Privacy Policy — Source Leak Detection

1. Who we are

Source Leak Detection is operated by Source Plumbing (Pty) Ltd, registration number 2015/030723/07, of 8 Rockwood Crescent, Woodlands, Pretoria East, 0181. Phone 072 899 3159. Email info@sourceleakdetection.co.za.

2. Information Officer

In line with section 55 of the Protection of Personal Information Act (POPIA), our Information Officer is Damon Pheiffer (contactable at info@sourceleakdetection.co.za). Registration of the Information Officer with the Information Regulator is required — this is an active administrative task for our team.

3. What information we collect

• Contact details — name, phone number, email address.
• Property information — address, suburb, access notes, whether animals are present.
• Service information — problem descriptions, on-site findings, photographs of the property and equipment.
• Billing information — billing address, VAT number and company registration where applicable.
• Technical information — IP address, browser, device, referrer, pages viewed (via Google Analytics, and only with your consent).
• Marketing preferences — whether you have consented to receive marketing communications from us.

4. Lawful basis for processing (POPIA section 11)

• Service delivery, quoting and invoicing — necessary for us to perform the contract with you.
• Reports and record-keeping — compliance with legal obligations (tax, professional-body requirements) and our legitimate interest in defending claims.
• Marketing communications — your consent.
• Website analytics and advertising — your consent, managed via the site's cookie banner and Consent Mode v2.

5. How we use your information

We use your information to: respond to enquiries, prepare quotations, schedule technicians, deliver the Service, prepare and send reports, invoice you and reconcile payment, support insurance claims where you ask us to, improve our website (with analytics consent), and send marketing communications (only where you have consented).

6. Third-party processors

We share personal information with the following processors, each of whom is contractually bound to protect your data and to process it only on our instructions:

• Brevo — transactional email and CRM · Belgium (EU) · privacy policy
• Xero — invoicing and accounting · New Zealand · privacy policy
• Meta (WhatsApp) — inbound WhatsApp chat and lead follow-up · Ireland / United States · privacy policy
• Google (Analytics, Ads, Tag Manager) — website analytics, advertising conversions (with consent) · United States · privacy policy
• Vercel — website hosting · United States · privacy policy
• Trustindex — reviews import and display · Hungary (EU) · privacy policy
• OpenAI — voice-note transcription (Phase 6) · United States · privacy policy

7. Cross-border transfers (POPIA section 72)

Brevo, Xero, Meta, Google, Vercel, Trustindex and OpenAI process personal information outside South Africa. We rely on: (a) each processor's commitments to a level of protection substantially similar to POPIA; (b) contractual safeguards in the processor agreements; and (c) your consent where the transfer is required to deliver the service you have requested. Where we cannot rely on any of these, we will not transfer your information across borders.

8. Retention

• Job records and reports: 7 years — insurance and legal-defence relevance.
• Marketing consent: until you withdraw it.
• Analytics data (Google Analytics): 14 months — GA4 default.
• Enquiries that do not become bookings: 24 months.

9. Your rights as a data subject

Under POPIA you have the right to be notified, to access, to correct, to delete, to object to processing, to withdraw consent, and to complain to the regulator. See our POPIA Notice for the full list. To exercise any of these rights, submit a privacy request.

10. Cookies

See our Cookie Policy for full detail on the cookies we set and the choices you have.

11. Data security

We use TLS for data in transit, industry-standard encryption at rest, and role-based access controls. We follow the breach notification procedure in POPIA section 22: on becoming aware of a security compromise likely to affect your personal information, we will notify the Information Regulator and you within a reasonable time, as soon as reasonably possible.

12. Children

Our services are directed at property owners and businesses and are not intended for people under 18 years of age. We do not knowingly collect personal information from children.

13. Changes to this policy

We may update this policy from time to time. The "Last updated" date at the top reflects the most recent change. Material changes will be highlighted on the site and, where required, communicated to you directly.

14. Contact the Information Officer

Damon Pheiffer, info@sourceleakdetection.co.za · 072 899 3159.

15. Complain to the regulator

Information Regulator (South Africa) — inforegulator.org.za · complaints.IR@justice.gov.za.