Last updated: June 05, 2025

1. INTRODUCTION

Welcome to DeckCor SA (“we”, “us”, “our”). We are committed to protecting your privacy and ensuring that your personal information is collected, used, and stored in a lawful, fair, and transparent manner in accordance with the Protection of Personal Information Act 4 of 2013 (“POPIA”).

By using our website or contacting us, you acknowledge that your personal information may be processed as described in this Privacy Policy.

1.1 POPIA Section 18 Notification

This Privacy Policy serves as a notification to data subjects in terms of section 18 of the Protection of Personal Information Act 4 of 2013 (“POPIA”). It explains what personal information we collect, why we collect it, how it is used, who it may be shared with, whether it is transferred outside South Africa, and your rights under POPIA.

2. SCOPE OF THIS PRIVACY POLICY

This Privacy Policy applies to all individuals whose personal information we process in the course of our business operations.

This includes, but is not limited to:

• Website visitors who browse or interact with our website
• Individuals who submit contact or quotation request forms
• Individuals who contact us via email or telephone
• Clients or prospective clients requesting decking or construction services
• Individuals who subscribe to marketing communications
• Job applicants, contractors, or prospective employees (where applicable)

This Privacy Policy applies to personal information collected through our website, contact forms, email communication, telephone calls, WhatsApp messages, and any related services operated by us.

3. KEY DEFINITIONS

Personal Information
Any information relating to an identifiable, living natural person or juristic person as defined under POPIA.

POPIA
The Protection of Personal Information Act 4 of 2013, which regulates how personal information is collected, used, stored, and shared in South Africa.

Responsible Party
The entity that determines the purpose and means of processing personal information: DeckCor SA.

Operator
A third party who processes personal information on behalf of the Responsible Party under contract and instruction.

Country
Refers to the Republic of South Africa.

Processing
Any operation or activity performed on personal information, including collection, storage, use, transfer, alteration, or deletion.

Consent
Any voluntary, specific, and informed expression of will in terms of which permission is given for the processing of personal information.

Services
Decking design, installation, construction services, maintenance services, and related offerings.

Website
Our official website at https://deckcor.co.za.

You / Data Subject
Any person whose personal information we process.

Usage Data
Data collected automatically when using our website or systems, including IP address, browser type, device information, pages visited, and system performance data.

4. OUR PRIVACY PRACTICES

This Privacy Policy explains how we collect, use, and protect personal information in accordance with POPIA.

We act as the Responsible Party when processing personal information for business purposes including responding to enquiries, providing quotations, arranging site visits, managing customer communication, and delivering decking and construction services.

Where we engage third-party service providers to assist in delivering our services, such providers act as Operators and process personal information on our behalf under contractual instructions and applicable data protection laws.

5. RESPONSIBLE PARTY

DeckCor SA is the Responsible Party for purposes of POPIA.

As the Responsible Party, we determine the purpose and means of processing personal information collected through our website, contact forms, communication channels, and in the provision of our decking and construction services.

Company Details:

Company Name: DeckCor SA
Registration Number: [INSERT]

For full contact details, including our Information Officer and contact information for POPIA-related requests, please refer to Section 23 (Complaints and Contact Details).

6. INFORMATION WE COLLECT

What Personal Data We Collect
We collect personal information directly from you when you interact with our website or services, including when you submit a contact or quotation request form, Contact us via email, telephone, or WhatsApp, subscribe to communications, or request information about our services.

Where required and/or have given us your consent, we may process your personal information to respond to enquiries, provide customer service, and communicate with you regarding your project.

6.1 Information You Provide Directly

When you interact with us directly, we may collect personal information such as:

• Full name
• Email address
• Telephone number
• Physical address or site location
• Project details or decking requirements
• Messages or enquiries submitted via forms, email, or phone

We collect this information to respond to enquiries, provide quotations, and deliver services.

6.2 Information Collected Automatically

When you browse our website, we may automatically collect certain technical information about your device and browsing behaviour. This may include your IP address, browser type, device information, website usage activity, cookie identifiers, shopping cart activity, and referral sources.

We collect this information to help us understand how visitors use our website and to improve its performance, user experience, security and usability.

6.3 Messaging and Communication Data

Where you communicate with us via messaging platforms such as WhatsApp or similar services, we may process the content of those communications, including text messages, images, documents, and voice notes, in order to respond to enquiries, provide quotations, manage projects, and maintain records of our interactions with you.

These communications may be stored and retained as part of our business records and are subject to the same security, access control, and retention principles set out in this Privacy Policy.

6.4 Information About Other Individuals

In some circumstances, you may provide us with personal information relating to another individual, such as property owners, family members, contractors, authorised representative or site contacts.

By providing us with another person’s personal information, you confirm that you are authorised to do so and, where required by law, that you have informed the individual about the collection and processing of their personal information and have obtained any necessary consent.
We will process such personal information in accordance with this Privacy Policy and applicable data protection laws.

7. HOW WE COLLECT INFORMATION

We collect personal information in several ways when you interact with our business.
This includes when you:

• Submit a contact, enquiry or quotation request
• Contact us via phone, email, sms or WhatsApp
• Request a site visit or consultation
• Browse our website
• Subscribe to marketing communications
• Participate in promotions or surveys (if applicable)

8. PURPOSE OF PROCESSING YOUR INFORMATION

We process personal information for legitimate, specific, and lawful business purposes in accordance with the Protection of Personal Information Act 4 of 2013 (“POPIA”).

We may process personal information for the following purposes:

• to communicate or respond to customer enquiries, feedback and provide quotations;
• to communicate with clients regarding projects or arrange site visits and consultations;
• to record details of payments and verify transactions;
• to provide decking and construction services;
• to maintain records of communications and projects
• to maintain and improve the functionality, security, and performance of our website and services;
• to detect, investigate, prevent, and address fraud, unauthorised activity, security incidents, or misuse of our services;
• to verify your identity and the accuracy of information provided to us where necessary;
• to comply with legal, regulatory, tax, accounting, and record-keeping obligations;
• to conduct internal business analysis, reporting, research, auditing, and service improvement activities;
• to administer promotions, competitions, surveys, marketing campaigns, or customer engagement initiatives where applicable;
• to send marketing communications, newsletters, promotions, or special offers where permitted by law or where consent has been obtained;
• to manage disputes, enforce legal rights, and protect the legitimate interests of the business;
• to maintain operational records and internal administrative processes; and
• for any other lawful purpose reasonably related to the operation of our business and services.

Automated Processing
We may use automated systems to assist in detecting fraud, preventing unauthorised transactions, improving website security, and maintaining the integrity of our services.

Such automated processes may result in the temporary restriction or flagging of certain transactions where suspicious activity is detected.
Where applicable, you may request human intervention or review of decisions that significantly affect you.

9. PROCESSING OF PERSONAL INFORMATION

We process personal information in accordance with the applicable conditions for lawful processing under the Protection of Personal Information Act 4 of 2013 (“POPIA”), including accountability, processing limitation, purpose specification, further processing limitation, information quality, openness, security safeguards, and data subject participation.

We may process your personal information where:

• processing is necessary to conclude or perform a contract with you;
• processing complies with an obligation imposed by law;
• you have provided consent for processing;
• processing protects a legitimate interest of the data subject; or
• processing is necessary for pursuing the legitimate interests of the Responsible Party or a third party to whom the information is supplied.

Where processing is based on consent, you may withdraw your consent at any time.

Certain personal information is required in order for us to provide products or services, verify payments, comply with legal and regulatory obligations, and communicate with you effectively. Where the provision of personal information is mandatory for these purposes and you choose not to provide such information, we may be unable to provide certain products, services, support, or quotations and transactions.

In certain cases, we may also be legally required to collect and retain personal information in accordance with applicable tax, consumer protection, accounting, fraud prevention, or other regulatory obligations.

Legitimate Interests Safeguard
Where we process personal information based on legitimate interests, we ensure that these interests do not override your rights and freedoms in accordance with POPIA principles.

Data minimisation
We apply data minimisation principles and limit the collection, use, and retention of personal information to what is reasonably necessary for the purposes described in this Privacy Policy.
We will not process personal information beyond what is required for lawful and specified purposes, and we take reasonable steps to ensure that only relevant, adequate, and non-excessive information is collected and retained.

Fraud Prevention and Security
We process limited personal information where necessary to protect our systems, customers, and business from fraud, abuse, and security threats.
This may include the use of automated systems and manual review processes. We apply data minimisation principles, strict access controls, and ongoing security monitoring to ensure that only the information necessary for security purposes is processed.

Service Improvement and Analytics
We may use aggregated or pseudonymised data to understand how our website and services are used, in order to improve performance, functionality, and user experience.

Where required, we provide mechanisms for users to opt out of non-essential analytics processing and we limit the retention of analytics data to what is reasonably necessary.

Customer Support and Dispute Resolution
We retain customer support communications where necessary to respond to enquiries, maintain service quality, and resolve disputes.
These records are retained only for as long as reasonably necessary for these purposes and are subject to access controls, restricted internal access, and appropriate security safeguards.

10. DIRECT MARKETING

We may send you direct marketing communications such as newsletters, promotional offers, product updates, or special promotions where:

• you have consented to receiving such communications; or
• you are an existing customer and applicable law permits us to market similar products or services to you.

Where required by law, we will obtain your consent before sending direct electronic marketing communications.
You may opt out of receiving marketing communications at any time by:

• clicking the unsubscribe link included in marketing emails; or
• contacting us directly using the contact details provided in this Privacy Policy.

We do not use pre-ticked boxes to obtain marketing consent.

11. COOKIES AND TRACKING TECHNOLOGIES

Our website uses cookies and similar tracking technologies to improve website functionality, analyse website usage, remember user preferences, and support ecommerce functionality such as shopping cart management.
Cookies may include:

• essential cookies required for website functionality;
• analytics cookies used to understand website traffic and usage patterns;
• functionality cookies used to remember preferences and settings; and
• marketing or advertising cookies used to deliver relevant advertisements and marketing content.

Some cookies may be placed by third-party service providers such as analytics providers, advertising platforms, payment processors, or ecommerce service providers.

Where required, we use cookie consent mechanisms to allow users to accept or reject non-essential cookies.

You may manage or disable cookies through your browser settings. Please note that disabling certain cookies may affect the functionality and performance of the website.

Full Cookie Policy
For a complete list of all cookies we use, including third-party cookies, please see our detailed Cookie Policy https://deckcor.co.za/cookie-policy/.

12. SHARING OF PERSONAL INFORMATION

We may share personal information with trusted third parties where it is necessary for the operation of our business, the provision of our products or services, compliance with legal obligations, or the protection of our legitimate interests.

Categories of recipients may include payment processors, courier and logistics companies, website hosting providers, email service providers, IT support providers, analytics providers, and legal or regulatory authorities where required by law.

Personal information may also be accessed internally by authorised employees, management, contractors/ sub-contractors involved in project, or administrative personnel where such access is reasonably necessary for the performance of their duties, the provision of services, customer support, operational management, security, compliance, or other legitimate business purposes. Access is restricted to individuals who require the information for authorised purposes and is subject to appropriate confidentiality and security controls.

We only share the minimum amount of information necessary for these service providers to perform their functions and require them to implement appropriate security and confidentiality measures in line with applicable data protection laws.

We do not sell, rent, trade, or otherwise make personal information available to third parties for their own independent commercial purposes.

12.1 Legal Disclosures

We may disclose personal information where we are legally required or authorised to do so in order to comply with applicable laws, regulations, court orders, legal processes, or lawful requests from competent authorities.

This may include disclosures to law enforcement agencies, regulatory authorities, tax or financial authorities, courts, tribunals, or other public bodies.

We will take reasonable steps to verify the validity and legal basis of any request before disclosing personal information. Where legally permitted, we may notify affected individuals of such disclosures unless we are prohibited from doing so by law or court order.

12.2 Third-Party Service Providers

Our website and business operations may make use of third-party ecommerce, analytics, advertising, payment processing, communication, cloud hosting, customer support, and marketing platforms.

These service providers may process personal information on our behalf as Operators in accordance with our instructions, their contractual obligations, applicable data protection laws, and their own privacy policies where applicable.

Where personal information is processed by third-party providers located outside South Africa, such processing will be subject to the safeguards described in Section 13 (International Transfers).

12.3 Business Transfers

We may disclose, transfer, or make available personal information as part of a proposed or completed merger, acquisition, restructuring, reorganisation, financing transaction, sale of assets, change of ownership, joint venture, or other corporate transaction involving all or part of our business.

Where personal information is transferred as part of such a transaction, we will take reasonable steps to ensure that the recipient is bound by appropriate confidentiality, security, and data protection obligations and that the personal information continues to be processed in accordance with applicable laws and substantially similar privacy protections.

Any such transfer will be carried out only where it is lawful and necessary for the purposes of the transaction and subject to any applicable legal requirements.

13. INTERNATIONAL TRANSFERS

Some of our service providers may process or store personal information in countries outside of South Africa.

Where personal information is transferred internationally, we take reasonable steps to ensure that such transfers comply with section 72 of the Protection of Personal Information Act 4 of 2013 (“POPIA”) and other applicable data protection laws.

We ensure that personal information transferred outside of South Africa is protected by appropriate safeguards, which may include contractual obligations, data protection agreements, or other legally recognised transfer mechanisms that provide an adequate level of protection.

These transfers occur only where necessary for the operation of our business, such as payment processing, website hosting, analytics, or marketing services.

By using our services, you acknowledge that certain service providers may process information in jurisdictions outside South Africa where different data protection laws may apply.

14. SECURITY MEASURES

We take the security of your personal information seriously and implement reasonable technical and organisational measures to protect it.

We regularly review and update our security measures in order to identify and address reasonably foreseeable internal and external risks to personal information.

These measures include secure hosting environments, SSL encryption for data transmission, password-protected systems, restricted administrative access, and the use of secure payment processing systems.

Although we take reasonable precautions to protect your personal information, no electronic system or internet-based transmission can be guaranteed to be completely secure.

15. RETENTION OF INFORMATION

We retain personal information only for as long as it is necessary to fulfil the purposes for which it was collected.

This includes retaining information for the duration of your customer relationship with us, respond to enquiries or manage customer communications and provide services for as long as required by applicable tax, accounting, or legal obligations.

This may include records relating to completed projects, pending projects, insurance matters, financial transactions, employment, and any other records reasonably required for operational, legal, regulatory, insurance, safety, security, audit or risk-management purposes.

Certain categories of information may be retained for longer periods where required by law or where retention is necessary to establish, exercise, or defend legal claims, comply with insurance obligations, investigate incidents, maintain safety records, resolve disputes, or satisfy regulatory requirements.

Where personal information is no longer required for the purpose for which it was collected and there is no lawful basis requiring its continued retention, we will take reasonable steps to securely delete, destroy, anonymise, or de-identify such information in accordance with applicable legal requirements and industry best practices.

16. YOUR RIGHTS UNDER POPIA

We respect your privacy and are committed to giving you appropriate control over your personal information in accordance with the Protection of Personal Information Act 4 of 2013 (“POPIA”).

Under POPIA, you have the following rights:
Access:
You may request access to the personal information we hold about you.
Correction:
You may request that we correct or update any inaccurate or incomplete personal information.
Deletion / Destruction:
You may request that we delete or destroy your personal information where we are no longer legally required to retain it, or where continued processing is not justified.
Objection to Processing:
You may object to the processing of your personal information where such processing is based on our legitimate interests, or where it relates to direct marketing.
Withdrawal of Consent:
Where processing is based on your consent, you may withdraw that consent at any time. This will not affect the lawfulness of processing carried out before withdrawal.
Restriction of Processing:
You may request that we temporarily restrict the processing of your personal information in certain circumstances, such as during the resolution of a dispute.
Automated Decision-Making:
Where applicable, you have the right to request information about whether we use automated decision-making that may significantly affect you, and to request human intervention where appropriate.

If you are not satisfied with how we handle your personal information, you have the right to lodge a complaint with the Information Regulator of South Africa.

16.1 How to Exercise Your Rights
You may exercise any of your rights in relation to your personal information by submitting a request to our Information Officer using the contact details provided in this Privacy Policy.
Your request should include:

• Your full name
• Account / project details (if applicable)
• A clear description of your request
• Proof of identity (for verification purposes)

Where applicable, requests for access, correction, deletion, objection, or other rights relating to personal information may be submitted using the prescribed forms issued under POPIA and PAIA. We may request that you complete or provide such forms where required by law or where reasonably necessary to process your request efficiently.

16.2 Identity Verification
In order to protect personal information and prevent unauthorised access, disclosure, deletion, or alteration of personal information, we may require reasonable proof of identity before processing a request.

Where necessary, we may request additional information or documentation to verify the identity and authority of the person submitting the request.
We reserve the right to refuse or delay requests where adequate verification cannot be obtained.

16.3 Response Timelines
We will acknowledge receipt of requests within a reasonable period and aim to respond to all requests as soon as reasonably possible.

We will generally respond to requests within 30 days of receipt. Where a request is complex, involves multiple records, requires additional verification, or cannot reasonably be completed within this period, we may extend the response period where permitted by law and will notify you accordingly.

Certain requests may be limited, deferred, or refused where we are legally entitled or required to do so.

16.4 Internal Request Handling and Tracking
We maintain internal procedures for the receipt, verification, assessment, tracking, and resolution of requests relating to personal information.

Requests may be logged and retained for compliance, audit, security, fraud prevention, dispute resolution, and record-keeping purposes.

All requests are reviewed by authorised personnel and handled in accordance with applicable legal, regulatory, and security obligations.

Where permitted or required by law, we may refuse, partially fulfil, limit, or defer certain requests, including where retention of information is required for legal, regulatory, contractual, tax, accounting, fraud prevention, security, or dispute-resolution purposes.

Where a request cannot be fully completed, we will provide reasons where legally required.

17. PAIA MANUAL

In accordance with the Promotion of Access to Information Act 2 of 2000 (“PAIA”), we maintain a PAIA Manual which describes the categories of records held by us and how access requests may be made.

Our PAIA Manual is available upon request.

18. SECURITY BREACHES

In the event of a security compromise involving personal information, we will take immediate steps to investigate, contain, and mitigate the impact of the incident.

Where required under POPIA, we will notify affected individuals and the Information Regulator of South Africa as soon as reasonably possible. Such notification will include details of the nature of the breach, possible consequences, and measures taken or recommended to address the breach.

Notification does not constitute an admission of fault or liability.

19. RECRUITMENT DATA

We may process personal information submitted for job applications, including CVs, qualifications, and references.

20. CHILDREN’S PRIVACY

Our website is not intended for use by individuals under the age of 18.
We do not knowingly collect personal information from children without the consent of a parent or legal guardian.

21. THIRD-PARTY LINKS

Our website may contain links to third-party websites, applications, or services that are not operated or controlled by us.

These third parties operate independently and have their own privacy and data protection policies. If you choose to access or interact with these third-party services, any personal information you provide will be processed in accordance with their respective privacy policies.
We encourage you to review the privacy policies of any third-party websites or services before providing them with personal information.
While we take reasonable care in selecting trusted service providers and partners, we are not responsible for the privacy practices, security measures, or content of third-party websites or services. We cannot accept liability for how they handle your information.
Some third-party providers may be located in, or operate from, jurisdictions outside of South Africa. In such cases, your personal information may be subject to the data protection laws of those jurisdictions. Once you leave our store’s website or are redirected to a third-party website or application, you are no longer governed by this Privacy Policy or our website’s Terms of Service.

22. CHANGES TO THIS POLICY

We may update this Privacy Policy from time to time in order to reflect changes in our practices, services, or legal obligations.
Whenever we make changes, we will update the “Last Updated” date at the top of this policy. Any significant changes will be clearly communicated on our website. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal information.

23. COMPLAINTS & CONTACT DETAILS

If you believe that your personal information has been processed in a way that is not compliant with POPIA, we encourage you to contact us first so that we can attempt to resolve your concern.

If you are not satisfied with our response, you have the right to lodge a complaint with the Information Regulator of South Africa.
Information Regulator (South Africa)
Website: https://inforegulator.org.za/
General Enquiries: enquiries@inforegulator.org.za
POPIA Complaints: POPIAComplaints@inforegulator.org.za
PAIA Complaints: PAIAComplaints@inforegulator.org.za
Telephone: 010 023 5200 / 0800 017 160

For privacy-related questions, requests, or complaints, you may contact us using the details below:
DeckCor SA
Information Officer: Mr. L. Le Roux
Email: info@deckcor.co.za
Phone: +27 79 557 3752
Address: 13 Stanley Rd, Zoo Park, Cape Town, 7550, South Africa