Privacy policy

Privacy Policy

Last Updated: August 2026

At Crio Solar (Pty) Ltd, we respect your privacy and take the protection of your personal information seriously. This Privacy Policy explains how we collect, use, store, protect, and share information when you visit or use our website, place an order, create an account, contact us, request assistance, or otherwise interact with our business.

This Privacy Policy applies to information collected through our website and through other communications or services provided by Crio Solar.

We aim to comply with applicable South African privacy and electronic-commerce legislation, including:

  • The Protection of Personal Information Act 4 of 2013 (POPIA);

  • The Promotion of Access to Information Act 2 of 2000 (PAIA);

  • The Electronic Communications and Transactions Act 25 of 2002 (ECTA);

  • The Consumer Protection Act 68 of 2008, where applicable; and

  • Other applicable South African laws and regulations relating to privacy, consumer protection, and electronic transactions.

Nothing in this Privacy Policy is intended to limit or remove any right or obligation that cannot legally be limited or excluded.

1. About Crio Solar

Crio Solar operates an online solar products business serving customers in South Africa.

Business: Crio Solar (Pty) Ltd
Registration: 2021/978124/07
VAT: 4550314290
Website: criosolar.com
Email: info@criosolar.com
Telephone: 021 932 8444
Physical Address: 25 Stellenberg Road, Cape Town, Western Cape, 7500, South Africa
Support Hours: Monday–Friday, 08:00–17:00 SAST

For purposes of POPIA, Crio Solar acts as the responsible party for personal information where we determine why and how that information is processed.

Privacy-related questions, requests, or complaints can be sent to:

info@criosolar.com

2. Meaning of Personal Information

Personal information generally refers to information that identifies, or can reasonably be linked to, an identifiable living individual or, where applicable, an identifiable existing juristic person.

Depending on how you interact with Crio Solar, the information we may collect can include:

  • Full name;

  • Company or business name;

  • Email address;

  • Telephone or mobile number;

  • Billing address;

  • Delivery address;

  • Postal address;

  • Customer account information;

  • Order details;

  • Transaction information;

  • Products purchased or viewed;

  • Payment-related information;

  • Customer-service correspondence;

  • Return and refund information;

  • IP address;

  • Device information;

  • Browser information;

  • Website usage information;

  • Cookies and similar identifiers; and

  • Any other information you voluntarily provide.

We aim to collect only information that is reasonably necessary for the relevant business or service purpose.

3. How We Collect Information

3.1 Information You Provide

We may receive personal information directly from you when you:

  • Create or use a customer account;

  • Place an order;

  • Complete an online checkout;

  • Request information or a quotation;

  • Contact our support team;

  • Complete a contact form;

  • Subscribe to promotional communications;

  • Request a return or refund;

  • Participate in a promotion;

  • Submit a product review;

  • Contact us by email, telephone, SMS, or another electronic channel; or

  • Voluntarily provide information for another legitimate purpose.

3.2 Information Collected Automatically

When you browse our website, certain technical information may be collected automatically.

This can include:

  • IP address;

  • Browser and browser version;

  • Device type;

  • Operating system;

  • Website or page that referred you to us;

  • Pages and products viewed;

  • Date and time of visits;

  • Approximate location information derived from technical data;

  • Website interaction information;

  • Cookies and similar technologies; and

  • Technical, diagnostic, and security information.

This information helps us operate the website, maintain security, understand website usage, and improve our services.

4. Why We Use Personal Information

Crio Solar may use personal information for legitimate and lawful business purposes, including the following.

Processing Orders

We use information to:

  • Receive and process orders;

  • Verify transactions;

  • Prepare and fulfil purchases;

  • Arrange deliveries;

  • Provide tracking information;

  • Handle returns and refunds;

  • Send order-related communications; and

  • Provide customer assistance.

Managing Customer Accounts

Where customer accounts are available, information may be used to:

  • Create and maintain accounts;

  • Verify account access;

  • Maintain order histories; and

  • Provide account-related services.

Customer Support

Information may be used to:

  • Respond to enquiries;

  • Investigate complaints;

  • Resolve customer concerns;

  • Handle returns and refunds;

  • Address disputes; and

  • Keep appropriate records of communications.

Payments

Payments may be facilitated through authorised third-party payment service providers.

Crio Solar does not intend to retain complete card details or payment authentication credentials where those details are processed directly by an authorised payment provider.

Payment service providers may process transaction and personal information according to their own privacy policies and security procedures.

Website Administration

We may use information to:

  • Operate and maintain our website;

  • Improve website performance;

  • Identify technical problems;

  • Protect the website against fraud and misuse;

  • Maintain security; and

  • Analyse website activity.

Legal and Regulatory Requirements

Personal information may also be processed to:

  • Comply with applicable laws;

  • Respond to lawful requests from authorities;

  • Maintain required business records;

  • Establish, exercise, or defend legal rights;

  • Investigate suspected fraud; and

  • Prevent unlawful activity.

Marketing

Where permitted by applicable law, we may use personal information to communicate with customers about products, services, promotions, offers, or other marketing information.

Electronic marketing will be conducted in accordance with applicable POPIA requirements.

5. Lawful Processing

Crio Solar processes personal information in accordance with the applicable conditions and requirements of POPIA.

Depending on the circumstances, information may be processed because:

  • You have given consent;

  • It is necessary to perform a contract with you;

  • It is necessary to take steps at your request before entering into a contract;

  • We have a legal obligation to process the information;

  • Processing is necessary to protect a legitimate interest recognised by law;

  • Processing is necessary to protect another person's legitimate interest; or

  • Another lawful basis under South African legislation applies.

We will not use personal information for a purpose that is incompatible with the reason it was originally collected unless the processing is permitted by law.

6. Information Needed for Purchases

Certain information is necessary for us to accept, process, and deliver an order.

This may include:

  • Your name;

  • Email address;

  • Contact number;

  • Billing information;

  • Delivery address; and

  • Payment or transaction information.

If information required to complete a transaction is not provided, we may be unable to process or deliver the order.

7. Payment Information

Payments may be handled by independent third-party payment providers.

These providers may collect information necessary to authenticate and complete a transaction.

Crio Solar does not intentionally request or retain full payment-card credentials unless such processing is necessary, lawful, and appropriately protected.

Third-party payment providers may have their own privacy policies and terms governing the handling of payment information.

8. Information Shared for Delivery

To arrange delivery of your order, we may provide relevant information to courier or logistics companies.

This may include:

  • Recipient name;

  • Delivery address;

  • Telephone number;

  • Email address;

  • Order number or reference;

  • Parcel information; and

  • Tracking details.

Only information reasonably required to provide the delivery service will be shared for this purpose.

9. Service Providers

Crio Solar may rely on trusted third-party companies to support the operation of our business and website.

These may include providers involved in:

  • Website hosting;

  • E-commerce technology;

  • Payment processing;

  • Courier and logistics services;

  • Email delivery;

  • SMS communications;

  • Customer support;

  • Analytics;

  • Fraud detection;

  • Cybersecurity;

  • Advertising and marketing;

  • Cloud storage; and

  • Other business-support functions.

Where a service provider processes information on our behalf, we will take reasonable steps to ensure that appropriate confidentiality, security, and data-protection measures are in place.

Third parties may also be subject to their own privacy policies and legal obligations.

10. Website and E-Commerce Technology

Our online store may rely on third-party technology and services to provide website functionality, product management, customer accounts, order processing, and checkout services.

Depending on the service involved, personal information may be stored or processed by service providers located in South Africa or other countries.

Crio Solar will take reasonable steps to ensure that personal information is handled in accordance with applicable privacy laws.

11. Cookies

Our website may use cookies and similar technologies.

Cookies are small files or identifiers that can be stored on your device when you visit a website.

We may use these technologies to:

  • Keep essential website functions working;

  • Maintain shopping-cart information;

  • Remember selected preferences;

  • Support customer account authentication;

  • Understand how visitors use the website;

  • Monitor website performance;

  • Improve the customer experience;

  • Identify fraud or security threats; and

  • Support advertising and marketing where applicable.

Some cookies may be provided by third-party services.

You can manage or disable certain cookies through your browser settings. However, disabling some cookies may affect website features such as shopping-cart and checkout functionality.

Where applicable law requires consent for non-essential cookies or tracking technologies, we will seek the required consent.

12. Analytics and Advertising Technologies

Crio Solar may use analytics and advertising tools to understand website activity and measure the effectiveness of marketing campaigns.

Depending on the technology used, information collected may include:

  • IP address;

  • Device information;

  • Browser information;

  • Pages visited;

  • Products viewed;

  • Referral sources;

  • Purchase or conversion information; and

  • Website interaction data.

Where these services are provided by third parties, their own privacy policies may apply to the information they process.

We will take reasonable steps to ensure that analytics and marketing activities comply with applicable privacy and electronic-communication requirements.

13. Marketing Communications

Where permitted by law, Crio Solar may contact customers by email, SMS, telephone, or other electronic channels regarding products, services, promotions, or offers.

We will not send electronic direct marketing in circumstances where POPIA prohibits it or where required consent or other applicable requirements have not been satisfied.

Where consent is required, it will be obtained in an appropriate manner.

Where permitted by applicable law, we may contact existing customers about similar products or services, subject to applicable requirements and the customer's right to opt out.

Marketing communications will include an appropriate method for stopping future promotional messages.

Customers may also request removal from marketing communications by contacting:

info@criosolar.com

Choosing not to receive marketing messages will not prevent us from sending important service communications, including order confirmations, delivery updates, payment information, security notices, or other communications necessary to administer an order or customer account.

14. Electronic Communications

When you communicate with Crio Solar through email, website forms, SMS, telephone, or other electronic channels, we may retain relevant records where reasonably necessary for customer service, transaction management, security, legal compliance, or resolving disputes.

Electronic communications may contain personal information and will be handled in accordance with this Privacy Policy and applicable law.

Electronic transactions conducted through our website are also subject to our Terms & Conditions and other applicable website policies.

15. Protecting Personal Information

Crio Solar takes reasonable technical and organisational measures to safeguard personal information against:

  • Loss;

  • Theft;

  • Unauthorised access;

  • Unauthorised disclosure;

  • Unauthorised modification;

  • Unauthorised destruction;

  • Accidental loss; and

  • Other unlawful or unauthorised processing.

Depending on the circumstances, safeguards may include access restrictions, authentication controls, secure communications, monitoring, service-provider controls, and other appropriate security measures.

Although we take reasonable precautions, no website, electronic communication, or data-storage system can be guaranteed to be completely secure.

16. Data Security Incidents

If Crio Solar becomes aware of a security incident involving personal information, we will take reasonable steps to investigate, contain, and address the incident.

Where notification is required under POPIA, we will notify affected data subjects and/or the Information Regulator in accordance with applicable law.

Where appropriate, notifications may explain the nature of the incident, the information potentially affected, and steps that individuals can take to protect themselves.

17. Retention of Information

We retain personal information for as long as reasonably necessary for the purpose for which it was collected, or for longer where retention is required or permitted by law.

The appropriate retention period may depend on:

  • The type of information;

  • The purpose for which it was collected;

  • Whether an ongoing customer relationship exists;

  • Accounting and legal obligations;

  • Tax requirements;

  • Transaction records;

  • Dispute resolution;

  • Fraud prevention; and

  • Other legitimate business requirements.

When information is no longer required, we will take reasonable steps to delete, destroy, anonymise, or otherwise securely dispose of it where appropriate.

18. Information Processed Outside South Africa

Certain technology providers or service providers used by Crio Solar may process or store information outside South Africa.

Where personal information is transferred outside South Africa, we will take reasonable steps to ensure that the transfer complies with applicable POPIA requirements.

This may involve appropriate contractual safeguards, adequate protection in the destination country, consent, or another lawful basis recognised by applicable law.

19. Special Personal Information

Crio Solar does not ordinarily need special personal information such as health information, biometric information, religious beliefs, political opinions, or similar sensitive information to provide our standard products and services.

Customers should avoid providing such information unless it is genuinely necessary for the matter they are contacting us about.

Where special personal information needs to be processed, it will only be handled where permitted by applicable law and where an appropriate lawful basis exists.

20. Children's Information

Our website is intended for general customers and is not specifically designed for children.

We do not knowingly collect children's personal information in circumstances where doing so would be prohibited by applicable law.

If you believe that a child has provided personal information to Crio Solar without the required consent or in circumstances where such collection is unlawful, please contact info@criosolar.com.

21. Your Privacy Rights

Subject to applicable law, you may have the right to:

  • Ask whether we hold personal information about you;

  • Request access to personal information we hold;

  • Ask us to correct inaccurate or incomplete information;

  • Request deletion where legally permitted;

  • Object to certain types of processing;

  • Object to direct marketing;

  • Withdraw consent where processing is based on consent;

  • Request information about the way your personal information is processed;

  • Lodge a privacy-related complaint; and

  • Exercise other rights available under POPIA or applicable South African law.

We may need to verify your identity before processing certain requests.

Some rights are subject to legal exceptions and limitations.

22. Correcting or Deleting Your Information

If information held by Crio Solar is inaccurate, incomplete, misleading, or outdated, you may request that it be corrected or updated.

Where legally permitted, you may also request the deletion or destruction of personal information.

Requests should be sent to:

info@criosolar.com

Please provide enough information for us to identify the relevant records and verify your identity where required.

23. Withdrawing Consent

If we process your personal information based on your consent, you may withdraw that consent, subject to applicable legal or contractual requirements.

Withdrawing consent will not make processing that was already carried out lawfully before the withdrawal unlawful.

If certain information is necessary to provide a service or complete an order, withdrawing consent may prevent us from continuing to provide that service.

24. Privacy Complaints

If you have concerns about the way Crio Solar handles your personal information, we encourage you to contact us first so that we can investigate the concern and try to resolve it.

Privacy Contact:
Email: info@criosolar.com
Telephone: 021 932 8444

Where applicable, you may also lodge a complaint with the Information Regulator of South Africa.

25. PAIA and Access to Information

Crio Solar recognises the requirements of the Promotion of Access to Information Act 2 of 2000 (PAIA).

Requests for access to records or personal information must be made in accordance with the applicable PAIA and POPIA procedures.

Access may be subject to applicable legal requirements, exceptions, identity verification, and prescribed fees where applicable.

Where required, Crio Solar may make a separate PAIA Manual available.

26. Links to Other Websites

Our website may contain links to external websites, payment services, social-media platforms, or other third-party services.

Crio Solar is not responsible for the privacy practices or content of those third-party websites.

We recommend reviewing the privacy policy of any external website before providing personal information.

27. Fraud Prevention and Security

We may process personal information where reasonably necessary to identify, prevent, investigate, or respond to:

  • Fraud;

  • Payment-related abuse;

  • Theft;

  • Cybersecurity threats;

  • Unauthorised transactions;

  • Misuse of our website;

  • Breaches of our Terms & Conditions; and

  • Other unlawful activity.

Information may also be disclosed where necessary to comply with a lawful request, court order, legal obligation, or regulatory requirement.

Crio Solar does not sell customers' personal information to third parties.

28. Disclosure to Authorities

Crio Solar may disclose personal information where required or permitted by applicable law.

This may include disclosure to:

  • Courts;

  • Law-enforcement agencies;

  • Government authorities;

  • Regulators;

  • Tax authorities;

  • Legal advisers; and

  • Other parties where disclosure is legally required or permitted.

We will only disclose information for legitimate and lawful purposes.

29. Keeping Information Accurate

We take reasonable steps to keep the personal information we use accurate, complete where necessary, and reasonably up to date.

Customers are encouraged to notify us if their personal information changes.

30. Changes to This Policy

Crio Solar may update this Privacy Policy when necessary to reflect changes in:

  • Our business;

  • Our website or services;

  • Technology;

  • Third-party service providers;

  • Applicable legislation;

  • Security practices; or

  • Data-processing activities.

The latest version will be published on criosolar.com together with the relevant "Last Updated" date.

Where a significant change is required to be communicated under applicable law, we will take reasonable steps to provide appropriate notice.

31. Contact Us

For privacy questions, requests, complaints, or concerns about the handling of personal information, please contact:

Crio Solar (Pty) Ltd
Registration: 2021/978124/07
VAT: 4550314290
Physical Address: 25 Stellenberg Road, Cape Town, Western Cape, 7500, South Africa
Telephone: 021 932 8444
Email: info@criosolar.com
Support Hours: Monday–Friday, 08:00–17:00 SAST

Privacy enquiries: info@criosolar.com

We aim to handle privacy enquiries appropriately and within the timeframes required by applicable law.

32. Governing Law

This Privacy Policy is governed by the laws of the Republic of South Africa, subject to any mandatory legal requirements or rights that may apply.

References in this policy to POPIA, PAIA, ECTA, the Consumer Protection Act, or other legislation refer to the applicable laws and regulations in force from time to time.