Privacy Policy

Last updated: 25 August 2026

AhaPower respects your privacy and processes personal information in accordance with the Protection of Personal Information Act 4 of 2013 (“POPIA”) and other applicable South African laws.

This Privacy Policy explains how we collect, use, disclose, retain and protect personal information when you visit ahapower.co.za, contact us, request a quotation, place an order, make a payment or otherwise interact with AhaPower.

1. Responsible party

The responsible party for the processing described in this policy is:

2. Personal information we collect

Depending on how you interact with us, we may collect:

• Your name, business name, identity or company information where reasonably required;
• Email address, telephone number, physical address, delivery address and billing address;
• Order, quotation, invoice, delivery, return and warranty information;
• Product details, serial numbers, installation photographs, system specifications and test results;
• Payment status, transaction references, EFT proof of payment and limited payment-related information;
• Correspondence sent by email, telephone, WhatsApp, website forms or social media;
• Marketing preferences and consent records;
• Technical information such as IP address, browser type, device information, pages visited and cookie identifiers; and
• Information needed to detect fraud, protect our systems, comply with law or resolve disputes.

Please provide only personal information that is accurate and relevant. If you provide another person’s information, you confirm that you are authorised to do so.

3. How we collect information

We collect personal information:

• Directly from you when you browse, register, contact us, request a quotation, order, pay or submit a claim;
• From PayFast, banks and payment providers when they confirm or administer a transaction;
• From The Courier Guy or another logistics provider when arranging and tracking delivery;
• From installers, manufacturers, suppliers or technicians involved in a warranty or support matter;
• Automatically through cookies, server logs and similar website technologies; and
• From lawful public or third-party sources where necessary for fraud prevention, verification or legal compliance.

4. Why we process personal information

We process personal information only where there is a lawful justification, including to:

• Provide products, quotations, orders, payments, deliveries, returns, warranties and customer support;
• Take steps at your request before entering into a contract and perform contracts with you;
• Verify payments and prevent fraud, theft, abuse or security incidents;
• Maintain financial, tax, transaction, warranty and business records;
• Comply with legal, regulatory, accounting and law-enforcement obligations;
• Operate, secure, troubleshoot and improve our website, services and customer experience;
• Manage disputes, exercise legal rights and defend legal claims;
• Send service messages about an enquiry, quotation, order, payment or delivery; and
• Send direct marketing where you have consented or where another lawful basis permits it, subject to your right to opt out.

5. PayFast and card payments

PayFast is used as AhaPower’s online payment gateway. When you select a PayFast-supported payment method, you may be redirected to or interact with PayFast’s secure payment environment.

PayFast processes payment and transaction information under its own legal obligations, terms and privacy policy. AhaPower generally receives transaction identifiers, payment status and information necessary to match the payment to your order. AhaPower does not intend to collect or store your complete card number, card verification code or online-banking credentials through its ordinary checkout process.

PayFast may process or transfer information through its group, financial institutions, fraud-prevention services, contracted providers and regulatory bodies. Please review PayFast’s Secure Payment for details.

6. EFT payments

If you pay by electronic funds transfer (“EFT”), we may process your name, bank-generated payment reference, payment amount, payment date, proof of payment and limited account information displayed on our bank statement.

Proof of payment helps us investigate or match a payment but does not by itself confirm that cleared funds have been received. EFT payments may take up to three additional business days to reflect in AhaPower’s bank account. Orders paid by EFT will ordinarily be processed only after the funds have cleared and been verified.

7. When we share personal information

We may share relevant personal information with:

• PayFast, banks, payment networks and fraud-prevention providers;
• The Courier Guy and other delivery, collection or logistics providers;
• Manufacturers, distributors, suppliers, installers and technicians assisting with fulfilment, support or warranty claims;
• Website hosting, email, communications, analytics, backup, security and IT providers;
• Accountants, auditors, insurers, legal advisers and other professional advisers;
• Regulators, courts, law-enforcement agencies and public authorities where required or permitted by law; and
• A purchaser, successor or adviser involved in a legitimate business restructuring or sale, subject to appropriate confidentiality safeguards.

We require service providers processing information on our behalf to protect it and use it only for the authorised purpose. We do not sell personal information.

8. Cookies and analytics

Our website may use essential cookies required for security, shopping-cart operation, checkout and site functionality. With appropriate notice or consent where required, we may also use preference, performance or analytics cookies to understand website use and improve the service.

You can control cookies through your browser and any cookie settings made available on the website. Blocking essential cookies may prevent parts of the website or checkout from functioning correctly.

9. International processing

Some technology, payment, hosting or support providers may process information outside South Africa. Where personal information is transferred internationally, we will take reasonable steps to ensure that the transfer is permitted by POPIA and that appropriate protection or contractual safeguards apply.

10. Information security

We use reasonable technical and organisational safeguards designed to protect personal information against loss, damage, unauthorised destruction, access, use, alteration or disclosure. These may include access controls, secure payment services, backups, confidentiality measures, system updates and appropriate provider agreements.

No internet transmission or storage system is completely secure. Customers must protect their own devices, email accounts, passwords and payment credentials and should report suspected fraud or security incidents promptly.

11. Retention

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected, or as required for legal, tax, accounting, warranty, fraud-prevention, dispute-resolution or contractual purposes.

Retention periods vary by record type. When information is no longer required, we will delete, destroy or de-identify it in a reasonably secure manner, subject to lawful archival or backup cycles.

12. Direct marketing

Where permitted by law, AhaPower may send information about relevant products, services or promotions. You may opt out at any time by using the unsubscribe method in the message or contacting us. Opting out of marketing will not stop necessary communications about an enquiry, order, payment, delivery, return or warranty claim.

13. Your rights

Subject to POPIA and other applicable law, you may have the right to:

• Ask whether we hold personal information about you;
• Request access to your personal information;
• Request correction, updating or deletion of inaccurate, irrelevant, excessive, outdated or unlawfully obtained information;
• Object to certain processing;
• Withdraw consent where processing depends on consent;
• Request information about third parties that have received your information where applicable; and
• Complain to AhaPower or the Information Regulator.

We may need to verify your identity before acting on a request. Some information cannot be deleted immediately where retention is required or permitted by law.

14. Children’s information

Our website and online store are not intended for independent use by children who lack legal capacity to enter into a binding transaction. We do not knowingly process a child’s personal information without appropriate consent or another lawful justification.

15. Personal-information incidents

If we have reasonable grounds to believe that personal information has been accessed or acquired by an unauthorised person, we will investigate, take reasonable containment measures and notify affected persons and the Information Regulator where POPIA requires it.

16. Privacy requests and complaints

Direct privacy requests or complaints to AhaPower’s Information Officer using the privacy contact details in section 1.

If we cannot resolve your concern, you may contact the Information Regulator (South Africa):

17. Changes to this policy

We may update this Privacy Policy when our processing activities, service providers, website functionality or legal obligations change. The latest version and effective date will be published on this page.