Who this policy is from
This website is operated by Toti Media House, a promotional products and corporate clothing supplier in South Africa.
Under the Protection of Personal Information Act, 2013 (POPIA), we are the responsible party for the personal information described below. That means we decide what is collected here and why, and we are the people you hold to it.
What this policy covers
This policy covers this website and nothing else. It does not cover a phone call, an email you send us directly, or anything that happens after we send you a quotation, all of which sit outside the site.
It is worth being clear about what this website is, because it changes what the policy has to say. This site is a product catalogue and a way to ask for a price. It shows no prices. It has no payment page, no card form, no payment gateway and no shopping basket that can be paid for. Nothing is ever sold here. What you can do is browse, build a quote list, and send it to us with your contact details so that we can price it by hand and reply to you.
So the only personal information this website collects from you on purpose is what you type into the quote request form. The rest of this policy explains that, and then explains the small amount your browser and our server exchange whether you type anything or not.
If you ask us to keep an account
The quote request form has one tick box on it that creates an account. It is off unless you tick it, and your request reaches us in exactly the same way whether you do or not. We never create an account for you otherwise.
If you do tick it, we create an account against the email address you gave us and send you a link to choose a password. We do not set a password for you and we never put one in an email. Until you follow that link and choose one, the account cannot be signed into.
The account holds your email address, and your name, company and phone number copied from the request, so that you do not have to type them again. Signing in shows you the requests you have sent us: what you asked us to price, in what quantities, and when. It shows no prices, because there are none on this website.
You can ask us to delete the account and everything in it at any time, on the same terms as everything else in this policy, and deleting it does not delete the quote requests themselves or stop us quoting you.
What we collect when you request a quote
When you send a quote request through this website we record the name you give us, your company, your email address, your phone number, the branding method you chose, any date you need the order by, anything you write in the notes field, and the products and quantities on your quote list at the time you send it.
Why we collect it
We do not show prices on this website. Every quote is worked out by hand against your quantities, the branding you want and what the supplier has in stock, so we need a way to reach you with the answer and enough detail to work it out. Your phone number is there because most quotes need one short call to confirm something before they can be priced.
What we do with it
Your request is emailed to us and a copy is emailed to you. It is stored in this website’s admin area, where only Toti Media staff can read it. Nothing is sold on this website, no payment is taken, and no card or banking details are ever collected or stored. We do not sell or share your details with anyone else, and we do not use them for marketing unless you ask us to.
How long we keep it
Retention period: We keep a quote request for as long as we are doing business with you. There is no fixed date on which it is deleted. You can ask us to delete yours at any time and we will..
Your rights
You can ask us what we hold about you, and you can ask us to delete it. Email nk@mediatoti.co.za and we will action it. If you ask us to delete your details we remove your name, company, email address, phone number and notes. We keep an anonymous record that a request was received, with the products and quantities that were on it, and nothing on that record identifies you.
What the web server records
Like almost every website, the server that sends you these pages writes a line in an access log for each file it sends. That line normally holds your IP address, the date and time, the page or image requested, the address of the page you came from if your browser sent one, and the name and version of your browser.
That log is a technical record. It is how a hosting company works out that a site is being attacked or that an image is missing. It is not linked to your quote request, nobody at Toti Media House reads it as a matter of course, and it is not used to build a profile of you or to target you with anything.
How long those logs are kept is a setting on the hosting account rather than something this website controls. The retention described above covers quote requests, which is the information you actually gave us.
Cookies
This website sets no cookies at all until you put something on your quote list. There is no analytics on this site, no advertising, no tracking pixel and no third-party script of any kind. When you do add a product, WooCommerce sets three cookies so that your quote list survives from one page to the next, and if you dismiss the notice at the bottom of the screen we set one more so that it does not come back.
Each one is named and explained on the Cookie Policy, along with what it is for and how long it lasts. That page also explains why this site does not put an accept or reject banner in front of you: there is nothing on it to reject.
Our legal basis under POPIA
POPIA requires a lawful reason for processing personal information, not just a good one. Ours are these.
- A quote request is processed because it is necessary to do the thing you asked us to do. You sent us a request for a price and we cannot answer it without your contact details. POPIA allows processing that is necessary to carry out a contract or to take steps at your request before one exists.
- Server logs are processed for our legitimate interest in keeping the site running and secure. They are not used for anything else.
- The cookies described on the Cookie Policy are processed because they are necessary for the part of the site you chose to use. Your quote list cannot work without them.
- Marketing, if we ever do any, needs your consent first. POPIA is strict about direct marketing and we do not add anybody who asks for a quote to a mailing list. If that ever changes we will ask you, and asking means a real choice rather than a pre-ticked box.
Who else sees your information
Nobody, unless we tell you otherwise on this page first.
One point is worth stating on its own, because this is a trade where buyers reasonably expect the opposite. The products on this site come from wholesale suppliers, and their product data, images and stock levels come to us through their systems. Nothing goes back the other way. Your name, your company, your email address, your phone number and your notes are not sent to any supplier when you ask us for a quote. We buy the stock; you deal with us.
We do not sell, rent or trade your details, and we do not share them with a marketing company or a data broker. The only people who read a quote request are Toti Media House staff, in this website’s admin area and in the email it sends them.
There are two ordinary exceptions. Our web host necessarily stores the site and its database on its servers, and our email provider necessarily carries the email. And if a court or a law compels us to hand something over, we have to comply.
What POPIA lets you ask for
The section above tells you how to ask us for your information or to have it deleted, which is the route most people want. POPIA gives you more than that, and it is your right whether or not you use this site again.
- Access. You may ask us to confirm whether we hold personal information about you, and to give you a copy of it. We answer free of charge for a request about a quote you sent us.
- Correction. If something we hold about you is wrong, out of date, incomplete or misleading, you may ask us to fix it.
- Deletion. You may ask us to delete personal information we no longer have a reason to keep, or that we obtained unlawfully. What happens when we act on that is described above: your name, company, email address, phone number and notes are removed, and an anonymous record that a request was received is kept.
- Objection. You may object to processing we are doing on the basis of a legitimate interest, and you may tell us at any time to stop using your details for direct marketing.
- Complaint. You may complain to the Information Regulator, and you may do that without asking us first.
How to ask us
Write to nk@mediatoti.co.za. Put the word "privacy" in the subject line and we will treat it as a request under this policy rather than as an enquiry.
Write to us at the address above and it will reach the person accountable for how your information is handled.
We may ask you to prove who you are before we act. That is not obstruction: handing somebody’s contact details to a stranger who asked nicely would be the breach, not the safeguard.
Complaining to the Information Regulator
If you think we have handled your personal information badly, you can complain to the regulator that oversees POPIA. It is independent of us and it does not charge you.
The Information Regulator (South Africa). Email enquiries@inforegulator.org.za, or use the complaint forms on their website at inforegulator.org.za.
We would rather you told us first, because most of what a complaint is about we can simply fix. But you are not obliged to, and this policy is not asking you to.
How this website is kept secure
Quote requests are stored in this website’s own database and are readable only by staff who are signed in to the admin area. No card number, bank account or payment detail is ever collected here, because there is nothing on this site to pay for, so there is no payment data to lose.
We are not going to tell you that your information is completely safe, because no honest website can. What we can tell you is that this site holds the smallest amount it can get away with: a name, a company, an email address, a phone number, and a list of products somebody asked about.
Children
This is a trade catalogue for businesses. It is not aimed at children and we do not knowingly collect information about anybody under 18. If you think a child has sent us a quote request, tell us and we will delete it.
Changes to this policy
If what this website does changes, this page changes first. In particular, if analytics or advertising are ever added to this site, this policy and the Cookie Policy have to say so before the first script loads, and you have to be given a real choice about it.
The date this page last changed is at the foot of it.
Last updated 2 September 2026.