Last updated: 18 December 2025
NTLO Signs (“NTLO Signs”, “we”, “us”, “our”) respects your right to privacy and is committed to protecting the personal information of every person and business that interacts with us, in line with the Protection of Personal Information Act 4 of 2013 (“POPIA”).
This Privacy Policy explains how we collect, use, share, store and protect your personal information when you visit our website, contact us, or use our products and services.
1. Who we are and how to contact us
Responsible Party
NTLO Signs
11B Schmidtsdrift Road, Rhodesdene, Kimberley, 8301
Phone: +27 53 861 4609
Email: info@ccautomation.co.za
For POPIA purposes, NTLO Signs is the “responsible party” that determines why and how your personal information is processed. Where we use third-party service providers (for example hosting, email or IT support), they act as “operators” on our behalf and only process information according to our instructions.
You can contact us using the details above for any questions about this Privacy Policy or how we handle your personal information.
2. Scope of this Privacy Policy
This Privacy Policy applies when:
- you visit or use our website (including contact or quotation forms);
- you communicate with us by email, phone, messaging apps or social media;
- you are our customer, supplier, service provider, or prospective customer; or
- you otherwise provide personal information to us in the course of our signage and branding business.
It applies to both natural persons (individuals) and juristic persons (such as companies or close corporations), as protected by POPIA.
This Policy does not apply to third-party websites or platforms that you access via links from our site.
3. What personal information we collect
“Personal information” is any information that can identify you or your organisation, alone or together with other data.
Depending on how you interact with us, we may process the following types of information:
3.1 Information you provide directly
- Contact details: name, surname, business name, position, email address, phone number, physical address.
- Project and order information: details of signage or printing jobs, artwork or logos you supply, branding specifications, installation locations and instructions.
- Account and billing information: VAT number, purchase order numbers, quotes and invoices, payment confirmations.
- Marketing preferences: your choices about receiving newsletters, promotions or updates from us.
- Job applications: CVs, qualifications, work history and references, if you apply for a position.
3.2 Information we collect automatically
When you visit our website, we may automatically collect:
- IP address and general location (e.g. city or region);
- browser type, device type and operating system;
- pages visited, time spent on pages and referring URLs.
This information is typically collected using cookies and similar technologies (see section 7).
3.3 Information from third parties
Where lawful and appropriate, we may receive information about you from:
- business directories or publicly available sources;
- our suppliers or partners involved in delivering your projects (for example courier companies); or
- third-party platforms that you use to contact us (for example social media).
4. Lawful basis for processing your personal information
We only process personal information when there is a lawful justification under POPIA, including:
- Consent – where you have given us clear permission (e.g. to receive marketing communications).
- Contract – where processing is necessary to provide a quote, supply products or services, or perform a contract with you or your business.
- Legal obligation – where we must keep records or share information to comply with South African law (for example tax, accounting or consumer protection laws).
- Legitimate interests – where processing is necessary for our legitimate business interests (such as improving services, managing risk, preventing fraud and protecting our rights), and your privacy rights are not overridden.
5. How we use your personal information
We use personal information for the following purposes:
- To respond to enquiries and provide quotes for signage and printing services.
- To create, proof, produce and install signage, banners and related branding products.
- To manage customer relationships, including sending order updates, service notices and relevant operational communications.
- To manage suppliers and service providers, including payments and contract administration.
- To send marketing communications about our products and services, where permitted by law and your preferences (see section 8).
- To operate and improve our website, products and services, including analytics, troubleshooting and testing.
- To keep records, manage accounts, and comply with tax, legal and regulatory requirements.
- To protect our legitimate interests, such as enforcing our terms, managing disputes, and preventing fraud or abuse.
We will not use your personal information for purposes that are incompatible with the purposes originally disclosed, unless allowed by POPIA or required by law.
6. Special personal information and children’s information
POPIA places stricter rules on special personal information (such as health, race, religious beliefs, or biometric data) and on the information of children.
NTLO Signs does not intentionally collect or process special personal information or children’s information via this website. If such information is provided to us:
- we will only process it where one of the specific justifications in POPIA applies (for example, with your explicit consent or where required by law); and
- we will apply additional safeguards and limit access to those who need to know.
If you believe that we have inadvertently collected such information without proper justification, please contact us using the details in section 1.
7. Cookies and similar technologies
Our website may use cookies and similar technologies to:
- remember your preferences and improve website functionality;
- understand how visitors use our website (analytics); and
- assist with security and performance.
You can usually set your browser to refuse cookies or to alert you when cookies are used. If you choose to disable cookies, some parts of the website may not function optimally.
Where cookie identifiers can identify you or your device, they are treated as personal information under POPIA.
8. Direct marketing
We may use your contact details to send you information about:
- new or existing signage and branding services;
- promotions, offers or competitions; and
- news, tips or updates relevant to our business and customers.
We will only send electronic direct marketing (for example email or SMS) where permitted under POPIA and any related regulations, and will always give you a free, easy way to opt out.
You may withdraw your consent or object to direct marketing at any time by:
- clicking the “unsubscribe” link in marketing emails (if available); or
- contacting us at info@ccautomation.co.za with a request to stop marketing.
We will then update our records to reflect your preferences.
9. Sharing your personal information with third parties
We do not sell your personal information. We may share information, on a need-to-know basis, with:
- Service providers and operators who help us run our business and website, such as:
- web hosting and IT support providers;
- email and cloud service providers;
- couriers, installers and logistics partners;
- Professional advisers, such as auditors, accountants and legal advisers, where necessary;
- Business partners involved in fulfilling a project you have requested, where your information is required to complete the work;
- Regulators, law enforcement or public authorities, where we are required to do so by law or where disclosure is necessary to protect our rights, your safety or the safety of others.
Where we use operators, we require them (through contracts and reasonable due diligence) to process information only on our instructions and to implement appropriate security and confidentiality safeguards, as required by POPIA.
10. Cross-border transfers
Some of our service providers (for example hosting, email, analytics or cloud backup providers) may be located outside South Africa, which means that your personal information may be stored or processed in other countries.
When we transfer personal information across borders, we will:
- ensure that the recipient is subject to a law, binding corporate rules or binding agreement that provides an adequate level of protection; or
- obtain your consent where required; or
- rely on another justification allowed under POPIA (for example where the transfer is necessary for a contract or in your interest).
11. How we protect your personal information
We take appropriate, reasonable technical and organisational measures to secure the integrity and confidentiality of personal information and to prevent:
- loss, damage or unauthorised destruction; and
- unlawful access to or processing of personal information.
Measures may include, where appropriate:
- restricted access to systems and files based on business need;
- strong passwords and access controls;
- regular backups and monitoring;
- secure disposal or deletion of records when no longer needed.
No system can be completely secure, but we aim to maintain security that is appropriate to the sensitivity and volume of information we process.
If we become aware of a security compromise that may affect your personal information, we will notify you and the Information Regulator as soon as reasonably possible, in line with section 22 of POPIA and any applicable guidelines.
12. How long we keep your information
We keep personal information only for as long as is necessary to fulfil the purposes outlined in this Policy, unless:
- a longer retention period is required or allowed by law (for example tax or accounting records); or
- you ask us to delete it sooner and we are legally permitted to do so.
When we no longer need personal information, we will take reasonable steps to delete or de-identify it securely.
13. Your rights under POPIA
Under POPIA, you (and in some cases your organisation) have the right to have your personal information processed in accordance with the conditions for lawful processing.
These rights include (subject to certain limitations and conditions):
- Right to be informed
To be notified when personal information about you is collected, and when your information has been accessed by an unauthorised person (for example after a security compromise). - Right of access
To ask whether we hold personal information about you and to request a copy of that information in a reasonable, understandable format. - Right to request correction, deletion or destruction
To ask us to correct any inaccurate, irrelevant, excessive, out-of-date or incomplete information we hold, or to delete or destroy information that we are no longer entitled to keep. - Right to object to processing
To object, on reasonable grounds, to our processing of your personal information, including for direct marketing. - Right to withdraw consent
Where we rely on your consent, you may withdraw that consent at any time. This will not affect processing that has already occurred. - Right not to be subject to certain automated decisions
To object to decisions that are based solely on automated processing of your personal information, where those decisions have legal or significant effects on you. - Right to lodge a complaint
To submit a complaint to the Information Regulator if you believe that we are interfering unlawfully with the protection of your personal information.
14. How to exercise your rights
To exercise any of your POPIA rights, please contact us at:
Email: info@ccautomation.co.za
Phone: +27 53 861 4609
Postal address: 11B Schmidtsdrift Road, Rhodesdene, Kimberley, 8301
We may need to verify your identity (or authority to act on behalf of a company or another person) before responding to your request. We will respond within a reasonable time and in accordance with POPIA and any applicable regulations.
15. Complaints to the Information Regulator
If you are not satisfied with how we handle your personal information, you may lodge a complaint with the Information Regulator (South Africa).
Information Regulator (South Africa)
Woodmead North Office Park
54 Maxwell Drive
Woodmead, Johannesburg, 2191
Phone: 010 023 5200
Toll Free: 0800 017 160
Email (general): enquiries@inforegulator.org.za
Email (POPIA complaints): POPIAComplaints@inforegulator.org.za
Complaints are generally submitted in writing using Form 5 or via the Regulator’s online portal, as described on its website.
We encourage you to contact us first so that we can try to resolve your concern directly.
16. Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our operations, technology, legal requirements or best practice. When we do, we will post the updated version on this website with a revised “Last updated” date.
Your continued use of our website or services after any changes takes effect will be treated as acceptance of the updated Policy.
