Privacy Policy

Category of Information	Examples of Data Collected	Purpose of Collection
Identity/Contact Data	Name, surname, email address, phone number, physical address.	To process orders, manage accounts, provide customer support, and send necessary service notifications.
Technical Data	IP address, browser type, operating system, device type, website activity (pages viewed, time spent).	To ensure website security, optimize user experience, and analyze site performance.
Financial/Transaction Data	Payment details (processed securely via a third-party gateway, we do not store full card details), purchase history.	To process payments for goods/services and maintain transaction records.
Marketing/Communication Data	Your preferences in receiving marketing from us and your communication preferences.	To send promotional content (only with your explicit consent) and manage opt-out requests.

How Personal Information is Collected

We collect information through the following methods:

• Direct Interactions: You provide data directly to us when you fill out forms, create an account, subscribe to a newsletter, purchase products, or contact us.
• Automated Technologies: As you interact with our website, we automatically collect Technical Data using cookies, server logs, and other similar technologies. (See Cookies & Tracking technologies section).
• Third Parties: We may receive Personal Information about you from third parties, such as analytics providers (e.g., Google Analytics), and payment processors, subject to their privacy policies.

Use of Personal Information (Processing)

We will only process your Personal Information where we have a lawful justification ("legal basis" for processing) under POPIA, which typically includes:

• Contract: Processing is necessary for a contract we have with you (e.g., to deliver a product you purchased).
• Legal Obligation: Processing is necessary to comply with a legal obligation (e.g., tax record keeping).
• Legitimate Interests: Processing is necessary for our legitimate interests (or those of a third party), provided your interests and fundamental rights do not override those interests (e.g., internal research, fraud prevention, and network security).
• Consent: Where you have given us explicit, specific, and informed consent (e.g., for direct marketing). You have the right to withdraw this consent at any time.

Disclosure and Sharing of Personal Information

We may share your Personal Information with the following parties:

• Service Providers: External third parties who process data on our behalf, such as payment processors, hosting providers, email platforms, and delivery companies. These parties are obligated to maintain the confidentiality and security of the data.
• Legal/Regulatory Bodies: Where we are legally required to do so by law, court order, or government regulation.
• Business Transfers: If we sell or transfer all or a portion of our business assets (e.g., in a merger or acquisition).

We will not sell or rent your Personal Information to third parties for their independent use without your consent.

Cookies and Tracking Technologies

• We use cookies to enhance your experience on our website. A cookie is a small file placed on your device's hard drive.
• By using our website, you agree to our use of cookies as described in our [Link to Your Separate Cookie Policy or Cookie Notification].
• You can set your browser to refuse all or some cookies or to alert you when websites set or access cookies. However, if you disable or refuse cookies, some parts of the website may become inaccessible or not function properly.

Security and Data Protection

• We are committed to securing the integrity and confidentiality of your Personal Information.
• We implement appropriate technical and organizational measures to prevent loss, unauthorized access, destruction, or damage to your data. These include encryption, secure server infrastructure, and access control.
• We limit access to your Personal Information to employees, agents, contractors, and other third parties who have a business need to know.

Your Rights as a Data Subject (POPIA Rights)

Under POPIA, you have the right to:

• Be notified when your personal data is being collected and in the event of a data breach.
• Request confirmation that we hold personal data about you, and to request a copy of that data.
• Request the correction or deletion of your Personal Information that is inaccurate, irrelevant, excessive, or unlawfully obtained.
• Object to the processing of your Personal Information on reasonable grounds, unless legislation provides for such processing.
• Object to processing solely based on automated decision-making that results in legal consequences for you.
• Withdraw any consent given for processing at any time.
• Lodge a complaint with the:

The Information Regulator (South Africa) JD House, 27 Stiemens Street, Braamfontein, Johannesburg, 2001 or complaints.IR@justice.gov.za

Data Retention

We will only retain your Personal Information for as long as necessary to fulfill the purposes for which it was collected, including for satisfying any legal, accounting, or reporting requirements.

Changes to this Policy

We may update this policy from time to time. The latest version will always be posted on our website, and the effective date will be updated. Last revised on 26 November 2025.