Privacy Policy
Last updated: August 2026
This Privacy Policy explains how Magnetic Screens (a division of Caruso Consulting Co Ltd, "we", "us" or "our") collects, uses, shares and protects your personal information when you visit magneticscreens.co.za or buy from us. We handle your data lawfully, fairly and transparently, in line with POPIA (Regulation (EU) 2016/679) and the South African Data Protection Act 2018.
Who is responsible
The controller for your data is Caruso Consulting Co Ltd, trading as Magnetic Screens. Our South Africa address and our registered address are both in the footer of every page and on the About page. You can reach us about anything on this page at theteam@magneticscreens.co.za.
What we collect and why
Order data. Your name, email address, delivery address, phone number and order contents. We need these to perform the contract with you (Art. 6(1)(b) POPIA). We never see or store your full card number: payments go through Stripe or PayPal, who are the ones handling card data.
Enquiry data. What you send us through a contact or quote form, so we can answer you. This is also contract performance, or our legitimate interest in replying to you (Art. 6(1)(f) POPIA).
Analytics data. Only if you consent. See the Cookie Policy for what is set and how to change your mind (Art. 6(1)(a) POPIA).
Your South African ID number
When you place an order we ask for your 13-digit South African ID number. South African customs require the recipient's ID number before an imported parcel can be cleared, and without it your delivery cannot be released.
We use it for that one purpose. We share it only with the courier and clearing agent handling your delivery, we store it alongside your order record, and we do not use it for marketing, profiling, or credit checks of any kind. You can ask us to confirm what we hold or to delete it once your order has been delivered, by contacting us on the details above.
How long we keep it
Order records are kept for as long as South African tax and company law requires, which is generally six years under section 886 of the Taxes Consolidation Act 1997 and section 282 of the Companies Act 2014. Enquiries that do not become orders are deleted once the matter is closed and there is no longer a reason to keep them.
Who we share it with
Only the parties needed to get your order to you and to run the site: our payment providers (Stripe, PayPal), our email provider, our delivery partners, and our hosting and analytics providers. They act as processors on our instructions, or as controllers in their own right where they set their own purposes, as payment providers do. We do not sell your data.
Some of these providers process data outside the EU. Where they do, the transfer is covered by section 72 of the Protection of Personal Information Act 4 of 2013, which permits a transfer where the recipient is subject to a law or binding agreement giving substantially similar protection.
Your rights
You have the right to access your data, to have it corrected or erased, to restrict or object to processing, to data portability, and to withdraw consent at any time without affecting the lawfulness of what was done before you withdrew it (Art. 15 to 21 POPIA).
To exercise any of these rights, email us at theteam@magneticscreens.co.za. We respond within the timeframe POPIA requires, which is normally one month.
You can also lodge a complaint with a supervisory authority. For us that is the Information Regulator (South Africa), the national supervisory authority in South Africa: inforegulator.org.za. If you live in another EU country you may complain to the authority where you live or where you believe the infringement happened instead.
Security
The site runs over HTTPS, payment pages are handled by our payment providers, and access to order data is limited to the people who need it to fulfil your order.