Privacy Policy

Last updated: 10-08-2026

N&G Rentals (“we”, “us”, “our”) respects your privacy and is committed to protecting your personal information. This policy explains what information we collect when you use our website or contact us, how we use it, and the rights you have under the Protection of Personal Information Act, 2013 (POPIA).

By using our website or submitting an enquiry, you consent to the collection and use of your information in the ways described below.

1. Who we are

N&G Rentals is an authorised Toshiba and Duplo dealer offering month-to-month copier and printer rentals in Johannesburg and surrounds.

2. Information we collect

We only collect information that is necessary to respond to your enquiry, provide our rental services, and improve how our website works.

Information you give us directly

• Your name and job title
• Company name
• Email address and telephone number
• Business address and delivery location
• Details of your rental requirements (e.g. print volume, machine preferences)
• Any other information you choose to share in the enquiry form or in correspondence with us

Information collected automatically

• IP address and approximate geographic location
• Browser type, device type, and operating system
• Pages visited, time spent, and referring website
• Cookie data (see our Cookie Policy for full detail)

3. How we use your information

We process your personal information for the following purposes:

• To respond to your enquiry and provide a written quote
• To arrange machine delivery, installation, and ongoing maintenance
• To send service-related communications (e.g. delivery confirmations, meter reading requests, invoices)
• To improve our website, services, and customer experience
• To comply with our legal and regulatory obligations

We will not use your information for marketing purposes without your consent, and we will never sell your personal information to third parties.

4. Lawful basis for processing (POPIA)

We rely on the following lawful grounds for processing your personal information:

• Consent — where you have voluntarily provided information via our enquiry form or by contacting us
• Contractual necessity — where processing is necessary to provide the rental service you have engaged us for
• Legitimate interest — for basic website analytics and to protect against fraud or misuse
• Legal obligation — where retention or disclosure is required by South African law

5. Who we share your information with

We only share your personal information where it is necessary to deliver our service or where we are required to by law. This may include:

• Toshiba South Africa and Duplo suppliers — for equipment supply, warranty registration, and technical support related to your rental
• Delivery and technical service partners — for machine installation, maintenance, and toner delivery
• Our accounting and IT service providers — under strict confidentiality obligations
• Regulatory authorities — where disclosure is required by law

All third parties who process personal information on our behalf are contractually required to protect it in line with POPIA.

6. Cross-border transfers

Some of the tools we use (such as Google Analytics and email hosting) may store data on servers outside South Africa. Where this is the case, we ensure the receiving country or provider offers an adequate level of protection or has appropriate safeguards in place, as required by POPIA.

7. How long we keep your information

We retain personal information only for as long as necessary for the purpose it was collected:

• Enquiries that do not convert: up to 24 months, then deleted
• Active rental customers: for the duration of the rental agreement plus 5 years after termination, to meet tax and record-keeping obligations
• Website analytics: up to 26 months in Google Analytics

8. How we protect your information

We take reasonable technical and organisational measures to safeguard your personal information, including:

• SSL encryption on our website
• Access controls on our internal systems
• Staff training on data handling and confidentiality
• Secure backups and password-protected records

Despite our best efforts, no method of electronic transmission or storage is completely secure. If a data breach occurs that affects your personal information, we will notify you and the Information Regulator in line with POPIA.

9. Your rights under POPIA

You have the following rights in respect of your personal information:

• Right of access — to request confirmation of what personal information we hold about you and a copy of it
• Right to correction — to request that inaccurate or outdated information be corrected or updated
• Right to deletion — to request that we delete your personal information, subject to our legal and contractual obligations
• Right to object — to object to the processing of your personal information in certain circumstances
• Right to withdraw consent — where processing is based on consent, you may withdraw it at any time
• Right to lodge a complaint — with the Information Regulator (details below)

To exercise any of these rights, please contact our Information Officer using the details below.

10. Children’s information

Our services are directed at businesses, not children. We do not knowingly collect personal information from anyone under the age of 18. If you believe we have inadvertently done so, please contact us and we will delete it.

11. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The “Last updated” date at the top of the page will indicate when the policy was last revised. We encourage you to review this page periodically.

12. Contact us / Information Officer

If you have any questions about this policy, wish to exercise your rights, or want to lodge a complaint, please contact our Information Officer: