Privacy Policy

This Privacy Policy explains how Goldtop Quartz (Pty) Ltd, trading as Stone Slabs (“Stone Slabs”, “we”, “us”, “our”), collects, uses, stores, shares and protects your personal information. It applies to visitors to our website at stoneslabs.co.za, people who request quotes or contact us, and our customers.

We process personal information in accordance with the Protection of Personal Information Act, 2013 (“POPIA”). We are committed to handling your information lawfully, transparently and securely.

By using our website or submitting your information to us, you acknowledge that you have read and understood this Policy.

Stone Slabs is the responsible party (data controller) for the personal information described in this Policy.

For any privacy-related query, request, or complaint, or to exercise any of your rights under POPIA, contact our Information Officer:

Email: [email protected]
Address: Springfield Park, Durban, KwaZulu-Natal, South Africa

We collect the following categories of personal information:

Information you give us directly

• Identifying information: first name, last name
• Contact details: email address, phone number
• Your role or category (for example: homeowner, architect, designer, builder, contractor, property developer)
• Project information: material interest, application type, project details and requirements
• Files you upload, such as drawings, plans, or images of your project

Information collected when you contact us

• The content of your enquiry and any correspondence with us by email, phone, WhatsApp or other channels

Information collected automatically

• Basic technical information necessary to operate and secure the website, such as your IP address and browser type, held in server logs

We do not currently use website analytics or advertising tracking tools.

Customer and accounting information

• If you become a customer, we process information necessary to prepare quotes, fulfil orders, invoice you and receive payment, including the information described above together with transaction and payment records.

We use your personal information for the following purposes:

• To respond to your enquiries and prepare quotes
• To provide fabrication and related services you request
• To communicate with you about your project, order or account
• To prepare and issue invoices and receipts and to process and record payments
• To maintain our business records and customer accounts
• To operate, secure and improve our website and systems
• To comply with our legal, accounting and tax obligations

We rely on the following lawful bases under POPIA, depending on the situation: your consent (which you give when you submit an enquiry or quote request), the performance of a contract with you, compliance with a legal obligation, and our legitimate business interests in operating and growing our business.

We use trusted third-party service providers (“operators” under POPIA) to run our business. These providers process personal information on our behalf, under our instructions, and are contractually required to protect it. They include:

Hosting and infrastructure

• Our website and management systems are hosted using Vercel and Supabase.

Email delivery

• We use Resend to send transactional emails (such as quote confirmations and notifications) and Zoho for business correspondence.

Accounting integration — Intuit QuickBooks

• We use Intuit QuickBooks for accounting. When you become a customer and we invoice you, we share and synchronise a limited set of your information — your name and contact details as a customer record, and the associated invoices, receipts and payment records — between our management system and QuickBooks.
• This is done solely to prepare and manage invoices, record payments and maintain accurate accounting records.
• We do not sell, rent, or share your QuickBooks-related data with any party for marketing or any purpose other than the accounting and business functions described here.
• Intuit processes this data in accordance with its own privacy policy, available at https://www.intuit.com/privacy/.

Communications

• We may communicate with you via WhatsApp. Messages you send us through WhatsApp are subject to WhatsApp's own privacy terms.

We do not otherwise sell your personal information to third parties.

Some of our service providers (including our hosting, email and accounting providers) may store or process personal information on servers located outside South Africa. Where personal information is transferred outside South Africa, we take reasonable steps to ensure it receives an adequate level of protection consistent with POPIA, including through the contractual terms these providers are bound by.

We keep personal information only for as long as necessary for the purposes described in this Policy, or as required by law.

• Enquiries and quote requests that do not result in a project are retained for a reasonable period to allow follow-up, and then deleted or anonymised.
• Customer, transaction and accounting records are retained for the periods required by South African tax and company law.

We take reasonable technical and organisational measures to safeguard your personal information against loss, unauthorised access, disclosure or misuse. These include access controls, secure hosting, encryption of data in transit, and limiting access to personal information to those who need it to do their work.

While we take security seriously, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

You have the right to:

• Request access to the personal information we hold about you
• Request that we correct or update inaccurate or incomplete information
• Request that we delete or destroy your information where we are no longer entitled to keep it
• Object to the processing of your information in certain circumstances
• Withdraw your consent, where our processing relies on consent
• Lodge a complaint with the Information Regulator

To exercise any of these rights, contact us at [email protected]. We may need to verify your identity before acting on your request.

You may also lodge a complaint with the Information Regulator of South Africa:

Information Regulator (South Africa)
Email: [email protected]
Website: https://inforegulator.org.za

Our services are directed at adults. We do not knowingly collect personal information from children without the consent of a parent or guardian. If you believe we have collected such information, please contact us and we will take appropriate steps to delete it.

We may update this Policy from time to time. The current version will always be available on our website, with the “Last updated” date reflecting the most recent revision. Material changes will be brought to your attention where appropriate.

For any questions about this Policy or how we handle your personal information:

Goldtop Quartz (Pty) Ltd t/a Stone Slabs
Email: [email protected]
Address: Springfield Park, Durban, KwaZulu-Natal, South Africa