Privacy policy

Who we are

This website is operated by [CONFIRM: registered company name and registration number] ("we", "us"), trading as Pool Referrals Cape Town. We are the responsible party for the personal information collected through this website, as defined in the Protection of Personal Information Act 4 of 2013 (POPIA).

Information Officer: [CONFIRM: Information Officer name and contact details, registered with the Information Regulator]. Deputy Information Officer: [CONFIRM: if appointed].

What we collect

When you submit the enquiry form, we collect your name, phone number and/or email address, suburb, the service you need, and the message you write. We also record the page you sent it from, the date and time, campaign tags in the page address if present, your browser's user-agent string and the country your connection comes from, so that we can manage enquiries and prevent abuse.

We do not ask for your ID number, bank details or any special personal information, and we ask you not to include them in your message.

Why we collect it

We use your information for one purpose: to refer your enquiry to an independent pool contractor who covers your suburb, so that they can contact you about it. We may also use it to follow up on that enquiry, to deal with a complaint, or to meet a legal obligation.

We process your information on the basis of your consent, which you give by ticking the consent box on the form, and because it is necessary to act on your request. You may withdraw consent at any time; this does not affect processing that already took place.

Who we share it with

We share your enquiry details with the pool contractor or contractors we refer it to. [CONFIRM: the maximum number of contractors an enquiry is shared with] Contractors are independent businesses and become responsible parties for the information once they receive it. [CONFIRM: written agreements with contractors on the use of referred personal information]

Our website and form are hosted on Cloudflare, which stores enquiries on our behalf as an operator. Cloudflare may process data outside South Africa; we rely on its contractual safeguards for that transfer. [CONFIRM: operator agreement and cross-border transfer basis, attorney-reviewed] We do not sell your information and we do not use it for marketing.

Analytics and cookies

We plan to use Google Analytics to understand, in aggregate, how visitors use the site. [CONFIRM: Google Analytics measurement ID, consent approach and cookie notice, Compliance sign-off] Until that is confirmed, the analytics tag is not loaded. The enquiry form's security check is provided by Cloudflare Turnstile, which helps keep automated spam out.

How long we keep it

We keep enquiry records only for as long as we need them for the purpose above, or as required by law. [CONFIRM: retention period, set by the directors in the retention schedule] After that, records are deleted or de-identified.

How we protect it

Enquiries are sent over an encrypted connection and stored in an access-controlled data store. Only people who need the information to refer or manage your enquiry can see it. If we become aware of a security compromise affecting your information, we will notify you and the Information Regulator as POPIA requires.

Your rights

You may ask whether we hold your personal information and for a copy of it, ask us to correct or delete it, object to its processing, and withdraw your consent. Contact the Information Officer at [CONFIRM: privacy contact email]. You also have the right to complain to the Information Regulator (South Africa): https://inforegulator.org.za.

Changes to this policy

We may update this policy. The current version is always on this page. Last updated: 12 October 2026. [CONFIRM: attorney review of this policy before launch]