Privacy Policy
Last updated: 23 October 2026
This policy explains how Rand Bolt Supplies CC, trading as Rand Bolt and Tool, collects, uses, shares and protects your personal information. It follows the Protection of Personal Information Act 4 of 2013 (POPIA).
1. Who we are
Rand Bolt Supplies CC, trading as Rand Bolt and Tool (“RBT”, “we”, “us”)
Close corporation registration number: 2001/068397/23
40 Beacon Road, Cnr Beacon & Ontdekkers Rd, Florida, Gauteng, South Africa
Tel: +27 (11) 672 6229 | Email: info@randboltandtool.co.za
Information Officer: Richard Wories – Richard@randboltandtool.co.za
Deputy Information Officer: JJ Botha – JJ@randboltandtool.co.za
Under POPIA, we are the “responsible party” for the personal information described here. POPIA also protects information about companies and other legal entities. This policy therefore applies to business customers as well as individuals.
2. What we collect
| When | What we collect |
|---|---|
| You create an account | Name, email address, password (stored encrypted) |
| You place an order | Name, company name, VAT number (if supplied), phone, email, billing and delivery address, order history |
| You pay | Payment is handled by PayFast. We see whether the payment succeeded and a transaction reference. We never see or store your card details. |
| You use our contact form | Name, email, phone, company, and your message |
| You enter a competition on our social media | Your name, social media profile name, and contact details if you win |
| You browse our website | IP address, browser and device type, pages visited, and cookie data (see section 8) |
You message or comment on our social media pages | Your name, profile name, and the content of your message |
We only collect what we need. Please don’t send us sensitive information (such as health, religious or biometric information) through the contact form.
3. Why we use it
- To process, deliver and support your orders, returns and refunds
- To manage your online account
- To reply to your enquiries
- To meet our legal obligations, such as tax and accounting records
- To detect and prevent fraud
- To run competitions and contact winners
- With your consent, to show you relevant RBT adverts on LinkedIn (see section 8)
We don’t send marketing emails, SMSes or WhatsApp broadcasts. If we start doing so, we’ll ask for your consent first.
4. Our legal basis
We process your information because we need it to fulfil our contract with you, because the law requires it, because it serves our legitimate interests (such as preventing fraud), or because you’ve given consent (for advertising cookies). You can withdraw consent at any time.
5. Who we share it with
We never sell or rent your personal information. We share it only with:
| Who | Why |
|---|---|
| PayFast | To process your payment securely |
| The Courier Guy | To deliver your order (name, phone, delivery address) |
| Odoo S.A. (Odoo.sh) | Hosts our website and business system |
| Advertising cookies, only if you accept them | |
Meta (Facebook/Instagram) | Hosts our social media pages and messages you send us there |
| The map on our contact page | |
| Our accountants and auditors | Financial record keeping |
| Authorities | When the law requires it, or to report suspected fraud |
These service providers may only use your information to provide their service to us, and they must keep it secure.
6. How long we keep it
| Information | How long |
|---|---|
| Orders, invoices and payment records | 5 years, as required by tax law |
| Customer account | Until you ask us to close it |
| Contact form enquiries | 12 months after our last contact |
| Competition entries | Until the prize is delivered, then 3 months |
| Cookie data | See section 8 |
After these periods, we delete the information or make it anonymous.
7. Information stored outside South Africa
Our website and business system run on Odoo.sh, which is hosted outside South Africa. LinkedIn also processes advertising data outside South Africa. We use these providers only because they are bound by data protection laws or agreements that give a level of protection similar to POPIA, as required by section 72 of the Act.
8. Cookies and advertising
Cookies are small files stored by your browser. We use two kinds:
- Essential cookies keep your cart, login and checkout working. The site can’t work without them.
- Advertising cookies come from the LinkedIn Insight Tag. They let us measure our adverts and show RBT ads to people who have visited our site. They only load if you click “Accept” on our cookie banner.
You can change your choice at any time by clearing your browser cookies for our site, which brings the banner back. LinkedIn also lets you control ad settings in your LinkedIn account.
9. How we protect it
- The whole site runs over an encrypted (HTTPS) connection.
- Card payments happen on PayFast’s secure platform, not on our site.
- Passwords are stored encrypted.
- Only staff who need your information can access it.
- Our hosting provider applies its own security controls and backups.
If we have reason to believe your information has been accessed without authorisation, we will notify you and the Information Regulator as POPIA requires.
10. Your rights
You have the right to:
- Ask whether we hold information about you, and get a copy of it
- Ask us to correct or update it
- Ask us to delete it, unless the law requires us to keep it
- Object to us processing it
- Withdraw consent you’ve given, such as for advertising cookies
- Complain to the Information Regulator
To make a request, email our Information Officer at Richard@randboltandtool.co.za. We may ask you to confirm your identity first. We’ll respond within 30 days.
11. Complaints
If you’re unhappy with how we handled your information, contact our Information Officer first. If we can’t resolve it, you can contact the Information Regulator:
- Website: inforegulator.org.za
- Email: enquiries@inforegulator.org.za
- Tel: 010 023 5200
12. Changes to this policy
We may update this policy from time to time. The latest version will always be on this page, with the date it was last updated.