This policy explains what personal information Curo Pumps collects through its website and pump selection tools, why we collect it, who we share it with, and what rights you have. We process personal information in line with the Protection of Personal Information Act 4 of 2013 ("POPIA").
1. Who is responsible
Curo Pumps (Pty) Ltd (registration number [company registration number]) of 6 Cranbourne Avenue, Benoni, 1500, Gauteng, South Africa is the responsible party for the personal information described here.
Our Information Officer is [name of appointed Information Officer], contactable at christo@curopumps.com.
2. What we collect and why
| Information | Why we hold it | Lawful basis under POPIA |
|---|---|---|
| Account details — name, surname, email address, role, profile picture | To create and authenticate your account, apply permissions, and attribute quotations to the person who raised or edited them | Performance of a contract and our legitimate interests in running a secure system |
| Quotation content — customer and company names, contact email, phone, address, VAT number, references, pricing, equipment selections and notes | To prepare, issue, store and revise quotations, and to maintain commercial records | Performance of a contract, and compliance with tax and company record-keeping obligations |
| Activity records — which quotes you create, open, edit or change the status of, with timestamps | To maintain an audit trail, support the notification system, and investigate errors or misuse | Our legitimate interests in accountability and system integrity |
| Technical data — IP address, browser type, device information and server logs | To keep the Platform secure, diagnose faults and prevent abuse | Our legitimate interests in security and service continuity |
| Enquiry details — anything you send us by email or phone | To respond to you and keep a record of the exchange | Our legitimate interests in responding to enquiries |
We do not knowingly collect special personal information (as defined in POPIA) or information about children, and the Platform is not intended for use by children.
3. Information you enter about other people
When you build a quotation you may enter details of an end customer or a colleague — typically a name, company and contact details. You are responsible for ensuring you may lawfully share that information with us. We process it only to produce and administer the quotation, and we handle it under this policy.
6. Cross-border transfers
Some of the providers above process information outside South Africa. Where that happens, we rely on section 72 of POPIA — the recipient is subject to binding rules or a contract giving an adequate level of protection, or the transfer is necessary to perform a contract with you or in your interest.
7. How long we keep it
- Account records: for as long as the account is active, and then for a reasonable period afterwards for audit purposes.
- Quotations and their audit trail: retained as commercial records. Quotations expire 30 days after issue but the record is kept, since it may be needed for tax, warranty or dispute purposes. South African tax and company legislation generally requires such records to be kept for five years.
- Server and security logs: a short rolling period, typically no more than 12 months.
- Browser storage: as described in the Cookie Policy — you can clear it yourself at any time.
Confirm these retention periods against your own record-keeping policy before publishing.
8. How we protect it
- Access to the Platform requires authentication through Auth0, and accounts are issued only to approved users.
- Permissions are role-based, so administrative functions are restricted.
- Traffic between your browser and the Platform is encrypted in transit.
- Changes to quotations are recorded in an audit log attributing each action to a user.
No system is completely secure. If a breach occurs that creates a real risk of harm, we will notify the Information Regulator and affected individuals as POPIA requires.
9. Your rights
Under POPIA you may:
- ask what personal information we hold about you and request a copy;
- ask us to correct or delete information that is inaccurate, irrelevant, excessive, out of date or obtained unlawfully;
- object to processing based on legitimate interests, on reasonable grounds;
- withdraw consent where processing relies on it, without affecting processing already carried out; and
- complain to the Information Regulator.
To exercise any of these, email christo@curopumps.com. We may need to verify your identity first. Some information cannot be deleted on request where we are required to keep it — for example, a quotation that forms part of a tax record.
10. The Information Regulator
Information Regulator (South Africa)
JD House, 27 Stiemens Street, Braamfontein, Johannesburg, 2001
inforegulator.org.za
complaints.IR@justice.gov.za
11. Changes to this policy
We may update this policy. The version on this page is the one that applies, and the date at the top shows when it last changed. Where a change materially affects how we use your information, we will tell account holders directly.
12. Contact
Curo Pumps (Pty) Ltd
6 Cranbourne Avenue, Benoni, 1500, Gauteng, South Africa
christo@curopumps.com
+27 11 422 4315
Questions about this document? Contact Curo Pumps at christo@curopumps.com or +27 11 422 4315.