Privacy Policy
Effective Date: 2 May 2026
Website: craftcabinets.co.za
Business Name: Cabinet Concepts, trading as Craft Cabinets
Contact Email: tristan@craftcabinets.co.za
Contact Number: 066 336 2587
Address: 24 Dennis Street, Kestlehof, Kimberley, 8301
Craft Cabinets respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, store, share and protect personal information when you visit our website, contact us, request a quotation, use our services, interact with us on social media, or communicate with us by phone, email, WhatsApp or online forms.
This Privacy Policy is drafted in line with the Protection of Personal Information Act 4 of 2013, commonly known as POPIA, and other applicable South African laws. POPIA regulates how public and private bodies process personal information and sets minimum requirements for responsible handling of personal information.
1. Who We Are
Craft Cabinets is a bespoke cabinetry and furniture company specialising in the design, manufacture, installation, repair and restoration of custom woodwork. Our services include kitchen cabinets, built-in cupboards, bedroom cabinets, bathroom vanities, studies and desks, custom furniture, furniture repairs and furniture restoration, including antique pieces.
We operate in Kimberley and surrounding areas, as well as Cape Town and surrounding areas, including the False Bay region. These business details are based on the client’s website and branding brief.
For the purposes of POPIA, Craft Cabinets is the responsible party where we determine why and how your personal information is processed.
2. Personal Information We Collect
We may collect the following categories of personal information:
2.1 Information You Provide Directly
This may include:
- Your name and surname
- Email address
- Phone number
- WhatsApp number
- Physical address or project location
- Details about your cabinetry, furniture, repair or restoration project
- Measurements, photos, floor plans or design references you send to us
- Quotation requests
- Appointment or consultation details
- Billing, payment or invoice-related information
- Any other information you choose to provide when contacting us
2.2 Website and Technical Information
When you visit our website, we may collect certain technical information automatically, such as:
- IP address
- Browser type and version
- Device type
- Pages visited
- Time spent on the website
- Referring website or search engine
- Approximate location based on technical data
- Cookie and analytics information
2.3 Communication Information
When you communicate with us, we may keep records of:
- Email conversations
- WhatsApp messages
- Phone call notes
- Contact form submissions
- Social media messages
- Enquiry and quotation history
2.4 Project-Related Information
For project planning, design, manufacturing and installation purposes, we may collect:
- Site photos
- Room measurements
- Property access details
- Preferred materials, colours and finishes
- Project specifications
- Installation requirements
- Delivery or service address details
3. How We Collect Personal Information
We may collect personal information when you:
- Visit our website
- Complete a contact form
- Request a quote
- Contact us by phone, email or WhatsApp
- Send us photos, measurements or project details
- Interact with us on Facebook, Instagram or other platforms
- Book a consultation
- Accept a quotation
- Purchase products or services from us
- Subscribe to marketing or updates, where applicable
Where possible, we collect personal information directly from you. POPIA recognises collection directly from the data subject as one of the important principles in lawful processing.
4. Why We Use Your Personal Information
We process personal information for legitimate business purposes, including to:
- Respond to enquiries
- Provide quotations
- Arrange consultations or site visits
- Plan, design, manufacture and install custom cabinetry or furniture
- Provide furniture repair or restoration services
- Communicate about your project
- Send invoices, receipts or payment information
- Manage customer relationships
- Improve our website and services
- Respond to complaints or service requests
- Keep internal business records
- Comply with legal, tax, accounting and regulatory obligations
- Send marketing communications, where allowed by law or with your consent
POPIA requires personal information to be processed lawfully and in a reasonable manner that does not infringe the privacy of the data subject.
5. Legal Basis for Processing Personal Information
We process personal information only where we have a lawful reason to do so.
This may include:
5.1 Consent
Where you voluntarily provide your information, complete a form, request a quote, agree to receive marketing, or send us project details.
5.2 Contractual Necessity
Where processing is necessary to provide a quotation, complete a project, deliver a service, issue an invoice or communicate with you about work we are doing for you.
5.3 Legitimate Business Interests
Where processing is necessary for ordinary business operations, customer service, website improvement, record-keeping, fraud prevention or business administration.
5.4 Legal Obligation
Where we are required to keep records or disclose information under applicable laws, tax laws, accounting rules, court orders or regulatory requirements.
POPIA sets out conditions for lawful processing, including accountability, processing limitation, purpose specification, further processing limitation, information quality, openness, security safeguards and data subject participation.
6. Cookies Policy
Our website may use cookies and similar technologies.
A cookie is a small file stored on your device when you visit a website. Cookies help websites function properly, remember preferences, understand visitor behaviour and improve user experience.
6.1 Types of Cookies We May Use
Essential Cookies
These cookies are necessary for the website to function properly. They may support page loading, form submissions, security features and basic website functionality.
Analytics Cookies
These cookies help us understand how visitors use our website, which pages are popular, how long users stay on the site and how visitors find us.
Functionality Cookies
These cookies may remember preferences such as form details, layout settings or website choices.
Marketing Cookies
If used, these cookies may help us measure advertising performance or show relevant marketing content on platforms such as Google, Facebook or Instagram.
6.2 Third-Party Cookies
Third-party services may place cookies through our website. These may include:
- Google Analytics
- Google Search Console
- Google Ads
- Meta / Facebook Pixel
- Instagram integrations
- WhatsApp click-to-chat tools
- Embedded maps
- Website hosting or security tools
6.3 Managing Cookies
You can manage or disable cookies through your browser settings. Please note that disabling certain cookies may affect how the website works.
Where required, we will request cookie consent through a cookie banner or similar notice.
7. Direct Marketing
We may send you marketing communications about our cabinetry, furniture, repair or restoration services if:
- You have given consent; or
- You are an existing customer and the communication relates to similar services; or
- The law otherwise allows us to contact you.
You may opt out of marketing at any time by contacting us or using any unsubscribe option provided.
POPIA includes specific requirements for direct marketing by unsolicited electronic communications, especially where consent is required.
8. Sharing of Personal Information
We do not sell your personal information.
We may share personal information only where necessary and appropriate, including with:
- Website hosting providers
- Email service providers
- IT support providers
- Accounting or bookkeeping service providers
- Payment or banking service providers
- Delivery, courier or installation partners
- Contractors or service providers involved in completing your project
- Legal, tax, audit or compliance professionals
- Government authorities, regulators or courts where legally required
Where we use third-party service providers, we aim to ensure that they process personal information securely and only for the purpose for which it was shared.
9. Cross-Border Transfers
Some third-party services we use may store or process information outside South Africa. This may include website hosting, cloud storage, analytics tools, email systems or social media platforms.
Where personal information is transferred outside South Africa, we will take reasonable steps to ensure that appropriate safeguards are in place and that your information remains protected in line with POPIA.
10. Security of Personal Information
We take reasonable and appropriate measures to protect personal information against:
- Loss
- Misuse
- Unauthorised access
- Unauthorised disclosure
- Alteration
- Destruction
These safeguards may include:
- Password-protected systems
- Limited access to personal information
- Secure email and website hosting tools
- Anti-spam and security plugins
- Backups where appropriate
- Internal confidentiality practices
- Secure storage of business records
POPIA requires responsible parties to secure the integrity and confidentiality of personal information in their possession or under their control by taking appropriate, reasonable technical and organisational measures.
11. Data Retention
We keep personal information only for as long as necessary for the purpose for which it was collected, unless a longer retention period is required or allowed by law.
We may retain information for purposes such as:
- Completing a project
- Providing after-service support
- Handling disputes or complaints
- Keeping tax and accounting records
- Maintaining project and customer records
- Complying with legal obligations
When personal information is no longer required, we will take reasonable steps to delete, destroy, de-identify or securely archive it.
12. Your Rights Under POPIA
As a data subject, you have rights under POPIA, including the right to:
- Know what personal information we collect and process
- Request access to your personal information
- Ask us to correct or update inaccurate information
- Ask us to delete information where appropriate
- Object to the processing of your personal information in certain circumstances
- Withdraw consent where processing is based on consent
- Object to direct marketing
- Lodge a complaint with the Information Regulator
POPIA provides data subjects with rights relating to the processing of their personal information, including rights to notification, access, correction, deletion and objection.
13. Accessing, Correcting or Deleting Your Information
To request access to, correction of or deletion of your personal information, please contact us:
Email: tristan@craftcabinets.co.za
Phone / WhatsApp: 066 336 2587
We may need to verify your identity before processing your request.
We will respond within a reasonable time and in accordance with applicable law.
14. Information Regulator Contact Details
You have the right to contact the Information Regulator if you believe that your personal information has been processed unlawfully.
Information Regulator South Africa
Website: https://inforegulator.org.za
Email: complaints.IR@inforegulator.org.za
The Information Regulator is the independent body established under POPIA and is empowered to monitor and enforce compliance with POPIA and PAIA.
15. Children’s Personal Information
Our services are not specifically directed at children.
We do not knowingly collect personal information from children without the consent of a parent, guardian or competent person where required by law.
POPIA places specific restrictions on the processing of children’s personal information unless a lawful exception applies.
16. Special Personal Information
We do not intentionally collect special personal information unless it is necessary for a lawful purpose or you voluntarily provide it.
Special personal information may include information relating to health, biometric information, religion, race, trade union membership, political persuasion or criminal behaviour.
If such information is accidentally provided, we will process it only where legally permitted and necessary.
17. Website Links and Third-Party Platforms
Our website may contain links to third-party websites or platforms, including Facebook, Instagram, WhatsApp, Google Maps or other external tools.
We are not responsible for the privacy practices, security or content of third-party websites. You should read their privacy policies before providing personal information to them.
18. Social Media
When you interact with us on social media, the platform you use may also collect and process your personal information according to its own privacy policy.
This may include Facebook, Instagram, WhatsApp or other platforms.
We may respond to direct messages, comments or enquiries sent through these platforms, but we encourage users not to share sensitive personal information publicly.
19. Quotations, Photos and Project Information
When you request a quote or consultation, you may send us photos, measurements, videos, plans or project descriptions.
We use this information only to:
- Understand your requirements
- Prepare estimates or quotations
- Plan the project
- Communicate with you
- Manufacture or install the agreed work
We may store project photos for internal records. We will not publicly use identifiable photos of your home, property or project without permission, unless the images are already publicly available or do not identify you.
20. Use of Project Photos for Marketing
Craft Cabinets may request permission to use completed project photos on our website, social media, portfolio, advertising or marketing material.
Where possible, we will avoid publishing personal information such as names, addresses, family photos, private documents or identifying details.
If you do not want your project photos used for marketing, you may tell us in writing.
21. Payment and Financial Information
If you pay for services, we may process payment-related information such as:
- Invoice details
- Payment confirmations
- Billing details
- Banking reference information
We do not store full bank card details unless handled by a secure payment provider, where applicable.
22. Business Records
We may retain business records where necessary for accounting, tax, legal and operational purposes.
These records may include:
- Quotes
- Invoices
- Payment records
- Customer communications
- Project records
- Supplier records
23. Data Breach Notification
If we become aware of a security compromise involving personal information, we will take reasonable steps to investigate and address the issue.
Where required by POPIA, we will notify affected data subjects and/or the Information Regulator.
24. Updates to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our business, services, website, legal requirements or privacy practices.
The updated version will be published on our website with a revised effective date.
25. Contact Details
For any privacy-related questions, requests or complaints, please contact:
Craft Cabinets
Cabinet Concepts trading as Craft Cabinets
Contact Person: Tristan van der Westhuyzen
Email: tristan@craftcabinets.co.za
Phone / WhatsApp: 066 336 2587
Address: 24 Dennis Street, Kestlehof, Kimberley, 8301
