Privacy Policy

The responsible party under POPIA is Pro Citroen Spares, the Citroen arm of the Sparesboyz Group, trading from 89 Chris Hani Road, Briardene, Durban North, KwaZulu-Natal 4051. Reach us on 031 943 9999 or at sales@sparesboyz.co.za.

We process your details on two bases. Answering a quote request or an order is processing that is necessary to do what you have asked us to do (section 11(1)(b) of POPIA) — no separate consent is needed for that, and we cannot quote without it. Anything beyond that, marketing in particular, runs on consent you have given us and can withdraw whenever you like.

Dealing with Pro Citroen Spares usually means handing over some or all of the following:

• Name and surname
• Email address
• Contact number
• A delivery address, so the courier can find you
• The make, model and year of your Citroen, so the quote is accurate
• A description of the part you are chasing
• Your town and province

Those details reach us in one of four ways:

• You fill in a quote request for a Citroen part
• You phone, email or message us through a form on the site
• You sign up for updates from us
• You browse the site and use what is on it

Everything we hold exists for one reason: answering your enquiry and getting the part to you. We do not sell, share, or disclose your personal information to third parties for marketing purposes.

Your information gets used to:

• Work out what you need and price it
• Come back to you about an enquiry or an order you have placed
• Book the courier and get the parcel to the right address
• Answer fitment and technical questions after the sale
• Keep you posted when something changes on an order
• Spot what is not working well on the site and fix it
• Meet obligations placed on us by South African law

We do not sell your details and we do not hand them to anyone for their own marketing. We do rely on a short list of service providers — POPIA calls them operators — who process data on our instructions and nobody else's:

• Hostinger — hosts this website and the database your enquiry is stored in
• Resend — delivers the notification and confirmation emails your enquiry generates
• Anthropic — powers the chat assistant, so anything you type into the chat window is processed there to produce a reply
• Elfsight — serves the Google reviews panel in our footer
• Courier companies — get the name, address and phone number needed to deliver a parcel

Beyond that, we will disclose personal information where South African law obliges us to — a court order or a legitimate request from a regulator, for instance.

Some of the operators above run their infrastructure outside South Africa, so your details may be processed abroad. Section 72 of POPIA permits that where the receiving party is bound by rules offering comparable protection; each of these providers publishes a data-processing agreement with standard contractual clauses, and we rely on those.

If you would rather nothing of yours left the country, do not use the form or the chat — phone us on 031 943 9999 or send a WhatsApp instead, and we will take the enquiry down by hand.

• Quote enquiries and chat transcripts — three years from your last contact with us, because parts enquiries often resurface
• Invoices and anything else with a tax consequence — five years, which is what SARS requires
• Website access logs — 90 days
• Marketing consent records — for as long as you are opted in, plus a year afterwards so we can show when you opted out

Once a period runs out, the records are deleted or stripped of anything that identifies you.

Being straight with you about what this site currently puts on your device:

• Functional storage — remembers the page you arrived on so that context travels with your enquiry, and keeps the chat window in step as you move around
• Advertising identifiers — two Facebook cookies, _fbc and _fbp, are written when you land here and last 90 days. If you arrived from a Facebook or Instagram advert they let us tell that the advert produced an enquiry. They are attached to a quote request when you send one
• Third-party — the Google reviews panel in the footer is loaded from Elfsight, which may set storage of its own under its own privacy terms

We do not currently run Google Analytics or any session-recording tool. Your browser settings control all of the above and you are free to block or clear any of it; nothing on this site stops working if you do. If you would like the advertising identifiers dropped from an enquiry you have already sent, ask our Information Officer and we will strip them.

We take reasonable steps to protect what you have given us:

• Data is stored and transmitted over secure connections
• Only authorised staff can open customer records
• Systems are patched and monitored on an ongoing basis
• Staff and partners are bound by confidentiality undertakings

Be aware, though, that nothing sent across the internet can be guaranteed completely secure, and we make no claim otherwise.

If personal information in our care is ever accessed or acquired by someone who had no business having it, section 22 of POPIA obliges us to notify the Information Regulator and every person affected as soon as we reasonably can. We will tell you what happened, what was exposed and what to do about it.

South Africa's Protection of Personal Information Act gives you the right to:

• Ask what we hold on you, and see it
• Have anything wrong corrected
• Have your details deleted from our records
• Tell us to stop sending you marketing, at any time and without giving a reason
• Pull back consent you gave us earlier
• Object to us processing your details on grounds particular to your situation
• Ask for a copy of what you gave us in a usable format
• Complain to the Information Regulator if we have not dealt with you properly

Any of those requests goes to our Information Officer — details in the next section. We will not charge you for asking.

To stop marketing specifically: reply STOP to any SMS, use the unsubscribe link on any email, send WhatsApp the word UNSUBSCRIBE, or just email us. Opt-outs take effect within five business days at the outside, and we do not ask why.

POPIA requires us to name someone who is answerable for the personal information we hold. Address any access request, correction, deletion, complaint or general privacy question to our Information Officer at sales@sparesboyz.co.za, marked for that person's attention. Post reaches the same desk at 89 Chris Hani Road, Briardene, Durban North, KwaZulu-Natal 4051. Expect an acknowledgement within a reasonable period, and a substantive answer as soon as we have one.

Our manual under the Promotion of Access to Information Act (PAIA) sets out the records we keep and how to request them. Ask for a copy at the same email address and we will send it through at no charge.

If you are not satisfied with how we have dealt with you, you are entitled to take the matter to the Information Regulator of South Africa. You do not need to come through us first, and here is how to reach them:

• Complaints: complaints.IR@inforegulator.org.za
• General enquiries: enquiries@inforegulator.org.za
• Telephone: +27 10 023 5200
• Post: JD House, 27 Stiemens Street, Braamfontein, Johannesburg 2001

Our terms and conditions cover pricing, warranty and returns, and our trademark disclaimer explains why the Citroen name appears on this site. Together with this page they are the whole of what you are agreeing to when you deal with us.