Privacy Policy

Xtreme Group ("we", "us", "our") respects your privacy and is committed to protecting your personal information in accordance with the Protection of Personal Information Act 4 of 2013 ("POPIA"). This Privacy Policy explains what personal information we collect, why we collect it, how we use and protect it, and what rights you have regarding your information.

This policy applies to the website xtremegroup.info, our online shop, and any personal information you provide to us by phone, email, WhatsApp, or in person.

1. Who We Are

Xtreme Group is a Cape Town-based supplier and installer of air conditioning, ventilation, heat pumps, CCTV, intercom, home automation, home theatre and DSTV systems, trading from Cape Town, Western Cape, South Africa. For the purposes of POPIA, Xtreme Group is the "responsible party" for personal information collected through this website.

2. Information We Collect

Depending on how you interact with us, we may collect:

• Contact details: name, email address, phone number, physical or delivery address.
• Order and quote information: products or services requested, order history, property type, service required.
• Payment information: processed securely by our payment gateway partner. We do not store your full card details on our servers.
• Communications: messages you send us via our contact form, email, phone or WhatsApp.
• Technical information: IP address, browser type, device information and pages visited, collected automatically via cookies and similar technologies.

3. How We Use Your Information

We process your personal information to:

• Prepare and provide quotations, and process and fulfil orders and installation bookings;
• Communicate with you about your order, quote, or enquiry;
• Schedule deliveries, site visits and installations;
• Process payments and maintain financial and accounting records;
• Send you marketing communications, but only where you have consented, and you may opt out at any time;
• Improve our website, products and services; and
• Comply with our legal and regulatory obligations.

4. Our Commitment Under POPIA

We process personal information in line with POPIA's eight conditions for lawful processing:

• Accountability — we take responsibility for complying with POPIA in everything we do with your information.
• Processing limitation — we only collect information that is adequate, relevant and not excessive, and only with your consent or another lawful basis (such as performing a contract with you).
• Purpose specification — we collect information for specific, clearly defined purposes and do not keep it longer than necessary.
• Further processing limitation — we do not use your information for a new purpose that is incompatible with the purpose it was originally collected for, without your consent.
• Information quality — we take reasonable steps to keep your information accurate, complete and up to date.
• Openness — this policy documents how and why we process your information.
• Security safeguards — we use appropriate technical and organisational measures to protect your information (see Section 8).
• Data subject participation — you have the right to access, correct or request deletion of your information (see Section 7).

5. Sharing Your Information

We do not sell your personal information. We may share it with trusted third parties who help us run our business, including:

• Payment processors, to securely process your payment;
• Delivery and courier partners, to deliver your order;
• Our website hosting, email and WhatsApp Business service providers; and
• Professional advisors, regulators or law enforcement, where required by law.

These third parties are only given access to the information necessary to perform their function and are required to keep it confidential and secure.

6. Data Retention

We retain your personal information only for as long as necessary to fulfil the purpose it was collected for, or as required by law. For example, financial and transaction records are generally retained for at least five years to comply with tax and accounting legislation.

7. Your Rights

Subject to POPIA, you have the right to:

• Request confirmation of, and access to, the personal information we hold about you;
• Request correction or updating of inaccurate, outdated or incomplete information;
• Request that we delete or destroy personal information we no longer have a lawful basis to retain;
• Object to the processing of your personal information, including for direct marketing purposes; and
• Withdraw any consent you have previously given, at any time.

To exercise any of these rights, contact us using the details in Section 12.

8. Security Measures

We use reasonable technical and organisational measures to protect your personal information against loss, unauthorised access, alteration or disclosure, including secure (HTTPS) connections, restricted internal access, and secure third-party payment processing. No method of transmission or storage is completely secure, but we work to protect your information appropriately.

9. Cookies

Our website uses cookies and similar technologies to help the site function correctly, remember your shopping cart and preferences, and understand how visitors use our site. You can control or disable cookies through your browser settings, though some parts of the site may not function correctly without them.

10. Children's Privacy

Our website and services are not directed at children under the age of 18. We do not knowingly collect personal information from children without the consent of a parent or guardian, as required under POPIA.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or the law. The "Last updated" date at the top of this page shows when it was last revised. We encourage you to review this page periodically.

12. Contact Us / Information Officer

If you have questions about this Privacy Policy, or wish to exercise any of your rights under POPIA, please contact our Information Officer:

13. Complaints to the Information Regulator

If you are not satisfied with how we have handled your personal information, you have the right to lodge a complaint with South Africa's Information Regulator: