NXT's POPIA declarations for lawful processing, data subject rights, operators, security safeguards, retention, and cross-border transfers.
Last reviewed: 26 April 2026
Created to provide dedicated South African data protection coverage.
Purpose of this notice
This POPIA notice explains how NXT Level Tech applies the Protection of Personal Information Act, 4 of 2013, to personal information processed through the website and related sales, rental, studio, installation, support, wholesale, and account services.
Lawful processing conditions
- Accountability: NXT is responsible for giving effect to POPIA within its operations and operator relationships.
- Processing limitation: NXT processes information only where there is a lawful basis and only the information reasonably needed for the purpose.
- Purpose specification: information is collected for defined sales, service, support, compliance, security, and marketing purposes.
- Further processing limitation: information is not reused for unrelated purposes unless lawful and compatible.
- Information quality: customers are asked to keep account, billing, delivery, and business details accurate.
- Openness: NXT publishes privacy, POPIA, cookie, and related notices.
- Security safeguards: NXT uses reasonable safeguards to protect personal information.
- Data subject participation: customers may exercise POPIA access, correction, deletion, objection, and complaint rights.
Information Officer and requests
POPIA and Information Officer requests should be sent to info@nxtleveltech.co.za. NXT may require proof of identity or authority before acting on a request, especially for account, wholesale, rental, payment, or business records.
Direct marketing consent
NXT may send newsletters, promotions, early-bird specials, industry news, and business updates to subscribers and existing customers where lawful. Every marketing email should provide an unsubscribe or opt-out route. NXT must not send unsolicited direct marketing where POPIA requires prior consent and no lawful consent or permitted customer relationship exists.
Special personal information and children
NXT does not intentionally request special personal information or children's personal information for ordinary retail transactions. If such information is required for a lawful reason, NXT will restrict processing to what is necessary and apply additional safeguards.
Security compromise response
If NXT has reasonable grounds to believe that personal information has been accessed or acquired by an unauthorised person, NXT will investigate, contain the incident, assess risk, and notify affected data subjects and the Information Regulator where POPIA requires notification.
Cross-border transfers
NXT may use cloud, payment, authentication, support, analytics, email, or supplier systems that process information outside South Africa. Cross-border transfers must comply with POPIA section 72 or another applicable lawful basis, including adequate protection, contractual safeguards, customer consent, contract necessity, or customer benefit.
Regulator complaints
Customers may lodge complaints with the Information Regulator (South Africa) using the contact details and complaint process published at https://www.inforegulator.org.za/.
