Privacy Policy

Last updated: · Applies to tntsecurity.co.za

1. Who we are

TNT Security Systems ("TNT Security", "we", "us", "our") is a low-voltage automation and security systems integrator operating in South Africa. For the purposes of POPIA, TNT Security is the Responsible Party that determines the purpose and means of processing your personal information through this website and our services.

Registered name: TNT Security Pty Ltd. Where any detail below must be completed with company specifics (registration number, registered address, Information Officer name), those are marked and should be confirmed before publication.

2. Information we collect

We collect only the personal information reasonably necessary for the purposes described in this policy:

• Contact information — name, email address, telephone number, and the site or delivery address you provide.
• Order information — the products you order, quantities, order history, delivery/billing address and a unique transaction reference.
• Appointment information — the appointment type, date and time you select, and any site details you share for a survey, repair or consultation.
• Enquiry information — the content of messages you send us and the service type selected.
• Site activity — technical and usage data such as pages viewed, approximate location, device and browser type, and cookie identifiers (see section 9).

We do not store your full payment card details. Card data is captured and processed directly by our PCI-DSS-compliant payment gateway and never reaches TNT Security's systems (see section 6).

3. How we collect it

We collect personal information: directly from you when you submit the enquiry, checkout or booking forms on this website; automatically through cookies and similar technologies as you use the site; and from our payment gateway and delivery partners in the course of fulfilling an order.

4. Why we collect it

• To process and fulfil orders, including delivery, invoicing and order notifications.
• To schedule and manage appointments and coordinate our installation team.
• To respond to enquiries and provide quotes and support.
• To communicate with you about your orders, bookings and warranty.
• To operate, secure and improve the website and prevent fraud or abuse.
• To comply with legal and tax obligations.

5. Lawful basis for processing

We process personal information where: it is necessary to conclude or perform a contract with you (such as an order or booking); you have given consent (such as optional analytics cookies, which you can withdraw at any time); it is necessary to comply with a legal obligation; or it serves our legitimate interests in running and securing the business, balanced against your rights.

6. How we protect your data

We apply appropriate, reasonable technical and organisational measures to protect personal information against loss, unauthorised access and misuse, as required by section 19 of POPIA:

• Encryption in transit — the entire site is served over HTTPS (TLS). All form submissions and data transfers are encrypted.
• Encryption at rest — any personal information we store (orders and appointments) is encrypted using strong industry-standard encryption (AES-256).
• Payment isolation (tokenization) — card data is handled solely by our PCI-DSS-compliant payment gateway. TNT Security receives only a transaction token and reference, never raw card numbers.
• Credential management — database and service credentials are stored as secured environment variables, never in source code, and access is limited to authorised personnel on a need-to-know basis.
• Access controls & monitoring — administrative access is restricted, authenticated and logged.

7. Data retention

We keep personal information only for as long as necessary to fulfil the purpose for which it was collected, or as required by law. Order and tax records are retained for the period required by South African tax and company legislation (generally five years). Enquiry and appointment records are retained for a reasonable period to support warranty and service history, after which they are securely deleted or anonymised. You may request deletion earlier where no legal obligation requires us to retain the data (see section 10).

8. Sharing & operators

We do not sell your personal information. We share it only with trusted third-party operators who process data on our behalf and under contract, including our payment gateway, email/notification provider, hosting and database provider, and delivery partners — each only to the extent needed to deliver the service. Where an operator processes data outside South Africa, we take reasonable steps to ensure a comparable level of protection as required by POPIA. We may also disclose information where required by law.

9. Cookies

Cookies are small files stored on your device. We use:

• Essential cookies — required for the site to function, including remembering the contents of your cart and your cookie choice. These cannot be switched off.
• Analytics cookies — optional; help us understand how the site is used so we can improve it. These are only set if you accept them.

On your first visit you can choose "Accept all" or "Essential only" via the cookie banner. You can change your choice at any time by clearing this site's cookies in your browser. Your consent choice and its timestamp are recorded to demonstrate compliance.

10. Your rights under POPIA

Subject to the conditions and exceptions in POPIA, you have the right to:

• Access the personal information we hold about you.
• Correct or rectify information that is inaccurate or out of date.
• Delete or destroy information we are no longer entitled to retain.
• Object to processing in certain circumstances, and to withdraw consent for optional processing (such as analytics cookies).
• Lodge a complaint with the Information Regulator.

To exercise any of these rights, contact us using the details below. We may need to verify your identity before actioning a request.

11. Contact & complaints

For any privacy enquiry, or to exercise your rights, contact our Information Officer:

• Email: sales@tntsecurity.co.za
• Post / phone: as listed on our Contact page.

If you are not satisfied with our response, you may lodge a complaint with the Information Regulator (South Africa) — POPIAComplaints@inforegulator.org.za.

This policy is a POPIA-aligned template. Confirm the registered company details, Information Officer name and retention periods with a qualified legal advisor before publishing.