Privacy Notice

Version 1.0, effective 14 October 2026

This notice explains how Sunpura Energy Solutions (Pty) Ltd ("Sunpura", "we", "us") collects, uses, shares and protects your personal information, as required by the Protection of Personal Information Act 4 of 2013 ("POPIA"). It applies to sunpura.co.za and to any personal information you give us through our forms, by email, by phone or at events.

1. Who we are (the responsible party)

Sunpura Energy Solutions (Pty) Ltd, trading as Sunpura South Africa
Company registration number: 2026/525949/07
Information Regulator registration number: 2026-068729
Registered office: 23 Indus Avenue, Mzuri, Cape Town, Western Cape, 7130, South Africa

2. Information Officer

Information Officer: Michael Anthony Boyce
Deputy Information Officer: Megan Boyce
Email: [email protected]
Phone: +27 63 647 4197
Address: 23 Indus Avenue, Mzuri, Cape Town, Western Cape, 7130

Please contact the Information Officer with any question about this notice or to exercise your rights under POPIA.

3. What personal information we collect

Register your interest: your name, email address, town or suburb and province, and whether you are a homeowner, renter, installer or electrician, property owner or body corporate, retailer or other. Optionally, your mobile number, company name and the products you are interested in. We also record your consent choices, the consent wording and version you agreed to, the date and time of submission, and the page and campaign link you arrived through (for example, the QR code at our exhibition stand).

Enquiry and distributor forms: the details you submit, such as your name, company, email address, phone number, region and message.

Website use: if you accept analytics cookies, aggregated information about how the website is used, collected through Google Analytics. Analytics is off until you consent.

Fields marked as required are needed for us to register your interest or respond to you. If you do not provide them, we cannot process your request. Optional fields may be left blank.

We do not ask for special personal information (such as health, religious or biometric information). Our website is not directed at children, and we do not knowingly collect personal information from anyone under 18.

4. Why we use your personal information

  • To respond to your enquiry and, where you ask, discuss products, a quote, installation or a distribution partnership.
  • To send you Sunpura product news and launch updates, where you have consented.
  • To contact you by phone or WhatsApp about Sunpura products and launch updates, only where you have given a mobile number and separately consented.
  • To understand where registrations come from and improve our website and marketing (in aggregate).
  • To keep records of your consent and comply with our legal obligations.
  • To protect our website and systems against spam, fraud and misuse.

We process personal information on the basis of your consent, to take steps you have requested, to comply with the law, or for our legitimate business interests, as permitted by section 11 of POPIA. We do not use your information for automated decision-making.

5. Direct marketing

We only send electronic direct marketing to people who have opted in, as required by section 69 of POPIA. Email and phone/WhatsApp consent are recorded separately. You can withdraw consent at any time by using the unsubscribe link in any email, replying "STOP" to a message, or contacting the Information Officer. Withdrawing consent does not affect processing that took place before you withdrew it.

6. Who we share your information with

We do not sell your personal information. We share it only with:

  • Service providers (operators) who process it on our behalf: Formspree (website form processing and storage), Google (Google Workspace email and, if you consent, Google Analytics), our website hosting provider, and our email-marketing provider. Each is bound by a written agreement to process your information only on our instructions and keep it secure, as required by sections 20 and 21 of POPIA.
  • An approved Sunpura installer or reseller, only where you ask us for a quote, installation or to be put in touch with one.
  • Professional advisers, regulators or law enforcement, where the law requires it or it is necessary to protect our legal rights.

7. Transfers outside South Africa

Formspree stores form submissions on servers in the United States, and Google may process information in data centres outside South Africa. We transfer personal information across borders only where the recipient is bound by a law, binding agreement or binding corporate rules that provide an adequate level of protection, as permitted by section 72 of POPIA. Our agreements with these providers include data processing terms for this purpose.

8. How we protect your information

We take appropriate, reasonable technical and organisational measures to protect your personal information against loss, damage, and unauthorised access or use, as required by section 19 of POPIA. These include encrypted (HTTPS) transmission, spam protection on our forms, and restricting access to authorised Sunpura team members only.

9. Security compromises

If we have reasonable grounds to believe your personal information has been accessed or acquired by an unauthorised person, we will notify the Information Regulator and you as soon as reasonably possible, as required by section 22 of POPIA.

10. How long we keep your information

  • Interest registrations: until you unsubscribe or ask us to delete them. We delete registrations with no engagement for 24 months.
  • Suppression record: when you unsubscribe, we keep only your contact detail and opt-out date so that we do not contact you again.
  • Consent records: for as long as reasonably needed to show that your consent was validly given.
  • Enquiries: for up to 24 months after our last contact, unless they lead to a sale or contract, in which case we keep records for the periods required by tax and company law.
  • Analytics data: no longer than 14 months.

After these periods, we delete or de-identify the information.

11. Your rights

Under POPIA you have the right to:

  • ask whether we hold personal information about you and request access to it;
  • ask us to correct, update or delete inaccurate, irrelevant, excessive, out-of-date, incomplete, misleading or unlawfully obtained information;
  • object to the processing of your personal information, including for direct marketing;
  • withdraw your consent at any time; and
  • lodge a complaint with the Information Regulator.

To exercise these rights, contact the Information Officer at [email protected]. We may need to verify your identity before acting on a request. Access requests are handled in line with the Promotion of Access to Information Act, 2000 (PAIA), and a prescribed fee may apply in some cases.

The Information Regulator (South Africa)
Woodmead North Office Park, 54 Maxwell Drive, Woodmead, Johannesburg
PO Box 31533, Braamfontein, Johannesburg, 2017
Website: www.inforegulator.org.za

12. Cookies

Our website works without non-essential cookies. Analytics cookies are set only after you accept them in the cookie banner, and you can change your choice at any time. We do not use advertising cookies.

13. Changes to this notice

We may update this notice from time to time. The current version and its effective date are shown at the top of this page. Where a change materially affects how we use information you have already given us, we will tell you.