Privacy
Policy
1. Responsible party
The Barrel Collective (Pty) Ltd, trading as Chilli Surfboards South Africa, Jeffreys Bay, 6330, South Africa, is the "responsible party" for your personal information under the Protection of Personal Information Act, 4 of 2013 (POPIA). Information Officer: the director, reachable at info@chillisurfboards.co.za.
2. What we collect
- Order and enquiry details you type into our order form or send us directly: name, cell number, email address, town and province, your weight, height, ability level, current board and where you surf, the boards and options you want, and any notes.
- Messages you send us on WhatsApp, email or social media, including the order text generated by this site.
- Payment references (EFT references and invoice details). We do not store card numbers.
- Delivery details: the address you ask us to ship to.
- Website usage data collected by cookies and Google Analytics (see section 7).
Our order form does not store anything on our servers. It composes a message in your browser and opens WhatsApp so you can send it to us yourself; nothing is sent until you press send.
3. Why we use it
- To recommend a suitable board size and prepare your quote.
- To place your order with the factory and manufacture your board.
- To invoice you, arrange delivery and keep you updated on your order.
- To handle warranty claims and after-sales support.
- To comply with legal obligations (tax, consumer protection, record-keeping).
- With your consent only, to send you occasional news about new models or offers. You can opt out at any time by replying "stop" or emailing us.
We process your information on the basis that it is necessary to conclude and perform a contract with you, to comply with the law, or with your consent, and in our legitimate interests in running the business.
4. Who we share it with
- Chilli Surfboards (Australia) and its manufacturing partners, so that your board can be built to your specification. Only the board specification and an order reference are shared; your contact details are not shared unless necessary for the order.
- Couriers, to deliver your board (name, address, cell number).
- Service providers we use to run the business: WhatsApp (Meta), email and web hosting providers, accounting software and Google Analytics. Some of these providers store data outside South Africa. We only use providers that are subject to laws or binding agreements that protect your information to a standard comparable with POPIA.
- Authorities or courts where the law requires it.
We never sell your personal information.
5. How long we keep it
Order, invoice and warranty records are kept for five years after your order is complete, to meet tax and consumer-law obligations and to honour warranties. Enquiries that do not become orders are deleted within twelve months. Marketing consents are kept until you withdraw them.
6. Security
We keep your information on access-controlled devices and accounts, use encrypted messaging and email services, and share it only with the people who need it to fulfil your order. No system is perfectly secure; if we become aware of a breach that affects you we will notify you and the Information Regulator as POPIA requires.
7. Cookies and analytics
This site uses Google Analytics (GA4) to understand how visitors use it — which pages and models are popular, which devices are used and roughly where visitors are from. Google Analytics sets cookies and collects your IP address (anonymised), device and browser information and pages viewed. We do not use this data to identify you personally. You can block analytics cookies in your browser settings or with the Google Analytics opt-out add-on. The site itself sets no other cookies; fonts are loaded from Google Fonts, which may log your IP address when they are fetched.
8. Your rights
Under POPIA you may ask us to: confirm what personal information we hold about you; give you a copy; correct or delete it; stop processing it for direct marketing; or object to processing on reasonable grounds. Email info@chillisurfboards.co.za and we will respond within a reasonable time, normally 30 days. If you are unhappy with our response you may complain to the Information Regulator (South Africa): inforegulator.org.za, complaints.IR@justice.gov.za.
9. Children
Orders for grom boards must be placed by a parent or guardian. We do not knowingly collect personal information from children under 18 without a guardian's consent.
10. Changes
We may update this policy from time to time. The date at the top shows the current version. Significant changes will be flagged on this page.