Privacy policy
Last updated 8 September 2026.
1. Who is responsible
1.1 The responsible party for the purposes of the Protection of Personal Information Act 4 of 2013 ("POPIA") is [registered company name to be supplied], registration number [registration number to be supplied], trading as CatalogueConnect.
1.2 The information officer is [information officer to be supplied], contactable at hello@catalogueconnect.co.za.
1.3 Our address is [physical address to be supplied].
2. What we collect through this website
2.1 When you complete the enquiry form we collect the email address, name, company name, telephone number, the option you select describing your current website, and the text of your message.
2.2 Our web server records the IP address of each request, together with the date, the page requested and the browser identification string. This is ordinary server logging.
2.3 We record the IP address of enquiry submissions in order to apply a limit on the number of submissions from one address per hour.
2.4 This website sets no advertising or tracking cookies.
3. Why we collect it, and on what basis
3.1 Enquiry details are used to reply to your enquiry and, if you become a client, to provide the service. The lawful basis is that processing is necessary to conclude or perform a contract with you.
3.2 Server logs and submission IP addresses are used to keep the site running and to limit automated abuse. The lawful basis is our legitimate interest in the security of the service.
3.3 We do not use enquiry details for direct marketing without your consent, and we do not sell or rent them.
4. Who it is shared with
4.1 Our hosting provider, which stores the data on our behalf.
4.2 Our email provider, which transmits and stores enquiry emails.
4.3 A person or authority to whom we are required by law to disclose it.
4.4 We do not share enquiry details with Amrod Corporate Solutions or with any other supplier.
5. Personal information we process for clients
5.1 Where we build and host a website for a client, that website may collect personal information belonging to the client's own customers, such as names, contact details and quotation records.
5.2 In respect of that information the client is the responsible party and we are an operator, as those terms are used in POPIA. We process it only on the client's instruction, we apply reasonable security safeguards, and we do not use it for our own purposes.
5.3 Supplier API credentials provided by a client are held for the sole purpose of reading catalogue data on that client's behalf. They are stored outside the web root and are not accessible through any website we host.
6. Cross-border transfer
6.1 Our servers are located in South Africa.
6.2 Product images displayed on the websites we build are served from the supplier's own content delivery network, which may be hosted outside South Africa. No personal information is transmitted in order to display them.
6.3 Where any other processing takes place outside South Africa, we do so only where the recipient is subject to a law, binding agreement or corporate rules providing an adequate level of protection.
7. How long we keep it
7.1 Enquiries that do not lead to an engagement are kept for twelve months and then deleted.
7.2 Records relating to clients are kept for five years after the end of the engagement, which is the period we are required to retain accounting records.
7.3 Rate-limiting records are kept for one hour.
7.4 Server logs are kept for thirty days.
8. Security
8.1 The site is served only over an encrypted connection.
8.2 Credentials and configuration are stored outside the directory the web server publishes.
8.3 Access to stored enquiries is limited to people who need it to reply to you.
8.4 No system is immune from compromise. If a breach affects your personal information we will notify you and the Information Regulator as POPIA requires.
9. Your rights
9.1 You may ask what personal information we hold about you, and receive a copy.
9.2 You may ask us to correct or delete information that is inaccurate, irrelevant, excessive, out of date, incomplete, misleading or obtained unlawfully.
9.3 You may object to processing based on legitimate interest.
9.4 You may withdraw consent where processing is based on consent, without affecting processing already carried out.
9.5 To exercise any of these, write to hello@catalogueconnect.co.za. We respond within thirty days.
10. Complaints
10.1 If you are not satisfied with our response you may complain to the Information Regulator (South Africa):
JD House, 27 Stiemens Street, Braamfontein, Johannesburg 2001
Telephone 010 023 5200
Email complaints.IR@justice.gov.za
inforegulator.org.za
11. Changes
11.1 We update this policy when our processing changes. The date at the top shows when it was last changed.