1. Who we are
AAK Holdings is the responsible party for the personal information processed through this website. Our registered details: 19490 Boitekong Ext 8, Rustenburg, North West, 0308, South Africa; registration number 2018/463291/07; VAT 4890273651. Our Information Officer can be reached at hello@voltbox.co.za or +27 10 824 5510.
2. Information we collect
- Order and account information: name, company, email address, mobile number, delivery and billing address, VAT number and order history.
- Payment information:payment method, amount and payment reference. Card details are entered directly into our PCI-DSS compliant payment partner's environment and are never stored on our servers.
- Communications: messages sent through our contact form, WhatsApp, email or phone, including photographs of sites or containers.
- Marketing preferences: newsletter subscription status and source.
- Technical information: IP address, browser type, device type, pages viewed, referring website and cookie identifiers.
3. Why we process it
- To process, invoice, deliver and support your order.
- To arrange transport, cranes, fit-outs and installation with our service partners.
- To comply with tax, consumer protection and anti-money-laundering obligations.
- To answer enquiries and provide after-sales and warranty support.
- To improve the website, products and delivery experience.
- To send marketing communications where you have opted in, or where you are an existing customer and section 69 of POPIA allows it.
- To prevent fraud and abuse, and to protect our legal rights.
4. Lawful basis for processing
We process personal information on the basis of your consent, the performance of a contract with you, compliance with legal obligations, and our legitimate interests in running and improving our business. Where consent is the basis, you may withdraw it at any time without affecting the lawfulness of processing that already took place.
5. Cookies and analytics
We use strictly necessary cookies to run the cart, remember your order progress and keep your session secure. The cart cookie (aak_cart_token) is an essential, HTTP-only cookie that expires after 30 days. We may also use privacy-respecting analytics to understand which pages help customers, and advertising tools to measure campaigns. You can block or delete cookies in your browser, but the cart and checkout may stop working.
6. Who we share information with
- Payment processors and banks, to authorise and settle payments.
- Delivery, crane and installation partners, to fulfil your order.
- Our accounting, IT, hosting and email service providers, under processing agreements.
- Professional advisers, regulators or courts where we are legally required to disclose it.
- Credit and fraud-checking services where necessary to prevent abuse.
We do not sell your personal information. Service providers may only process it on our instructions and for the purposes set out above.
7. Cross-border transfers
Some of our service providers (for example cloud hosting and backup providers) may store data outside South Africa. Where this happens, we rely on section 72 of POPIA and ensure the transfer is subject to laws, binding rules or agreements that provide an adequate level of protection.
8. Security
We protect personal information using encryption in transit (HTTPS), access controls, secure hosting, limited staff permissions and PCI-DSS compliant payment infrastructure. We run backups and review our security practices regularly. If a security compromise affects your personal information, we will notify you and the Information Regulator as required by section 22 of POPIA.
9. Retention
We keep order, invoice and delivery records for at least five years to meet tax and company law requirements. Enquiry correspondence is kept for up to three years. Marketing contact details are kept until you unsubscribe. Cookies expire as described above or when you clear them.
10. Your rights
- Ask what personal information we hold about you and request a copy.
- Ask us to correct or update inaccurate information.
- Ask us to delete information we no longer have a lawful reason to keep.
- Object to processing based on legitimate interests or to direct marketing.
- Withdraw consent where processing is based on consent.
- Lodge a complaint with the Information Regulator (South Africa) at complaints.IR@justice.gov.za.
Requests should be sent to hello@voltbox.co.za. We aim to respond within 30 days. We may ask you to verify your identity before releasing information.
11. Direct marketing
You will only receive marketing from us if you have opted in or are an existing customer and the law permits it. Every marketing email includes an unsubscribe link, and you can opt out by emailing us at any time.
12. Children
Our products are sold to adults. We do not knowingly collect personal information from children under 18. If you believe a child has provided us with information, contact us and we will delete it.
13. Changes to this policy
We may update this policy to reflect legislative or operational changes. The latest version is always published on this page with an updated date. Material changes affecting how we use your information will be communicated to affected customers.
14. Contact
AAK Holdings, 19490 Boitekong Ext 8, Rustenburg, North West, 0308, South Africa. Email hello@voltbox.co.za · Phone +27 10 824 5510.