Your details.
I'm a one-man business. The only reason I have your name and number is so I can quote your job, do it, and hand you the paperwork. I don't sell details, I don't build a mailing list, and nobody phones you because I gave them your number. This page says exactly what I keep and what you can do about it.
Who I am.
Toit Electrical is a sole trader owned and run by Danie du Toit, Vanderbijlpark, Gauteng. Under POPIA I am the responsible party for your information, and I am my own information officer. There is nobody else to pass you to.
Phone or WhatsApp: 072 839 6259
Email: [EMAIL]
What I collect
Only what a job actually needs:
- Your name — so the quote, invoice and certificate have the right person on them.
- Your phone number — usually your WhatsApp number, because that's how most jobs start.
- Your address — I can't inspect a house without knowing which house it is. A Certificate of Compliance has the property address on it by law.
- Your email address, if you give it, for sending the certificate and test report.
- Photos of the installation — the board before and after, the geyser, the joint, the thermal scan. These are pictures of wiring, not of people or of the inside of your home beyond the work area.
- What you told me was wrong, and what I found and did.
I don't ask for your ID number, your bank details or your date of birth. If a job ever needs something extra, I'll ask and tell you why.
Why I keep it
To quote the work, to do the work, to invoice you, to get the certificate and test report issued, and to honour the 12-month workmanship guarantee. If you phone me in ten months about a job I did, I need to be able to find it. That is the whole list.
I will not send you marketing messages you didn't ask for. The one message you may get is a single review request about three days after the job, and one reminder. Say the word and it stops.
WhatsApp, and what Meta sees
Most people reach me on WhatsApp. That means your message and any photo you send also pass through WhatsApp, which is run by Meta, not by me. WhatsApp messages are encrypted in transit, but Meta still handles information about the message — who sent it, when, from which number — under its own privacy terms, and its servers are outside South Africa.
I can't change that, so I'd rather you know it. If you would prefer not to use WhatsApp, phone me on 072 839 6259 or use the form on the contact page instead. I keep our WhatsApp chat on my phone as the record of what was agreed, and my phone is locked with a PIN.
Who else sees your details
Nobody, except where the job needs it:
- The registered person who signs your Certificate of Compliance gets your name and address, because the certificate must be in your name and carry the property address.
- The registered Electric Fence System Installer gets your name and address when an electric fence certificate is issued for your property, because the certificate must be in your name.
- The Department of Employment and Labour, or an inspector, if they ask to see the records behind a certificate issued for your property. That's the law, not my choice.
- Your conveyancer, estate agent or insurer, but only if you ask me to send them the certificate.
- My accountant and my bank, for the invoice, because SARS requires the records.
I never sell, rent, trade or "share" your details with anybody else. No lead companies, no marketing lists.
How long I keep it
Quotes that never became jobs: about a year, then deleted. Invoices and tax records: five years, because the tax law says so. Certificates, test reports and the photos that go with them: I keep these for as long as they might matter, because a certificate signed today can be asked about years later when the property is sold. Ask me to delete something and I'll delete it, unless the law says I must keep it — in which case I'll tell you which law.
Keeping it safe
Your details live on my phone and my laptop. Both are locked, both are backed up, and the backup is password-protected. I am one man with one phone — that is a small target, but it is not a perfect one. If information about you is ever lost or stolen in a way that could harm you, I must tell you and the Information Regulator, and I will.
This website, and what measures it
The site is plain pages with no login. The contact form sends what you type straight to me; it doesn't store a profile of you. Three things count visits so I know whether the site is working:
- Cloudflare Web Analytics — counts page views and how fast pages load. No cookies, no identifiers, nothing stored on your phone.
- Google Analytics — counts visits and clicks on the WhatsApp and call buttons, so I know what people use. Sets the cookies
_gaand_ga_*for up to two years. Google's advertising features are switched off. - Meta Pixel — tells Facebook when someone from one of my adverts reached the site or tapped WhatsApp, so the adverts can be measured. Sets
_fbp(and_fbcif you came from a Facebook advert) for 90 days.
None of it tells me who you are, and none of it is used to send you anything. If you would rather not be counted, switch it off for this browser — that is your right to object under POPIA, and it stays off until you clear your browser data. A normal ad blocker does the same job.
If I don't sort it out
You can complain to the Information Regulator, who enforces POPIA. They are free to use:
Information Regulator (South Africa)
JD House, 27 Stiemens Street, Braamfontein, Johannesburg, 2001
Telephone: 010 023 5200
Complaints: complaints.IR@inforegulator.org.za
General enquiries: enquiries@inforegulator.org.za
Website: inforegulator.org.za
Cameras footage — for business clients
If I do electrical work at a business where cameras are already recording, the footage of people is personal information and you are responsible for it, not me. I don't monitor, host, download or watch anybody's footage.
Because it comes up on nearly every commercial job, here is the short version of what the law expects of you: record for one clear purpose and stick to it; put a sign at every entrance saying who is recording and why, with a contact; decide how long you keep footage — thirty days is the usual choice — and let the system overwrite after that; change the default password on the recorder and keep it off the open internet; point cameras at your own property, not into the neighbour's yard or across the street; and don't record conversations, because that is a different law again.
That is guidance from one tradesman, not legal advice, and nobody can make you "POPIA compliant" by installing equipment.
Changes to this page
If I change how I work, I'll change this page and put the new date on it. Last updated: [DATE].