Privacy Policy

Under the Protection of Personal Information Act (POPIA), Crystal Reef Pool Services is the responsible party for the information described here. Our Information Officer is Viljoen du Toit, reachable at sales@crystalreef.co.za or 081 577 5051.

We do not sell your information, we do not rent it, and we do not use it for advertising profiles. We do not knowingly collect information from children.

Payments are handled entirely by PayFast, a licensed South African payment provider. Your card number is entered on their systems, not ours. Crystal Reef never receives, stores or has any way to see your full card details. We keep only PayFast's reference for the transaction, so we can match a payment to your order and refund you.

• PayFast — to take payment and process refunds.
• Couriers — your name, address and phone, so they can deliver.
• Microsoft — our email is hosted on Microsoft 365.
• Microsoft Azure — our website and database run there.
• SARS or a court — where the law requires us to hand something over.

Some of these providers process data outside South Africa. We only use providers who are bound by comparable data-protection obligations, as POPIA section 72 requires.

Order, invoice and payment records are kept for 5 years, because tax law requires it. Your account details are kept while your account is open. Enquiries that never became orders are deleted after 12 months. After that we delete or de-identify the information.

You may, at any time and free of charge, ask us to:

• tell you what personal information we hold about you;
• correct anything that is wrong;
• delete anything we no longer have a lawful reason to keep;
• stop sending you marketing — every marketing email has an unsubscribe link;
• object to a particular use of your information.

Email sales@crystalreef.co.za and we will respond within 30 days. If you are not satisfied, you may complain to the Information Regulator (South Africa) at complaints.IR@justice.gov.za.

The site runs over HTTPS, passwords are stored hashed and never in plain text, and staff screens require a login. No system is perfectly secure — if your personal information is ever accessed without authorisation, we will notify you and the Information Regulator as POPIA section 22 requires.

We use only what the site needs to work: a session cookie to keep you signed in, and local storage to remember your cart and wishlist between visits. We do not use advertising or cross-site tracking cookies. Clearing your browser storage removes all of it.

This website is operated by Crystal Reef Pool and Marine Services (Pty) Ltd, trading as Crystal Reef Pool Services.

• Registration number: 2025/912121/07
• Address for service of legal documents: Block 5, Central Office Park, 257 Jean Avenue, Die Hoewes, Centurion, Gauteng, 0157
• Location: Centurion, Gauteng, South Africa
• Telephone: 081 577 5051
• Email: sales@crystalreef.co.za
• Website: www.crystalreef.co.za
• Not a VAT vendor. No VAT is charged and no VAT is shown on any price, invoice or receipt.