Last updated: 11 August 2026

Rusty Surfboards South Africa is operated by RS Industries ("Rusty Surfboards South Africa", "we", "us" or "our"). We operate this online store and website, including its content, features, tools, products, custom-order forms and services (the "Services"). Our online store is powered by Shopify.

This Privacy Policy explains how we collect, use, store and disclose personal information when you visit or use the Services, place an order, submit a custom-board enquiry, communicate with us or otherwise interact with Rusty Surfboards South Africa. We process personal information in accordance with applicable law, including the Protection of Personal Information Act 4 of 2013 ("POPIA").

If there is a conflict between this Privacy Policy and our Terms and Conditions regarding the collection, use or disclosure of personal information, this Privacy Policy will apply to that issue.

1. Who is responsible for your information?

RS Industries, trading as Rusty Surfboards South Africa, is the responsible party for personal information processed for our business purposes.

Location: Durban, KwaZulu-Natal, South Africa
Telephone / WhatsApp: +27 74 110 9396
Privacy enquiries: Please use our Contact page.

Privacy and POPIA requests may be directed to our Information Officer through the Contact page. Please select or state that your enquiry concerns privacy or personal information.

2. Personal information we collect

Depending on how you interact with us, we may collect or process the following categories of personal information:

• Identity and contact information: name, billing and delivery address, telephone number, WhatsApp number and email address.
• Order and transaction information: products viewed or purchased, custom-board specifications, order history, returns, cancellations, payment confirmation and delivery information.
• Custom-board information: information submitted to help personalise a board recommendation, such as age, height, weight, surfing ability, fitness, usual waves, current equipment, preferred dimensions, volume, construction, fin system, colour and performance goals.
• Account information: account identifier, preferences, settings and encrypted authentication credentials where customer accounts are enabled.
• Payment information: payment and transaction details processed by Shopify and payment providers. We do not ordinarily receive or store complete payment-card numbers.
• Communications: messages, chat conversations, support requests, reviews and other information you choose to provide.
• Device and technical information: IP address, browser, device, network information, cookie identifiers and similar technical data.
• Usage information: how you navigate and interact with the website, advertisements, emails and Services.
• Marketing preferences: newsletter subscriptions, consent records and opt-out choices.

Please provide only information that is reasonably necessary for your enquiry or order. Do not send payment-card details or other highly sensitive information through the chat box, WhatsApp or ordinary contact forms.

3. Information about children

Our Services are not directed at children. If a customer is under 18, a parent or legal guardian should place the order or submit the custom-board form on their behalf and supervise the information provided.

We may request a surfer's age as one factor in recommending a suitable surfboard. When that information relates to a child, it should be provided by or with the authorisation of a competent person as required by applicable law. If you believe that a child has provided personal information without appropriate authorisation, please contact us so that we can review and, where appropriate, delete it.

4. How we collect personal information

We may collect personal information:

• directly from you when you place an order, create an account, complete a form, subscribe, use the chat box, communicate with us or request support;
• automatically from your device through cookies, pixels, logs and similar technologies;
• from Shopify, payment processors, couriers, fulfilment providers and other service providers that support the Services;
• from marketing, analytics, social-media and advertising partners, where permitted by law; and
• from publicly available sources or another person acting with your authority.

5. Why we use personal information

We may process personal information for the following purposes:

• to provide, operate, personalise and improve the Services;
• to process payments, orders, custom-board enquiries, manufacturing confirmations, deliveries, returns and warranty claims;
• to recommend suitable board models, dimensions, volume, construction and setup based on information submitted by the customer;
• to communicate about orders, accounts, production, shipping, support and policy updates;
• to provide customer service and respond to enquiries;
• to maintain records and comply with tax, accounting, consumer-protection and other legal obligations;
• to prevent fraud, misuse, security incidents and unlawful activity;
• to establish, exercise or defend legal claims;
• to analyse and improve website performance, products and customer experience; and
• to send marketing communications and display advertising where permitted by law.

Depending on the circumstances, our processing may be necessary to perform a contract with you, comply with a legal obligation, pursue a legitimate business purpose, protect a legitimate interest, or take place with your consent.

6. Custom-board recommendations

Information submitted through a custom-board form is used to assess and personalise a board recommendation and confirm the manufacturing specifications. Recommendations involve professional judgement and are not based solely on automated decision-making.

Only provide another person's information if you have their permission or are legally authorised to provide it. If the surfer is under 18, the form should be completed or authorised by a parent or legal guardian.

7. Marketing and communication choices

Where permitted by law, we may use contact and activity information to send product news, promotions and relevant advertising. You can unsubscribe from promotional emails by using the unsubscribe link in the message. You can also object to or withdraw consent for direct marketing by contacting us through the Contact page.

Opting out of marketing does not prevent us from sending non-promotional messages required to complete an order, provide support, issue safety information or communicate about an account or transaction.

8. Cookies and similar technologies

We and our service providers use cookies and similar technologies to operate the store, remember preferences, keep the checkout secure, understand website usage, measure performance and, where enabled, provide personalised advertising.

You can manage available cookie choices through our cookie banner or privacy-preference interface and through your browser settings. Blocking some cookies may affect website, account or checkout functionality. For more information, review the cookie information and privacy choices made available on the website.

9. When we disclose personal information

We may disclose personal information only where reasonably necessary and permitted by law, including:

• to Shopify and providers of hosting, ecommerce, payment, fraud prevention, analytics, customer support and cloud services;
• to manufacturers, couriers, delivery partners and fulfilment providers involved in producing or delivering an order;
• to professional advisers, insurers, auditors and legal representatives;
• to marketing and advertising partners where permitted and subject to your available choices;
• when you direct us or consent to a disclosure;
• in connection with a merger, financing, sale, restructuring or other business transaction; and
• where required by law, legal process, a regulator, law-enforcement authority or to protect rights, safety and security.

We do not disclose personal information merely because a third party requests it. We assess whether a lawful basis or obligation applies.

10. Shopify and other service providers

Our store is hosted by Shopify. Shopify processes information about access to and use of the Services to provide and improve its platform, checkout, security and related services. Information submitted through the store may be transmitted to Shopify and other providers located outside South Africa.

To learn more about Shopify's processing, visit the Shopify Consumer Privacy Policy and the Shopify Privacy Portal.

11. International transfers

Some of our service providers, including Shopify and its supporting providers, may process or store personal information outside South Africa. Where personal information is transferred outside South Africa, we take reasonable steps to ensure that the transfer is permitted under POPIA, including through appropriate contractual protections, an adequate level of protection, consent where appropriate, or where the transfer is necessary to perform a contract or implement a customer request.

12. Security

We use reasonable technical and organisational measures designed to protect personal information against loss, unauthorised access, interference, misuse, disclosure, alteration or destruction. No system or transmission method is completely secure, and we cannot guarantee absolute security.

If we have reasonable grounds to believe that personal information has been accessed or acquired by an unauthorised person, we will investigate and make notifications to the Information Regulator and affected data subjects where required by applicable law.

13. Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this policy, including to complete orders, maintain business and tax records, provide warranty support, resolve disputes, enforce agreements and comply with legal obligations. Retention periods vary according to the type of information, the purpose of processing and applicable requirements.

When information is no longer required, we will delete, destroy or de-identify it where reasonably practicable and as required by law.

14. Your rights and choices

Subject to POPIA and other applicable law, you may have the right to:

• ask whether we hold personal information about you;
• request access to personal information we hold about you;
• request correction or deletion of inaccurate, irrelevant, excessive, outdated, incomplete, misleading or unlawfully obtained information;
• object to certain processing of your personal information;
• withdraw consent where processing is based on consent;
• object to direct marketing and unsubscribe from marketing communications;
• request information about the identity of third parties that have had access to your personal information where applicable; and
• lodge a complaint with the Information Regulator.

To exercise a privacy right, use our Contact page and state that the request concerns privacy or personal information. We may request information reasonably necessary to verify your identity and authority before acting on the request. We will not unfairly discriminate against you for exercising a legal privacy right.

15. Third-party websites

The Services may link to websites, social networks or platforms operated by third parties. Their privacy and security practices are governed by their own policies. We are not responsible for third-party websites that we do not control, and a link does not necessarily constitute an endorsement.

16. Complaints

Please contact us first through our Contact page so that we can try to resolve a privacy concern.

You also have the right to lodge a complaint with the Information Regulator South Africa:

Information Regulator South Africa
Telephone: 010 023 5200
Website: inforegulator.org.za
Online services and complaint submission: eservices.inforegulator.org.za

17. Changes to this Privacy Policy

We may update this Privacy Policy to reflect changes to our practices, Services, technology or legal obligations. We will publish the revised policy on the website, update the "Last updated" date and provide any additional notice required by law.

18. Contact us

For privacy questions, POPIA requests or concerns about this policy, please use our Contact page and state that your enquiry is for the Information Officer.

Rusty Surfboards South Africa
Operated by RS Industries
Durban, KwaZulu-Natal, South Africa
Telephone / WhatsApp: +27 74 110 9396