Privacy policy

Last updated: 27 October 2026

This Privacy Notice explains how Kitted Audio, a sole proprietorship (we, us or our), collects and uses personal information when you visit kittedaudio.co.za, place an order or contact us. It is intended to meet the requirements of the Protection of Personal Information Act 4 of 2013 (POPIA).

Who is responsible for your information

Kitted Audio, a sole proprietorship, is the responsible party. Our address is [FULL PHYSICAL ADDRESS]. Our Information Officer is [INFORMATION OFFICER NAME AND CONTACT].

What we collect

Contact details: your name, email address and phone number.
Delivery and billing details: your delivery address and billing address.
Order history: the products you order, cancel or return, and related correspondence.
Enquiry and fitment details: your messages, your vehicle make, model and year, your existing equipment and any photographs you send us, such as a photo of your dashboard.
Device and cookie data: the store platform automatically collects information such as your IP address, browser and device type and how you use the website, through cookies and similar technologies.

Payment card details are entered with and handled by the payment provider shown at checkout. We do not store your payment card details. Please never send full card details or banking passwords by email or WhatsApp. We will never ask for your card PIN, banking password or one-time PIN.

Why we use it and our lawful grounds

To process, deliver and support your order, including returns and warranty claims. Ground: performing our contract with you.
To answer enquiries and fitment questions. Ground: taking steps you ask for before a contract, and our legitimate interest in responding to you.
To keep transaction records and meet our tax, consumer-protection and other legal duties. Ground: compliance with the law.
To prevent fraud and keep the store secure. Ground: our legitimate interests and yours.
To send optional marketing. Ground: your consent.

We do not use information collected for an order for unrelated purposes.

Who we share it with

Shopify, our store platform, which hosts the website and processes store and order data.
Our payment provider, to process payments and refunds.
Couriers, who receive your name, delivery address and phone number to deliver your order.
Professional advisers, such as accountants, auditors and lawyers, where needed.
Authorities, where the law requires us to disclose information.

We share only the information each of them needs for that purpose.

Information processed outside South Africa

Shopify processes store data, including your personal information, outside South Africa. We transfer personal information across borders only where POPIA permits it, for example where the transfer is needed to perform our contract with you or the recipient is bound by data-protection obligations that give adequate protection.

How long we keep it

We keep transaction records for five years after the transaction, as clause 21.4 of our Website Terms & Conditions provides. These records may be kept electronically, as section 16 of the Electronic Communications and Transactions Act (ECTA) permits. Where another law requires a longer period, we keep the record for that period only. Enquiries that do not lead to an order are kept only as long as needed to deal with them.

Security

We take reasonable technical and organisational measures to protect personal information against loss, damage and unauthorised access, including limiting access to people who need it. Our store platform and payment provider apply their own security measures to the data they process. If we believe your personal information has been accessed by an unauthorised person, we will notify you and the Information Regulator as POPIA requires.

Your rights

Under POPIA you may:

ask whether we hold personal information about you and request access to it;
ask us to correct or update inaccurate or incomplete information;
ask us to delete information we no longer have a lawful reason to keep;
object to processing based on our legitimate interests, and object to direct marketing at any time; and
withdraw your consent where we rely on it.

Send requests to our Information Officer at [INFORMATION OFFICER NAME AND CONTACT]. We may need to verify your identity before acting on a request.

If you are not satisfied with our response, you may complain to the Information Regulator (South Africa): website inforegulator.org.za, POPIA complaints POPIAComplaints@inforegulator.org.za, general enquiries enquiries@inforegulator.org.za.

Marketing

Marketing is optional and separate from buying. Accepting our terms is not consent to marketing. We send marketing only if you opt in, and every marketing message includes a way to unsubscribe. Order, delivery, safety and service messages are not marketing and may still be sent.

Cookies

The store platform uses cookies and similar technologies that are needed to run the store, such as keeping items in your cart and completing checkout. You can block or delete cookies in your browser settings, but parts of the store, including checkout, may not work without them.