Effective Date: 01/04/2025
Last Updated: 01/09/2025

1. Introduction

Whisp Air (“we”, “us”, “our”) respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, store, disclose, and protect the personal information we process in accordance with the Protection of Personal Information Act 4 of 2013 (“POPIA”).

By using our services, website, or communicating with us, you agree to the collection and use of your personal information in the ways described in this Policy.

2. Responsible Party & Information Officer

Responsible Party:
Whisp Air (a family-owned and operated air conditioning company based in Cape Town, South Africa.

Contact for privacy
Email: info@whispair.co.za
Postal Address: 20 The Crescent, Pinelands, 7405
Phone: 064 524 3648

3. What Information We Collect
We collect only the personal information necessary for the purposes set out in this Policy. The information may include:

• Contact information — name, email address, postal address, phone number
• Online identifiers — IP address, device type, browser type, cookies (if applicable)
• Transaction information — details of services requested, invoices, payment details
• Other information you supply when you communicate with us, request quotes or service, feedback, or make enquiries

We may also collect sensitive or “special” personal information only if required and with your explicit consent (for example in terms of health, but only if relevant for a particular service).

4. How We Use Your Information

We use your personal information for purposes which are lawful, proportionate and necessary, including:
To respond to your enquiries, provide our services, quotations, installations, maintenance, repairs

• To manage payments, billing, and invoicing
• To improve our services, internal operations, customer service and support
• To communicate with you about our services, changes to policies, updates, offers (only if you agree / opt in)
• To comply with legal or regulatory obligations

We will not use your personal information for other unrelated or incompatible purposes without your consent.

5. Legal Basis / Lawful Grounds

Under POPIA, we rely on one or more of the following lawful grounds to process your personal information:

• Your consent
• Performance of a contract to which you are a party (e.g. providing the air conditioning service)
• To comply with a legal obligation
• To protect a legitimate interest of you or of Whisp-Air, provided this does not infringe your rights
  
  

6. Data Subject Rights

You have the following rights under POPIA in relation to your personal information:

• To be informed that we are collecting your personal information and how we use it
• To access the personal information we hold about you
• To correct or update information that is inaccurate or incomplete
• To request deletion or destruction of your personal information under certain circumstances
• To object to the processing of your personal information where applicable
• To withdraw consent (where consent was obtained) without affecting the lawfulness of prior processing
• To complain to the Information Regulator if you believe we have not handled your personal information in compliance with POPIA
  
  

7. Data Sharing, Third Parties & International Transfers

• Third-party service providers: we may share personal information with trusted third parties who assist us in service delivery, website hosting, payment processing, customer support, etc. These parties have obligations to safeguard your information.
• Legal requirement: we may disclose information where required by law, or where there is a legitimate basis (e.g. legal or regulatory processes).
• International transfers: if we transfer your personal information outside South Africa, we will ensure that those recipients have adequate protections in place or that you have given consent or that the transfer is otherwise lawfully authorised under POPIA.
  
  

8. Security Measures

We take reasonable technical and organisational steps to protect your personal information from loss, damage, unauthorised access, or disclosure, including:

• Access controls, authentication for our systems
• Secure storage (both electronic and physical)
• Encryption or pseudonymisation where appropriate
• Regular reviews of security practices
• Ensuring staff and any third parties we work with comply with confidentiality and data protection obligations
  
  

9. Retention

We will retain your personal information only for as long as is necessary for the purpose for which it was collected, or as required by applicable laws or for legitimate business purposes (such as warranty, service history, dispute resolution). Once it is no longer needed, we will destroy or anonymise it in a secure manner.

10. Use of Cookies and Similar Technologies

If our website uses cookies or similar technologies, we will:

• Inform you about the cookies used
• Obtain your consent, where required by law
• Provide you with options to accept or reject cookies (other than those strictly necessary for the operation of the website)
• Explain how to disable cookies via browser settings, and what impact it might have on your experience
  
  

11. Direct Marketing

If we wish to send you marketing communications (emails, newsletters, offers):

• We will do so only with your consent or another lawful basis under POPIA
• You have the right to opt out (“unsubscribe”) at any time
• Each communication will include instructions on how to opt out
  
  

12. Data Breach Notification

If we become aware of a data breach that compromises your personal information, and if we are required by POPIA:

• We will notify the Information Regulator as soon as reasonably possible, and
• Notify you (if identifiable) about the breach and possible consequences, and
• Take reasonable steps to mitigate the effects of the breach
  
  

13. Changes to This Policy

We may update this Privacy Policy from time to time. When changes are made, we will update the “Last Updated” date above. If changes are significant, we will notify you via our website or other appropriate means.

14. How to Contact Us

If you have questions, concerns, or want to exercise any of your rights under this policy, please contact:

Email: info@whispair.co.za
Postal Address: 20 The Crescent, Pinelands, 7405
Phone: 064 524 3648

15. Governing Law & Jurisdiction
This Policy is governed by the laws of South Africa, especially POPIA. Any disputes arising from or in connection with this policy will be subject to the jurisdiction of the South African courts.