We ask for one unusual thing, and this is exactly what happens to it.
Most privacy notices are written to protect the business. This one is written so you can decide whether to give us your identity number, which is the only genuinely sensitive thing we collect.
Not yet signed off. This is the POPIA privacy notice and it names an Information Officer. The structure and the South African statutory points below are correct, but the binding wording needs a commercial attorney to review before launch. Remove this banner then.
Your identity number
Why we need it
Where a module is imported to order, it is shipped direct from our supplier and declared as a personal import in your name, with you as the importer of record. SARS requires the importer’s identity or passport number on that declaration, and the courier cannot lodge the entry without it. That is the only reason we ask, and it is the only thing we use it for.
If the module you are buying is in our South African stock, it is an ordinary domestic sale, there is no customs entry, and we will not ask you for an identity number at all. The field simply does not appear at checkout.
What happens to it
- It is encrypted with AES-256-GCM the moment it reaches our server. We do not hold it in readable form.
- It is never displayed back to you or to our staff. Support sees a masked version and a fingerprint, which is enough to confirm a waybill matches an order.
- It is shared with exactly one party: the clearing agent handling your parcel. Nobody else, ever, including any marketing tool.
- It is erased once the customs entry is finalised and the order is closed, within 90 days.
You can refuse
You can decline, and we will not be able to import in your name. Contact us and we will discuss the alternative, which is slower and usually costs more. Nothing about this is a condition of using the site, only of this specific import.
Everything else we collect
- Your name, email, phone and delivery address. To fulfil the order and to get the parcel to you.
- Your VIN, if you send it. To confirm fitment. Kept with the order so a future claim can be assessed.
- The IP address and browser you accepted the clearing authorisation from. Because appointing an agent for a customs declaration is a legal authorisation and we may have to evidence it.
- Basic analytics. Aggregate page views. No cross-site tracking and no advertising profiles.
We never see your card number or your banking login. Payment happens on the gateway’s own page.
Your rights under POPIA
- Ask what we hold about you, and get a copy.
- Have anything inaccurate corrected.
- Ask us to delete what we no longer need. Where tax law requires us to keep an invoice for five years, we will tell you so rather than quietly refuse.
- Object to processing, and complain to the Information Regulator.
Who to contact
Our Information Officer is reachable at privacy@smartcarscreens.co.za. Name and registration details to be completed before launch.