Privacy Policy & POPIA Statement

1 Responsible Party & POPIA Scope

This Privacy Policy governs the processing of personal information by Trinity Solar Hub (Pty) Ltd ("the Responsible Party", "we", "us", or "our"), operating from Mossel Bay, South Africa. We are committed to protecting your privacy in full compliance with the Protection of Personal Information Act, No. 4 of 2013 (POPIA), the Electronic Communications and Transactions Act, No. 25 of 2002 (ECTA), and international e-commerce privacy benchmarks (including Google Merchant Center requirements).

This policy applies to all visitors, buyers, registered users, and entities interacting with our digital storefront, web applications, customer service WhatsApp channels, or Direct EFT order management protocols.

2 Categories of Personal Information Collected

Under POPIA Section 1, "Personal Information" refers to information relating to an identifiable, living natural person or juristic entity. We collect only necessary personal data for clear, legitimate commercial operations, including:

3 Lawful Condition & Purpose of Data Processing

In accordance with Section 11 of POPIA, personal data is processed lawfully and reasonably based on contractual necessity, legal obligations, or explicit user consent. We process data strictly for:

• Order Execution & Dispatch: Validating transactions, preparing waybills, and dispatching kitchen appliances, solar panels, and water tanks via South African freight couriers.
• Payment Verification: Matching Direct EFT payments against official bank statements before dispatching high-value solar equipment.
• Communication & Support: Providing real-time delivery notifications and customer service via WhatsApp (`069 962 1275`) and email (`sales@trinitysolarhub.co.za`).
• Regulatory & Tax Compliance: Maintaining statutory accounting records as mandated by the South African Revenue Service (SARS) and the Tax Administration Act.
• Security & Anti-Fraud: Protecting store infrastructure and preventing unauthorized control panel access attempts.

4 Data Sharing & Third-Party Disclosure

Trinity Solar Hub maintains a strict policy: we do not sell, rent, monetize, or trade your personal information to marketing brokers or third parties. Data is disclosed only to verified service operators under strict confidentiality agreements:

• Courier & Freight Partners: Licensed South African logistics carriers (e.g., The Courier Guy, Rhenus Logistics) receive only necessary name, contact, and address data to execute doorstep delivery.
• Banking Institutions: First National Bank (FNB) / Standard Bank for verifying incoming Direct EFT deposits.
• Legal Authorities: When compelled by valid subpoena, court order, or statutory requirement under South African law.

5 Data Retention & Storage Security

Personal data is retained only for as long as required to fulfill contract obligations or satisfy South African tax laws. Financial and tax transaction records are securely retained for a minimum of 5 to 7 years in compliance with SARS statutory requirements.

We employ physical, technical, and operational safeguards—including browser session isolation, brute-force lockout protections on administrative portals, and encrypted WhatsApp business channels—to protect against unauthorized access, loss, or damage.

6 Your Statutory Rights Under POPIA

Under POPIA Sections 23 and 24, as a Data Subject you hold statutory rights regarding your personal information:

7 Information Officer & Information Regulator Contact

For any queries, access requests, or POPIA statutory submissions, please contact our designated Information Officer:

If you feel a complaint has not been adequately resolved by us, you have the right to lodge a complaint with the South African Information Regulator:

• The Information Regulator (South Africa): JD House, 27 Stiemens Street, Braamfontein, Johannesburg, 2001 • Email: POPIAComplaints@inforegulator.org.za