CRT Agency respects your privacy and is committed to processing personal information responsibly and in accordance with applicable South African law, including the Protection of Personal Information Act, 4 of 2013 ("POPIA").
This Privacy Policy explains what personal information we may collect, why we collect it, how we use it and the choices available to you.
1. Who We Are
CRT Agency is a South African commercial development, procurement and supply business operating under South Easter Group.
For purposes of POPIA, the relevant legal entity operating CRT Agency will generally act as the responsible party for personal information processed through this website and in connection with CRT's services.
2. Information We May Collect
Depending on how you interact with CRT, we may collect information including:

• Name and surname

• Company or organisation name

• Job title or role

• Email address

• Telephone or mobile number

• Business address

• Delivery information

• Product requirements

• Quantities and specifications

• Bills of Quantities

• Drawings or project documentation

• Messages submitted through website forms

• Supplier or manufacturer information

• Records of correspondence

• Quotation and transaction information

• Technical website information such as browser type, device information, IP address and general usage information

We aim to collect only information reasonably required for the relevant business purpose.
3. How We Collect Information
Personal information may be collected when you:

• Complete a website contact or quotation form

• Send CRT an email

• Contact us by telephone or messaging platform

• Submit a BOQ, specification or project requirement

• Request a quotation

• Become a client, supplier or commercial partner

• Subscribe to communications where offered

• Browse or interact with our website

Information may also be received from authorised representatives of your organisation, suppliers, commercial partners or publicly available business sources where lawful and relevant.
4. Why We Process Personal Information
CRT may process personal information to:

• Respond to enquiries

• Evaluate procurement requirements

• Prepare quotations

• Communicate regarding projects or orders

• Source appropriate products and suppliers

• Coordinate deliveries

• Maintain customer and supplier records

• Verify commercial or business information

• Manage accounts, invoicing and payments

• Maintain business relationships

• Improve our website and services

• Protect CRT against fraud or misuse

• Comply with tax, accounting, regulatory and legal obligations

• Send relevant business communications where permitted by law

We will not intentionally use personal information for purposes incompatible with those for which it was collected unless permitted by law or appropriate consent has been obtained.
5. Information Submitted in RFQs and BOQs
Clients may submit Bills of Quantities, technical specifications, drawings, product lists and other project documentation to CRT.
Such documentation may contain personal, commercial or confidential information.
CRT may share relevant portions of this information with prospective manufacturers, distributors, suppliers, contractors or logistics providers where reasonably necessary to obtain pricing, confirm specifications, evaluate availability or fulfil an approved requirement.
Where possible, we limit information shared with third parties to what is reasonably necessary for that purpose.
Clients should avoid submitting unrelated sensitive personal information in procurement documentation.
6. Sharing of Information
CRT does not sell personal information.
We may share relevant information with trusted third parties where reasonably necessary, including:

• South African manufacturers and suppliers

• International manufacturers or suppliers

• Procurement and sourcing partners

• Couriers and logistics providers

• Contractors

• Professional advisers

• Accounting or administrative service providers

• Website, hosting and technology service providers

• South Easter Group companies where appropriate

Third parties may only receive information necessary for the relevant service or legitimate business purpose.
Information may also be disclosed where required by law, regulation, court order or lawful request from an authority.
7. International Transfers
Certain suppliers, service providers or commercial partners used by CRT may operate outside South Africa.
Where personal information needs to be transferred internationally, CRT will take reasonable steps to ensure that the transfer is lawful and appropriately protected in accordance with POPIA.
8. Website Platform and Third-Party Technology
The CRT Agency website is built and hosted using Wix Studio and may use Wix or other third-party technologies for website hosting, forms, analytics, security and functionality.
These providers may process technical or personal information in accordance with their own privacy practices and contractual arrangements with CRT.
9. Cookies and Analytics
The website may use cookies and similar technologies to:

• Enable essential website functionality

• Improve security

• Understand website performance

• Measure visitor activity

• Improve user experience

Where legally required, visitors may be offered controls relating to non-essential cookies.
Browser settings may also allow users to block or delete certain cookies, although doing so may affect website functionality.
10. Marketing Communications
CRT may communicate with existing or prospective business contacts regarding products, services or commercial opportunities where permitted by law.
Where consent is legally required, marketing communications will only be sent after appropriate consent has been obtained.
Recipients may request that marketing communications stop at any time.
11. Information Security
CRT takes reasonable technical and organisational measures to protect personal information against loss, unauthorised access, alteration, misuse or disclosure.
However, no internet-based system or electronic communication method can be guaranteed to be completely secure.
12. Retention
Personal information will be retained only for as long as reasonably necessary for:

• The purpose for which it was collected

• Ongoing customer or supplier relationships

• Contractual obligations

• Accounting and tax requirements

• Legal or regulatory obligations

• Legitimate record-keeping or dispute purposes

Information that is no longer required will be deleted, destroyed or de-identified where reasonably practicable and legally appropriate.
13. Your Rights
Subject to POPIA and other applicable law, you may have the right to:

• Request confirmation of whether CRT holds personal information about you

• Request access to your personal information

• Request correction or updating of inaccurate information

• Request deletion or destruction where legally appropriate

• Object to certain processing

• Withdraw consent where processing is based on consent

• Object to or opt out of certain direct marketing

• Lodge a complaint regarding the processing of your personal information

Requests may be subject to reasonable identity verification and applicable legal limitations.
14. Information Regulator
If you believe your personal information has been processed unlawfully, you may contact CRT so that the matter can first be investigated.
You may also have the right to lodge a complaint with the Information Regulator of South Africa.
Current contact information and complaint facilities are available through the Information Regulator's official website and eServices platform.
15. Information Officer
POPIA-related enquiries and requests may be directed to CRT through the contact details published on this website.
CRT may publish the contact details of its registered Information Officer or authorised representative separately.
16. Third-Party Websites
The CRT website may link to external websites.
CRT is not responsible for the privacy practices, security or content of third-party websites. Visitors should review the privacy policies of those websites before submitting personal information.
17. Changes to This Policy
CRT may update this Privacy Policy to reflect changes to our operations, website, service providers or legal obligations.
The current version will be published on this website with the applicable revision date.