Privacy Policy
Last updated: August 2026 ยท Please have this page reviewed by an adviser qualified in South African law before launch.
This Privacy Policy explains how Magnetic Screens (a division of Caruso Consulting Co Ltd, "we", "us" or "our") collects, uses, shares and protects your personal information when you visit magneticscreens.co.za or buy from us. We handle your data lawfully, fairly and transparently, in line with POPIA (Regulation (EU) 2016/679) and the South African Data Protection Act 2018.
Who is responsible
The controller for your data is Caruso Consulting Co Ltd, trading as Magnetic Screens. Our South Africa address and our registered address are both in the footer of every page and on the About page. You can reach us about anything on this page at theteam@magneticscreens.co.za.
What we collect and why
Order data. Your name, email address, delivery address, phone number and order contents. We need these to perform the contract with you (Art. 6(1)(b) POPIA). We never see or store your full card number: payments go through Stripe or PayPal, who are the ones handling card data.
Enquiry data. What you send us through a contact or quote form, so we can answer you. This is also contract performance, or our legitimate interest in replying to you (Art. 6(1)(f) POPIA).
Analytics data. Only if you consent. See the Cookie Policy for what is set and how to change your mind (Art. 6(1)(a) POPIA).
How long we keep it
Order records are kept for as long as South African tax and company law requires, which is generally six years under section 886 of the Taxes Consolidation Act 1997 and section 282 of the Companies Act 2014. Enquiries that do not become orders are deleted once the matter is closed and there is no longer a reason to keep them.
Who we share it with
Only the parties needed to get your order to you and to run the site: our payment providers (Stripe, PayPal), our email provider, our delivery partners, and our hosting and analytics providers. They act as processors on our instructions, or as controllers in their own right where they set their own purposes, as payment providers do. We do not sell your data.
Some of these providers process data outside the EU. Where they do, the transfer is covered by section 72 of the Protection of Personal Information Act 4 of 2013, which permits a transfer where the recipient is subject to a law or binding agreement giving substantially similar protection.
Your rights
You have the right to access your data, to have it corrected or erased, to restrict or object to processing, to data portability, and to withdraw consent at any time without affecting the lawfulness of what was done before you withdrew it (Art. 15 to 21 POPIA).
To exercise any of these rights, email us at theteam@magneticscreens.co.za. We respond within the timeframe POPIA requires, which is normally one month.
You can also lodge a complaint with a supervisory authority. For us that is the Information Regulator (South Africa), the national supervisory authority in South Africa: inforegulator.org.za. If you live in another EU country you may complain to the authority where you live or where you believe the infringement happened instead.
Security
The site runs over HTTPS, payment pages are handled by our payment providers, and access to order data is limited to the people who need it to fulfil your order.