Privacy Policy

1. Who is responsible

• Responsible party: CABLE ELITE (PTY) LTD (registration number 2024/394627/07)
• Address: 32 Victoria Road, Windsor Park, Kraaifontein, Cape Town, 7570
• Email: info@cableelite.co.za
• Phone: 081 368 8553
• Information Officer: Johan Davel

2. What we collect

We only collect what we need to run the shop and serve you:

• Account details — your name, email address and a password (stored only as a one-way hash, never in plain text). If you sign in with Google, we receive your name, email address and profile picture from Google and store your Google account ID so we can recognise you next time.
• Order details — what you bought, the delivery address or PUDO point you chose, the mobile number for the courier, your saved addresses and their labels, and your order history.
• Payment confirmation — the payment reference, amount and status returned by Paystack. We never see or store your card number, CVV or banking login. Those go directly to Paystack.
• Login & security data — the IP address and browser of each login and active session, one-time login codes emailed to you on a new device, and a “remembered device” cookie so we don’t ask for a code every time.
• Messages — anything you send through the contact form (name, email, phone if given, and your message).
• Notification preferences — if you turn on browser notifications, the subscription key your browser gives us so we can send order updates to it.
• Site usage — which pages you view, what you search for, which parts you look at and what you ask the assistant, along with your device type, browser, IP address and where you came from (e.g. a Google search). We use this ourselves to see what customers are looking for and to follow up with customers who have an account and started but didn’t finish an order. It is kept for 90 days and is not shared with advertising networks.
• Basket & wishlist — the items in your basket (kept in your session, even before you have an account) and your wishlist.

3. Why we use it

• To fulfil your order (POPIA: performance of a contract) — taking payment, booking the courier, sending you order and delivery updates, issuing your invoice, and handling returns or guarantee claims.
• To keep your account safe (legitimate interest) — verifying new devices, showing you where you’re logged in, and detecting abuse.
• To answer you — replying to messages you send us.
• To meet our legal obligations — keeping tax and accounting records of sales.
• With your consent — browser push notifications and remembering your device; you can withdraw either at any time from your profile or your browser settings.

We do not use your information for advertising, profiling or automated decision-making, and we do not sell it to anyone.

4. Who we share it with

Only the service providers we need to complete your order, and only what each one needs:

• Paystack (payments) — your email address and the amount, so they can process the card payment. Their own privacy policy governs your card details.
• The Courier Guy / PUDO (delivery) — your name, mobile number and delivery address or chosen locker, so they can deliver and send you the locker PIN or driver updates.
• Xero (accounting) — your name, email address and the order lines, so an invoice can be generated and emailed to you.
• Google — if you use “Continue with Google” or the address search at checkout, the text you type into the address search is sent to Google to find the address. The map on our home page is loaded from Google Maps, which may set its own cookies.
• Our email host — delivers the emails we send you (login codes, order updates, replies).

Some of these providers process data outside South Africa. Where they do, they are bound by privacy laws or contractual terms that give protection substantially similar to POPIA. We may also disclose information where the law requires it.

5. Cookies

We use a small number of strictly necessary cookies. None of them track you across other websites.

• Session cookie — keeps you logged in and holds your basket while you browse. Expires when you close your browser or after a period of inactivity.
• Security token — protects forms from being submitted by another site on your behalf.
• Remember me — if you tick it, keeps you signed in on that browser.
• Remembered device — set after you verify a new browser with a login code, so we don’t ask again for 60 days. You can see and forget remembered devices under Profile › Devices & sessions.

You can block cookies in your browser, but the site will not be able to keep you logged in or hold a basket.

6. How long we keep it

• Account details — for as long as your account exists. You can delete your account from your profile at any time.
• Orders and invoices — at least five years after the sale, as South African tax and company law requires, even if you delete your account. They are kept only as accounting records.
• Login codes — minutes; they expire as soon as they are used or time out.
• Sessions and remembered devices — until you log out or forget them, or 60 days after last use.
• Contact-form messages — are emailed to us and kept in our mailbox for as long as needed to deal with your enquiry.

7. How we protect it

The whole site runs over HTTPS. Passwords are stored as one-way hashes. Logging in from a new browser requires a one-time code sent to your email. Access tokens for the services above are stored encrypted, and only the business owner can see customer and order details, from an account that is itself protected the same way. No system is perfectly secure, so if you think your account has been accessed by someone else, log out everywhere from Profile › Devices & sessions and let us know.

8. Your rights

Under POPIA you may, free of charge:

• ask what personal information we hold about you and get a copy;
• have it corrected or updated — your name, email, password and saved addresses can be changed on your profile;
• ask us to delete it, or delete your account yourself from your profile (order records we are legally required to keep are excluded);
• object to processing based on our legitimate interests, or withdraw consent you have given;
• complain to the Information Regulator (South Africa) at inforegulator.org.za if you believe we have handled your information unlawfully.

To exercise any of these, email info@cableelite.co.za from the address on your account. We will respond within a reasonable time and may ask you to confirm your identity first.

9. Children

The site is intended for people aged 18 and over. We do not knowingly collect personal information from children; if you believe a child has given us information, contact us and we will delete it.

10. Changes to this policy

We may update this policy as the site or the law changes. The date at the top shows the latest version, and material changes will be announced on the site. This policy should be read together with our Terms & Conditions.