Privacy Policy

PRIVACY POLICY

Crown Air (Pty) Ltd, Trading As Crown Technologies

Effective Date: May 2026

1. Introduction

Crown Air (Pty) Ltd, trading as Crown Technologies ("Crown Technologies", "we", "us", or "our"), is committed to protecting the privacy and personal information of all individuals who interact with our business, website, and services.

This Privacy Policy is issued in compliance with the Protection of Personal Information Act 4 of 2013 (POPIA), which came into full effect on 1 July 2021, and applies to all personal information collected, used, stored, and shared by Crown Technologies in the course of conducting its business.

By engaging with Crown Technologies, visiting our website at https://crowntechnologies.co.za, or submitting any enquiry or assessment request, you acknowledge that you have read and understood this Privacy Policy.

2. Who We Are

Responsible Party (as defined under POPIA):

Crown Air (Pty) Ltd, Trading As Crown Technologies Registration Number: [INSERT COMPANY REGISTRATION NUMBER] Physical Address: 3A Louis Botha Drive, Florida Park, Roodepoort, Gauteng, 1709 Telephone: 086 112 7696 Email: [email protected] Website: https://crowntechnologies.co.za

3. Definitions

In this Privacy Policy, the following terms carry the meanings set out below, consistent with POPIA:

"Personal Information" means any information relating to an identifiable, living, natural person or an identifiable, existing juristic person, including but not limited to names, contact details, identification numbers, financial information, and location data.

"Processing" means any operation or activity concerning personal information, whether automated or not, including collection, receipt, recording, organisation, storage, updating, distribution, or destruction.

"Data Subject" means the natural or juristic person to whom personal information relates.

"Responsible Party" means Crown Air (Pty) Ltd, trading as Crown Technologies, who determines the purpose of and means for processing personal information.

"Operator" means any third party who processes personal information on behalf of Crown Technologies.

"Information Officer" means the person responsible for overseeing compliance with POPIA within Crown Technologies.

4. Information We Collect

4.1 Information You Provide Directly

We collect personal information that you voluntarily provide when you complete an online assessment or enquiry form on our website, contact us by telephone or email, engage with our live chat assistant (Agent Alex), which may collect your name, email address, and phone number to facilitate your enquiry, request a quotation or site assessment through our online booking form, enter into a contract for the supply of our systems or services, or interact with our marketing communications.

This information may include: full name, company name, job title or role, email address, telephone number, physical or postal address of the property or business, electricity usage information and account details (for the purpose of system sizing and assessment), and billing and payment information where applicable.

4.2 Information Collected Automatically

When you visit our website, we may automatically collect certain technical information, including: IP address, browser type and version, pages visited and time spent on pages, referring website, cookie identifiers, and device information. This information is collected via cookies and similar tracking technologies. Please refer to Section 11 (Cookies) for further detail.

4.3 Information from Third Parties

We may receive personal information about you from third parties such as referral partners, Google Business Profile interactions, or social media platforms where you engage with our content. We will handle such information in accordance with this Privacy Policy.

5. Purpose for Processing Personal Information

Crown Technologies processes personal information only for lawful, specific, and explicitly defined purposes. We process your information to respond to enquiries and assess your suitability for our solar, evaporative cooling, water filtration, and storage solutions; to conduct site assessments and prepare accurate quotations and proposals; to conclude and administer contracts for installation and ongoing maintenance; to deliver installation, commissioning, and after-sales maintenance services; to manage warranty claims and service level agreements (SLAs); to process payments and maintain financial records; to monitor installed systems via our IoT monitoring platform, where applicable; to send you service updates, maintenance reminders, and relevant product or offer information (where you have consented or where we have a legitimate interest); to comply with legal and regulatory obligations, including SARS, the National Building Regulations, municipal SSEG requirements, and any other applicable South African legislation; to improve our website, services, and business operations; and to prevent fraud and manage business risk.

We will not process your personal information for any purpose other than those listed above without obtaining your prior consent, or unless required to do so by law.

6. Lawful Basis for Processing

Crown Technologies processes personal information on the following lawful grounds under POPIA: consent (where you have given specific, informed consent); contractual necessity (where processing is required to enter into or perform a contract with you); legal obligation (where processing is necessary to comply with a legal obligation); legitimate interest (where processing is necessary for the legitimate interests of Crown Technologies or a third party, provided those interests are not overridden by your rights); and vital interest (in exceptional cases where processing is necessary to protect a vital interest of the data subject or another person).

7. Sharing of Personal Information

Crown Technologies does not sell, rent, or trade your personal information to third parties for their marketing purposes. We may share your personal information in the following limited circumstances.

7.1 Service Providers (Operators)

We engage trusted third-party service providers who process personal information on our behalf and under our instruction. These include customer relationship management and marketing automation platforms (ConnectOS / LeadConnector), payment processing and debit order management providers (Stratcol), IoT monitoring platform providers (Crown Technologies proprietary platform), email and communication service providers, and website hosting and analytics providers. All operators are contractually required to process personal information only as instructed by Crown Technologies and to implement appropriate security measures.

7.2 Legal and Regulatory Authorities

We may disclose personal information to governmental or regulatory bodies, courts, or law enforcement agencies where required to do so by law, or to protect the rights, property, or safety of Crown Technologies, its employees, or the public.

7.3 Business Transfers

In the event of a merger, acquisition, or sale of all or part of Crown Technologies, personal information may be transferred as part of that transaction. We will notify affected data subjects in the event of such a transfer.

8. Cross-Border Transfers of Personal Information

Some of the third-party platforms we use may process or store personal information outside the Republic of South Africa. Where personal information is transferred to a third country, Crown Technologies will ensure that the recipient country provides an adequate level of protection as recognised by the Information Regulator; or appropriate safeguards are in place, such as data processing agreements equivalent to POPIA; or you have consented to the transfer.

9. Retention of Personal Information

Crown Technologies will retain your personal information only for as long as is necessary to fulfil the purposes set out in this Privacy Policy, or as required by applicable law. Customer and contract records are retained for a minimum of 5 years following the end of the contractual relationship. Financial records are retained for a minimum of 5 years as required by SARS. Marketing and enquiry records are retained until you withdraw your consent or request deletion, whichever is sooner. Technical website logs are typically retained for no longer than 12 months. When personal information is no longer required, it will be securely destroyed or de-identified.

10. Security of Personal Information

Crown Technologies implements appropriate technical and organisational security measures to protect your personal information against unauthorised access, disclosure, alteration, destruction, or loss. These measures include secure password-protected systems with restricted access, encrypted data transmission where applicable, regular security reviews of our systems and processes, and staff training on data protection obligations.

While we take all reasonable precautions, no method of electronic transmission or storage is completely secure. In the event of a security compromise involving your personal information, we will notify you and the Information Regulator as required under POPIA.

11. Cookies

Our website uses cookies and similar tracking technologies to improve your browsing experience and to gather analytical data about how visitors use our site.

Essential Cookies are required for the website to function correctly and cannot be disabled. Analytics Cookies are used to understand how visitors interact with our website (e.g. Google Tag Manager) and help us improve our content and user experience. Marketing Cookies are used to track the effectiveness of advertising campaigns and to personalise marketing content.

When you first visit our website, you will be presented with a cookie consent banner. You may accept all cookies, accept essential cookies only, or manage your preferences. You may also withdraw your consent at any time by adjusting your browser settings, although this may affect the functionality of the website.

12. Your Rights Under POPIA

As a data subject, you have the following rights under the Protection of Personal Information Act:

Right to be notified: You have the right to be informed that your personal information is being collected and the purpose for which it is being collected.

Right of access: You have the right to request access to the personal information we hold about you.

Right to correction: You have the right to request that inaccurate, incomplete, or outdated personal information be corrected.

Right to deletion: You have the right to request the destruction or deletion of personal information that is no longer necessary, or where consent has been withdrawn.

Right to object: You have the right to object to the processing of your personal information, particularly where processing is for direct marketing purposes.

Right to withdraw consent: Where processing is based on consent, you may withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

Right to lodge a complaint: You have the right to lodge a complaint with the Information Regulator of South Africa if you believe your rights under POPIA have been violated.

To exercise any of these rights, please contact our Information Officer using the details provided in Section 13.

13. Information Officer

Crown Technologies has designated an Information Officer who is responsible for ensuring compliance with POPIA and handling data protection queries and complaints.

Information Officer: [INSERT INFORMATION OFFICER NAME] Email: [email protected] Telephone: 086 112 7696 Postal Address: 3A Louis Botha Drive, Florida Park, Roodepoort, Gauteng, 1709

If you are unsatisfied with our handling of your complaint, you may contact the Information Regulator of South Africa: Telephone: 010 023 5207 Email: [email protected] Website: www.justice.gov.za/inforeg/

14. Direct Marketing

We may use your contact information to send you marketing communications about our products, services, and promotions where you have expressly consented, or where you are an existing customer and we are marketing similar or related products or services. You may opt out at any time by clicking the unsubscribe link in any email, or by contacting us at [email protected].

15. Children's Personal Information

Our services are not directed at persons under the age of 18 years. We do not knowingly collect personal information from minors. If we become aware that we have collected personal information from a minor without appropriate parental consent, we will take steps to delete that information promptly.

16. Links to Third-Party Websites

Our website may contain links to third-party websites. This Privacy Policy does not apply to those websites. We encourage you to review the privacy policies of any third-party websites you visit, as we have no control over their content or practices.

17. Changes to This Privacy Policy

Crown Technologies reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our business, legal obligations, or industry practices. When we make material changes, we will update the effective date at the top of this document and notify you by email or by a prominent notice on our website.

18. Governing Law

This Privacy Policy is governed by and construed in accordance with the laws of the Republic of South Africa, including the Protection of Personal Information Act 4 of 2013 (POPIA), the Electronic Communications and Transactions Act 25 of 2002 (ECTA), and the Consumer Protection Act 68 of 2008 (CPA) where applicable.

19. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy, please contact us:

Crown Air (Pty) Ltd, Trading As Crown Technologies 3A Louis Botha Drive, Florida Park, Roodepoort, Gauteng, 1709 Tel: 086 112 7696 Email: [email protected] Website: https://crowntechnologies.co.za

Last Updated: May 2026