POPIA compliance notice

Purpose of this notice

This POPIA notice explains how NXT Level Tech applies the Protection of Personal Information Act, 4 of 2013, to personal information processed through the website and related sales, rental, studio, installation, support, wholesale, and account services.

Lawful processing conditions

• Accountability: NXT is responsible for giving effect to POPIA within its operations and operator relationships.
• Processing limitation: NXT processes information only where there is a lawful basis and only the information reasonably needed for the purpose.
• Purpose specification: information is collected for defined sales, service, support, compliance, security, and marketing purposes.
• Further processing limitation: information is not reused for unrelated purposes unless lawful and compatible.
• Information quality: customers are asked to keep account, billing, delivery, and business details accurate.
• Openness: NXT publishes privacy, POPIA, cookie, and related notices.
• Security safeguards: NXT uses reasonable safeguards to protect personal information.
• Data subject participation: customers may exercise POPIA access, correction, deletion, objection, and complaint rights.

Information Officer and requests

POPIA and Information Officer requests should be sent to info@nxtleveltech.co.za. NXT may require proof of identity or authority before acting on a request, especially for account, wholesale, rental, payment, or business records.

Direct marketing consent

NXT may send newsletters, promotions, early-bird specials, industry news, and business updates to subscribers and existing customers where lawful. Every marketing email should provide an unsubscribe or opt-out route. NXT must not send unsolicited direct marketing where POPIA requires prior consent and no lawful consent or permitted customer relationship exists.

Special personal information and children

NXT does not intentionally request special personal information or children's personal information for ordinary retail transactions. If such information is required for a lawful reason, NXT will restrict processing to what is necessary and apply additional safeguards.

ID and passport numbers (mandatory identity verification)

NXT Level Tech collects and processes your South African ID number or passport number as a mandatory condition of creating and maintaining a verified customer account. NXT relies on POPIA lawful bases including the performance of a contract, compliance with legal obligations, and the legitimate interests of NXT and its customers in preventing fraud, impersonation, and abuse.

The number is processed to confirm that the account is linked to a real person or authorised representative, detect duplicate or fraudulent accounts, prevent impersonation, prevent re-registration after suspension or banning, assess account, payment, delivery, collection, rental, wholesale, or high-value transaction risk, investigate abuse, recover unpaid amounts or rented equipment, and enforce the Terms. Processing is limited to what is reasonably necessary for these purposes.

Providing this information is mandatory. Without it, NXT cannot create or maintain a verified customer account. NXT does not sell the number or disclose it to third parties for their own purposes. Operators that provide hosting, infrastructure, database, security, and technical services may process it only as necessary to host, transmit, store, secure, and operate the service on NXT's instructions and under appropriate security safeguards. NXT may also disclose it where required by law.

NXT retains the complete number only while it is required for verification, account management, risk assessment, active transactions, rentals, fraud reviews, disputes, debt or equipment recovery, legal claims, compliance records, or enforcement of the Terms. Where the complete number is no longer required, NXT deletes it, de-identifies it, or replaces it with a protected fraud-prevention token.

Security compromise response

If NXT has reasonable grounds to believe that personal information has been accessed or acquired by an unauthorised person, NXT will investigate, contain the incident, assess risk, and notify affected data subjects and the Information Regulator where POPIA requires notification.

Cross-border transfers

NXT may use cloud, payment, authentication, support, analytics, email, or supplier systems that process information outside South Africa. Cross-border transfers must comply with POPIA section 72 or another applicable lawful basis, including adequate protection, contractual safeguards, customer consent, contract necessity, or customer benefit.

Regulator complaints

Customers may lodge complaints with the Information Regulator (South Africa) using the contact details and complaint process published at https://www.inforegulator.org.za/.