Privacy Policy

Last updated: June 2026

1. Who We Are

Prebur Enterprises (Pty) Ltd, trading as Professional Air Filters, operates from 229 Dykor Street, Silverton, Pretoria, 0184, South Africa. Contact: [email protected] · +27 74 159 1634.

2. What Information We Collect

  • Contact form: Name, company, phone, email, message, and product interest — submitted voluntarily when you request a quote.
  • Online orders: Name, email, phone, company name, VAT number, PO number, and delivery address — submitted when you place an order through our online store.
  • Payment data: Payment card details are processed exclusively by Yoco, our PCI DSS-compliant payment processor. Prebur does not see, store, or have access to your card numbers. We receive only a payment reference and confirmation status.
  • Google Analytics 4 (GA4): Anonymous usage data — pages visited, time on site, referral source, device type. No personally identifiable information is collected by GA4 on this site.
  • Cart data: Products you add to your shopping cart are stored in your browser's local storage on your device only. This data is not transmitted to our servers unless you proceed to checkout.
  • Server logs: Standard web server logs (IP address, browser type, pages requested) retained for up to 90 days for security purposes.

3. Why We Collect It

  • To process and fulfil your online orders, including creating tax invoices and arranging delivery or collection.
  • To respond to your quote requests and product enquiries.
  • To send you order confirmations and tax invoices by email.
  • To understand how visitors use our website and improve content (GA4).
  • We do not sell, rent, or share your personal information with third parties for marketing purposes.

4. Third-Party Service Providers

We share your information only with the following service providers, solely for the purpose of fulfilling your order:

  • Yoco (South Africa) — payment processing. Yoco is PCI DSS Level 1 compliant. Yoco Privacy Policy
  • Xero (New Zealand) — invoicing and financial records. Your name, contact details, and purchase details are stored in Xero for tax invoice generation. Xero Privacy Policy
  • The Courier Guy (South Africa) — delivery services. Your delivery address and contact number are shared to arrange shipment.
  • Resend (United States) — transactional email delivery. Your email address is used to send order confirmations.
  • Cloudflare (United States) — website hosting and content delivery.
  • Google Analytics (United States) — anonymous website usage analytics.

5. Cross-Border Data Transfers

Some of our service providers operate outside South Africa (Xero in New Zealand, Resend and Cloudflare in the United States). These transfers are necessary to provide our services to you. All providers maintain appropriate data protection measures consistent with POPIA requirements and applicable international data protection standards.

6. Legal Basis (POPIA)

We process your personal information on the following legal grounds under the Protection of Personal Information Act, 2013 (POPIA):

  • Consent: You provide consent when submitting the contact form or placing an order (checkout consent checkbox).
  • Contract: Processing is necessary to fulfil your purchase order and deliver goods.
  • Legal obligation: We are required by SARS to retain financial records including invoices.
  • Legitimate interest: Anonymous website analytics to improve our service.

7. Data Retention

  • Order and invoice data: Retained for 5 years as required by the South African Revenue Service (SARS) for tax compliance.
  • Contact form submissions: Retained for up to 3 years for business correspondence records.
  • Server logs: Retained for up to 90 days.
  • You may request deletion of personal data not subject to legal retention requirements by emailing [email protected].

8. Your Rights

Under POPIA, you have the right to:

  • Access the personal information we hold about you.
  • Request correction of inaccurate information.
  • Request deletion of your personal information (subject to legal retention requirements).
  • Object to the processing of your personal information.
  • Withdraw consent at any time.

To exercise these rights, contact us at [email protected]. You may also lodge a complaint with the Information Regulator of South Africa at inforegulator.org.za.

9. Cookies & Local Storage

  • Google Analytics 4 cookies: Used to collect anonymous usage statistics. No advertising or third-party tracking cookies are used.
  • Google Ads cookies: Used for conversion measurement to understand which ads lead to orders.
  • Local storage (shopping cart): Your cart contents are saved in your browser's local storage so items persist between page visits. This data stays on your device and is cleared when you complete an order or clear your browser data.

You can manage your cookie preferences at any time using the cookie banner, or read our full Cookie Policy for details on each cookie we use.

10. Security

We take reasonable measures to protect your personal information. Our website is served over HTTPS with strict transport security. Payment processing is handled by Yoco on their PCI DSS-certified infrastructure — card details never touch our servers. Access to customer data in Xero is restricted to authorised personnel.

11. Changes to This Policy

We may update this policy periodically. The "last updated" date at the top of this page reflects the most recent revision.