Privacy Policy

Last updated August 24, 2026

This is the master Privacy Policy published by Sweepro Brush (Pty) Ltd t/a Sweepro Group International (“Sweepro Group,” “we,” “us,” or “our”), governing the collection, use, storage, and protection of personal information across the entire Sweepro Group website network, including but not limited to sweeprogroup.com, sweepa.com, shop.sweepa.com, sweeprobrush.com, sweepromanufacturing.com, sweepromfg.com, sweeparubberware.com, sweepa.net, sweepa.eu, sweepa.uk, and sweepausa.com, and any other domain, subdomain, or online store we operate now or in future. Individual Sweepro Group websites may, from time to time, publish additional supplementary terms addressing matters specific to that site’s region or operations. Any such supplementary terms will expressly reference and incorporate this Privacy Policy, and this Privacy Policy continues to apply in full alongside them. Where any conflict arises between this Privacy Policy and a site-specific supplement, this Privacy Policy governs unless the supplement expressly and specifically states otherwise for the particular matter in question. By accessing or using any Sweepro Group website, you acknowledge that you have read and agree to this Privacy Policy.

Full registered company details, including our registration number and registered address, are available here: sweeprogroup.com/details/secure

Questions or concerns may be submitted via our data request form: https://tally.so/r/A7ezXk

SUMMARY OF KEY POINTS

What personal information do we process? Information you voluntarily provide through our contact and enquiry forms, correspondence you send us by email, and, where a specific site has an active shop, information necessary to process a purchase.

Do we process sensitive personal information? No.

Do we collect information from third parties? We may collect limited information from public databases and marketing partners.

How do we process your information? To respond to enquiries, operate our websites, fulfil purchases where applicable, and improve our Services, only where we have a valid legal basis to do so.

Do we sell or share your information? No. We do not sell personal information under any circumstances, and have not shared personal information with third parties for advertising or commercial purposes in the preceding twelve months, and do not intend to.

How do we keep your information safe? Reasonable technical and organisational safeguards, including reputable accredited infrastructure for email and form processing, though no method of transmission or storage can be guaranteed completely secure, and we do not warrant otherwise.

What are your rights? Depending on where you’re located, you may have rights to access, correct, delete, or restrict use of your personal information, and to know who is processing it.

SCOPE AND THE SWEEPRO GROUP WEBSITE NETWORK

Sweepro Brush (Pty) Ltd t/a Sweepro Group International operates and maintains the Sweepro Group network of websites listed above, including sweepausa.com and shop.sweepa.com. This Policy applies across every website, subdomain, and shop in that network. Individual sites may publish supplementary terms specific to their own region or operations, as described in the introduction above, but this Policy remains the master document governing the entire network. Where a specific website offers products for direct sale, the operating and contracting entity for that transaction is additionally identified in that site’s own Legal Notice section here, and this Policy applies alongside it. This Policy is intended to comply in good faith with the CCPA and CPRA in California, the GDPR and UK GDPR, and POPIA in South Africa, Act 4 of 2013, and other applicable data protection frameworks in jurisdictions where our sites are accessed.

WHAT INFORMATION WE COLLECT

Information you provide directly: names, business or personal email addresses, telephone numbers, mailing addresses, company names, job titles, and the content of any enquiry, submitted through the contact and enquiry forms on our websites, or sent to us directly by email. All forms across every Sweepro Group website are processed and stored through Tally, a third-party form provider, on our behalf. Where a purchase is made on a site with an active shop, we additionally collect delivery and billing address and order details necessary to fulfil that order.

Automatically collected information: standard technical data, including IP address, browser type, device type, operating system, referring URL, and pages viewed, collected via Google Analytics when you visit our sites. We do not collect precise GPS or device location data.

Information from other sources: we may occasionally obtain limited information such as mailing addresses or job titles from public databases or marketing partners, to keep our records accurate for trade correspondence purposes.

We do not collect payment card numbers, banking details, national identity or passport numbers, biometric data, or other sensitive personal information. Where a purchase is made through a site with an active shop, card data is collected and processed directly by our payment processor and never passes through or is stored on our own systems.

HOW WE PROCESS YOUR INFORMATION

We process personal information to respond to and manage trade, retail, and general enquiries; operate, secure, and improve our websites; fulfil and manage orders, payments, returns, and exchanges on sites with an active shop; send administrative communications about products, services, or policy changes; request feedback; and identify usage trends through aggregate analytics. Personal information is used only for the specific purpose for which it was submitted, and for no other purpose without your separate consent. We do not send unsolicited marketing communications. Should this change, this Policy will be updated in advance with a clear opt-out mechanism.

LEGAL BASES FOR PROCESSING

EU and UK visitors: we rely on your consent, which you may withdraw at any time, the performance of a contract where you make a purchase or request a service, our legitimate interests in responding to enquiries and operating secure websites, and, where applicable, legal obligations.

South African visitors under POPIA: we process personal information only where processing is necessary for a legitimate purpose related to our business activities, with your consent where required, or to comply with a legal obligation, consistent with the conditions for lawful processing under POPIA.

We may share information with affiliates under common control with us, who are required to honour this Policy; in connection with a business transfer such as a merger, acquisition, or sale of assets; and with service providers under written contract, strictly to enable them to perform services on our behalf. We do not sell, rent, trade, or otherwise transfer personal information to any third party for commercial, marketing, or advertising purposes. To be unambiguous: we do not sell personal information, under any circumstances, to any third party. Personal information is used only for the specific purpose for which it was submitted, as described in Section 3, and for no other purpose without your separate consent.

THIRD-PARTY SERVICES — HOW WE ACTUALLY USE EACH ONE

Tally: all contact, enquiry, and trade forms across every Sweepro Group website are built and processed through Tally, a GDPR-native form provider based in the EU. When you submit a form on any of our sites, your responses are transmitted directly to and stored within Tally’s infrastructure, encrypted in transit and at rest, and made available to us solely to respond to your enquiry. We do not use Microsoft Forms or Google Forms for data collection on any Sweepro Group website — Tally is our sole form processor.

Google Analytics: we use Google Analytics to understand aggregate website traffic and usage, such as how many people visit, which pages are viewed, and general navigation patterns. This operates via a cookie only set after you accept analytics cookies through our cookie consent banner, described in Section 8. We do not use Google Analytics advertising or remarketing features. To opt out of Google Analytics across all websites, visit this page: https://tools.google.com/dlpage/gaoptout

Paystack: on any Sweepro Group website with an active shop, including shop.sweepa.com once live, payment is processed directly by Paystack, or an equivalent accredited processor, described further in Section 10. Card details never pass through or are stored on our own systems.

This section is provided for transparency and does not guarantee any provider’s ongoing compliance status, which may change over time and should be verified directly with the provider.

EMAIL CORRESPONDENCE

Our business email accounts are hosted with a reputable, accredited email service provider. If you email us directly, your message and any personal information it contains is received, processed, and stored within that provider’s infrastructure. The provider maintains recognised industry security and compliance standards, which can be confirmed directly with them on request. We do not forward the content of your email correspondence to any third party except where necessary to respond to your enquiry or as otherwise described in this Policy.

COOKIES AND TRACKING TECHNOLOGIES

Our websites display a cookie consent banner on first visit, allowing you to accept, decline, or customise which categories of cookies are active. Cookies are small text files stored on your device that help us understand how our Services are used. We use Google Analytics for aggregate website analytics. For visitors in the European Economic Area, the United Kingdom, and Switzerland, analytics cookies are set only after you actively accept them via the banner. For visitors elsewhere, limited aggregate analytics data may be collected from the point you arrive, before you interact with the banner, consistent with applicable law in your jurisdiction; you can decline or limit this at any time using the cookie settings link in our site footer. We do not currently run remarketing, ad-personalisation, or third-party advertising tags on any Sweepro Group website. We are working toward extending prior-consent blocking to all visitors regardless of region, and this Policy will be updated as that work is completed.

THIRD-PARTY LINKS

Our websites contain links to external websites, including our divisional brand sites, authorised retailers, and affiliated entities. We have no control over and accept no responsibility for the content, accuracy, privacy practices, or security of any external website. Your access to and use of any external website is entirely at your own risk, and this Policy does not apply to any website other than the Sweepro Group domains listed in Section 1.

PAYMENT PROCESSING ON SITES WITH AN ACTIVE SHOP

Where a Sweepro Group website operates an active shop, including shop.sweepa.com once live, payment is processed by Paystack or an equivalent accredited processor. Where Paystack is used, it is PCI DSS Level 1 certified, ISO 27001 certified, listed on the Visa and Mastercard certified service-provider databases, and licensed by the Central Bank of Nigeria and the Central Bank of Kenya. We do not receive, process, or store your card details. The specific operating and contracting entity for a transaction on such a site is identified in that site’s own Legal Notice section on this site.

INTERNATIONAL DATA TRANSFERS

As we operate across South Africa, the United States, and other jurisdictions, your information may be transferred to, stored, and processed in a country other than your own, including by the third-party providers listed in Sections 6 and 7. Where required by applicable law, we take appropriate steps to ensure an adequate level of protection for such transfers.

DATA RETENTION

We retain personal information only for as long as reasonably necessary for the purpose it was collected, or as required by applicable law, after which it is deleted or anonymised.

SECURITY

We apply reasonable technical and organisational measures to protect personal information, including using service providers that hold recognised industry security accreditations as described in Sections 6, 7, and 10. No method of transmission over the internet or electronic storage is completely secure, and we do not warrant or guarantee absolute security. We are not liable for any loss, breach, or unauthorised access arising from the independent infrastructure, systems, or conduct of any third-party service provider, including those listed in Sections 6, 7, and 10, whether or not that provider held a valid security accreditation at the relevant time. In the event of a data breach posing material risk to affected individuals, we will notify them and, where legally required, the relevant supervisory authority, without undue delay.

CHILDREN AND MINORS

Our websites are not directed at, and we do not knowingly collect personal information from, individuals under 18. If you believe a minor has submitted information through one of our websites, contact us immediately via our data request form, linked in the introduction above, and we will take reasonable steps to delete it.

NO AUTOMATED DECISION-MAKING

We do not use personal information submitted through our websites for automated decision-making or algorithmic profiling that produces legal or similarly significant effects on any individual.

CATEGORIES OF PERSONAL INFORMATION (CALIFORNIA)

In the past twelve months, we have collected the following categories of personal information as defined under California law. Identifiers, such as name, email, phone, and IP address: yes. Internet or network activity, such as browsing behaviour on our sites: yes. Geolocation data: no. Commercial information, only where a purchase is made on a site with an active shop: site-dependent. Protected classification characteristics, biometric information, professional or employment information beyond what you voluntarily provide, education information, and sensitive personal information: no. Inferences drawn from collected data: no, we do not build profiles from the information we collect. We retain Identifiers and Internet and network activity data only as long as necessary for the purposes described in this Policy.

YOUR PRIVACY RIGHTS

California residents under the CCPA and CPRA have the right to know, access, correct, and delete their personal information, the right to obtain a copy of the personal information previously shared with us, the right to opt out of sale or sharing, though we do not sell or share personal information, the right to limit use of sensitive personal information, though we do not collect sensitive personal information, and the right to non-discrimination for exercising any of these rights. You may designate an authorised agent to submit a request on your behalf, provided we can verify that agent’s authority to act for you. If we decline a request, you may appeal by submitting a further request via our data request form; if your appeal is denied, you may submit a complaint to your state attorney general.

EU and UK residents under the GDPR and UK GDPR have the right of access, rectification, erasure, restriction of processing, data portability, and objection to processing, and the right to lodge a complaint with the UK Information Commissioner’s Office or their national data protection authority.

South African residents under POPIA have the right to access and correct personal information held about them, the right to object to processing, and the right to lodge a complaint with the Information Regulator of South Africa at this email address: enquiries@inforegulator.org.za

We have an appointed Information Officer responsible for POPIA compliance, reachable via our data request form.

All requests must be submitted in writing via our data request form, linked in the introduction above. We do not accept verbal or informal requests, and will make reasonable good-faith efforts to respond to verifiable requests. We will need to verify your identity before processing any request.

CALIFORNIA SHINE THE LIGHT LAW

California Civil Code Section 1798.83 permits California residents to request, once a year and free of charge, information about categories of personal information, if any, we disclosed to third parties for direct marketing purposes in the preceding calendar year. As stated above, we do not disclose personal information for direct marketing purposes. To make a request, use our data request form.

DO-NOT-TRACK SIGNALS

No uniform technical standard for Do-Not-Track signals currently exists. We do not respond to DNT browser signals at this time.

OTHER JURISDICTIONS

If you are located in Australia or New Zealand, you have the right to request access to or correction of your personal information, and to complain to the Office of the Australian Information Commissioner or the Office of the New Zealand Privacy Commissioner respectively. If you are located elsewhere and believe local law grants you rights not otherwise described in this Policy, contact us via our data request form and we will address your request in good faith.

OFFICIAL COMMUNICATIONS AND BRAND PROTECTION

No individual or business is authorised to represent themselves as Sweepro Group International, Sweepro Brush (Pty) Ltd, or any affiliated brand, unless expressly confirmed by us in writing. Official communications only originate from our listed official domains. Report any suspicious communication via our data request form.

BUSINESS TRANSFERS

In the event of a merger, acquisition, or sale of assets, personal information may be transferred as part of that transaction, with any acquiring party required to honour the commitments in this Policy.

UPDATES TO THIS POLICY

We may update this Policy as necessary. Material changes will be indicated by a revised last-updated date at the top of this page. The version published at the time of your visit governs your use of the site at that time.

GOVERNING LAW

This Privacy Policy is governed by the laws of the Republic of South Africa, the jurisdiction of Sweepro Brush (Pty) Ltd’s registration. Where a specific website has an active shop, disputes relating to that transaction are additionally governed by the law identified in that site’s own Legal Notice.

COMPANY AND CONTACT DETAILS

Sweepro Brush (Pty) Ltd t/a Sweepro Group International. Full registration number, registered address, and company details: sweeprogroup.com/details/secure

For enquiries or data requests, use our data request form: https://tally.so/r/A7ezXk