Privacy Policy & POPIA Notice

Last updated: June 2026  |  Version 2.0

Custom Molding Company ("we", "us", or "our") is the online trading name operated by Fastflow Plastics Pty Ltd, a company registered in South Africa with its principal place of business in Johannesburg, Gauteng. We are committed to protecting your personal information and complying with all applicable data protection legislation, including:

• The Protection of Personal Information Act 4 of 2013 (POPIA) — South Africa
• The General Data Protection Regulation (GDPR) — European Union
• The California Consumer Privacy Act (CCPA) — United States

1. Information Officer

As required by POPIA, we have designated an Information Officer responsible for ensuring compliance with this Act. For all privacy-related requests, complaints, or enquiries, please contact:

Information Officer
Custom Molding Company / Fastflow Plastics Pty Ltd
Johannesburg, Gauteng, South Africa
Email: [email protected]

You also have the right to lodge a complaint with the Information Regulator of South Africa if you believe your rights under POPIA have been infringed.

2. Personal Information We Collect

We collect personal information only when you voluntarily provide it through our website. This includes:

• Quote request form: Full name, company name, work email address, annual volume estimate, target unit price, material preference, and any CAD or drawing files you upload.
• Technical data: IP address (collected automatically for fraud prevention and security purposes), browser user-agent string, and page visit timestamps.
• Cookie data: Cookie consent preferences stored locally in your browser (see Section 7).

We do not collect sensitive personal information (as defined in POPIA Section 26) such as race, religion, health information, or biometric data.

3. Lawful Basis for Processing

Under POPIA and GDPR, we process your personal information on the following lawful grounds:

• Consent: Where you have provided explicit consent (e.g., cookie preferences, marketing communications).
• Legitimate interest: To respond to your manufacturing enquiry and route it to our engineering team.
• Legal obligation: Where processing is required to comply with applicable law.

4. How We Use Your Information

Your personal information is used exclusively for the following purposes:

• To respond to your quote request and connect you with our engineering team at Fastflow Plastics.
• To store your enquiry securely for follow-up within a reasonable commercial timeframe.
• To send you a notification email via SendGrid confirming receipt of your enquiry (where an email address is provided).
• To prevent fraud and protect the security of our systems (IP address logging).

We do not sell, rent, or share your personal data with third parties for marketing purposes. We do not use your data for automated decision-making or profiling.

5. Data Storage & Retention

Lead data submitted via the quote form is stored in a Cloudflare D1 database hosted on Cloudflare's global edge network, with servers located in the United States and the European Union. CAD files and drawings are stored in Cloudflare R2 object storage.

We retain personal data for a maximum of 24 months from the date of submission, after which it is permanently deleted. You may request earlier deletion at any time (see Section 8).

Email notifications are processed via SendGrid (Twilio Inc.), which acts as a data processor on our behalf under a Data Processing Agreement.

6. Cross-Border Data Transfers

As our infrastructure is hosted on Cloudflare's global network, your data may be processed in countries outside South Africa, including the United States and the European Union. Where such transfers occur, we ensure that appropriate safeguards are in place in accordance with POPIA Section 72, including standard contractual clauses and Cloudflare's Data Processing Addendum.

7. Cookies & Tracking Technologies

We use the following categories of cookies:

• Strictly Necessary: Essential for the website to function (session management, form security). These cannot be disabled.
• Analytics & Performance: Used to understand how visitors interact with our site. Data is aggregated and anonymised. Only activated with your consent.
• Marketing & Retargeting: Used to measure advertising campaign effectiveness. Only activated with your explicit consent.

You can manage your cookie preferences at any time by clicking the "Manage Preferences" link in the cookie banner at the bottom of any page. Your preferences are stored locally in your browser's localStorage under the key cmc_cookie_consent_v2.

8. Your Rights

Under POPIA, GDPR, and CCPA, you have the following rights regarding your personal information:

• Right of access: Request a copy of the personal information we hold about you.
• Right to correction: Request that inaccurate or incomplete information be corrected.
• Right to deletion (erasure): Request that your personal information be deleted from our systems.
• Right to object: Object to the processing of your personal information for specific purposes.
• Right to withdraw consent: Withdraw consent at any time where processing is based on consent (this does not affect the lawfulness of processing prior to withdrawal).
• Right to data portability: Request your data in a structured, machine-readable format (GDPR/CCPA).

To exercise any of these rights, contact our Information Officer at [email protected]. We will respond within 30 days in accordance with POPIA requirements.

9. Security

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, disclosure, alteration, or destruction. These include encrypted data transmission (HTTPS/TLS), access controls, and Cloudflare's enterprise-grade security infrastructure.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be indicated by an updated "Last updated" date at the top of this page. Continued use of the website after changes constitutes acceptance of the revised policy.

11. Contact

For all privacy-related enquiries, contact our Information Officer at [email protected].

To lodge a complaint with the South African Information Regulator: inforegulator.org.za