Privacy policy

Responsible party and contact

NXT Level Tech is the responsible party for personal information processed through this website, customer support, quotes, orders, rental, studio, installation, wholesale, account, and marketing interactions unless another party is clearly identified.

Privacy, POPIA, PAIA, Information Officer, and data subject requests can be sent to info@nxtleveltech.co.za or delivered to Unit 6 ADF Centre, Vonkel Street, Saxenburg Park 2, Blackheath, Cape Town, 7581, South Africa.

Personal information collected

• Identity and contact details, such as name, email, phone number, company, role, delivery address, billing address, and account credentials.
• Transaction details, such as orders, quotes, invoices, payment references, basket contents, returns, refunds, rental bookings, studio bookings, installation requests, and support tickets.
• Wholesale and compliance details, such as registered business name, trading name, registration number, VAT number, director/member names, ID numbers, authorised users, annual spend range, source-of-funds or authority information where required.
• Technical data, such as IP address, device/browser details, cookies, security logs, usage events, and website diagnostics.
• Communications, such as emails, form submissions, call notes, reviews, product questions, complaints, and marketing preferences.

Why information is processed

• To create and manage accounts, orders, payments, delivery, collections, returns, refunds, rentals, reservations, bookings, quotes, support, installation projects, warranties, and after-sales service.
• To verify identity, authority, delivery details, payment risk, fraud risk, high-value goods risk, wholesale eligibility, and legal or regulatory compliance.
• To communicate service updates, order status, support responses, invoices, booking confirmations, policy updates, and safety or recall notices.
• To send newsletters, promotions, early-bird specials, industry news, and business updates where the customer has subscribed or where direct marketing is otherwise lawful.
• To maintain website security, detect abuse, improve services, analyse performance, and keep legally required business records.

Legal grounds and consent

NXT processes personal information where it is necessary to perform a contract, take pre-contractual steps, comply with law, protect legitimate business or customer interests, prevent fraud or security incidents, or where the customer has consented. Consent can be withdrawn where processing depends on consent, but withdrawal may not affect processing already required for orders, accounting, legal compliance, or dispute records.

Sharing and operators

NXT may share personal information with operators and service providers that help deliver the website and services, including payment providers, banks, courier and freight providers, suppliers, manufacturers, warranty agents, installation contractors, studio/service personnel, IT hosting providers, authentication providers, email providers, analytics providers, accountants, auditors, insurers, legal advisors, regulators, and law enforcement where required.

Operators must process information only for authorised purposes and protect it using appropriate security safeguards.

Security safeguards

• NXT applies reasonable technical and organisational safeguards appropriate to the information and risk, including access controls, least-privilege account access, secure hosting, encrypted transport where supported, payment-provider controls, audit trails, backup and recovery practices, and staff awareness.
• No internet transmission or storage system is completely secure. Customers must keep account credentials confidential and notify NXT promptly of suspected unauthorised access.

Retention

• Order, invoice, tax, accounting, warranty, return, rental, and compliance records are retained for as long as required by law, contract, audit, warranty, tax, anti-money-laundering, dispute, or legitimate business purposes.
• Support and marketing information is retained while needed for the relationship, preferences, service history, or until deletion or unsubscribe is required and legally possible.
• Information that is no longer required is deleted, de-identified, archived, or securely restricted where practical.

Cross-border transfers

Some service providers, platforms, support tools, payment services, or hosting providers may process or store information outside South Africa. NXT will only transfer personal information cross-border where permitted by POPIA, such as where the recipient is subject to appropriate safeguards, the transfer is necessary for the transaction or contract, the customer has consented, or another lawful basis applies.

Your POPIA rights

• Request confirmation of whether NXT holds personal information about you.
• Request access to your personal information.
• Request correction, deletion, or destruction of inaccurate, excessive, outdated, incomplete, misleading, or unlawfully obtained information.
• Object to processing where POPIA allows an objection.
• Withdraw consent where processing depends on consent.
• Opt out of direct marketing.
• Complain to NXT or to the Information Regulator.

Information Regulator

Complaints may be submitted to the Information Regulator (South Africa) through the contact channels published at https://www.inforegulator.org.za/. Customers are encouraged to contact NXT first so the issue can be investigated and resolved where possible.