the seasonal pool tips newsletter, to use analytics cookies. You can withdraw consent at any time.
- Legitimate interest (s.11(1)(f)): to keep the Site secure, prevent fraud, improve our products.
4. How long we keep your information
- Account data: while your account is active; 30 days after closure, unless we must keep it for tax or legal reasons.
- Quote and service records: 5 years from last activity.
- Tax & invoice records: 5 years from date of issue (SARS requirement).
- Marketing consent: until you opt out.
- Analytics data: 14 months (anonymised after that).
5. Sharing your information
We don't sell your personal information. We only share it where it is necessary:
- With payment processors to take payment (PCI-DSS compliant).
- With couriers to deliver equipment.
- With accountants and SARS to meet our tax obligations.
- With hosting and email providers under confidentiality agreements.
- With law-enforcement or regulators when required by South African law.
6. Cross-border transfers
Some of our service providers (hosting, email, analytics) may store data on servers outside South Africa — for example in the European Union or the United States. Where this happens, we make sure those providers offer an adequate level of protection (binding corporate rules, standard contractual clauses, or equivalent).
7. Your rights under POPIA
Under sections 23 and 24 of POPIA, you have the right to:
- Access the personal information we hold about you.
- Correct information that is inaccurate or out of date.
- Delete information that we no longer need (subject to our legal record-keeping duties).
- Object to processing in specific circumstances.
- Withdraw consent at any time, without affecting the lawfulness of processing before withdrawal.
- Lodge a complaint with the Information Regulator (see section 11).
To exercise any of these rights, email info@justsalt.co.za. We respond within 30 days. We may need to verify your identity before acting on a request.
8. How we protect your information
We take reasonable technical and organisational steps to keep your data secure:
- HTTPS / TLS on the entire Site.
- Passwords hashed with modern algorithms.
- Access to personal data limited to staff who need it.
- Encrypted backups.
- Regular review of access permissions.
9. Children
The Site is not aimed at children under 18. If you are a parent or guardian and believe your child has provided us with personal information, contact info@justsalt.co.za and we will delete it.
10. Changes to this policy
We may update this policy to reflect legal or operational changes. The latest version is always posted on this page with the "Last updated" date above. For material changes we will notify you by email or by a banner on the Site.
11. Complaints
If you believe we have mishandled your personal information, please contact us first at info@justsalt.co.za — we will do our best to resolve it. If you are not satisfied, you may lodge a complaint with the Information Regulator of South Africa:
- Address: JD House, 27 Stiemens Street, Braamfontein, Johannesburg, 2001
- Postal: P.O. Box 31533, Braamfontein, Johannesburg, 2017
- Email: enquiries@inforegulator.org.za
- Website: inforegulator.org.za
12. Contact us
Just Salt · Western Cape, South Africa
info@justsalt.co.za · 021 706 7575 · 083 763 4562