EXTERNAL PRIVACY NOTICE
KAPTEIN BRANDT ARTISAN SAUCES (PTY) LTD
(Registration Number: 2024/123456/07)
(hereafter referred to as "Kaptein Brandt", "we", "us", or "our")
1. INTRODUCTION AND PURPOSE
In terms of the Protection of Personal Information Act, No. 4 of 2013 ("POPIA"), Kaptein Brandt has a legal and ethical duty to protect the Personal Information of our customers, website visitors, and business partners.
This Privacy Notice explains how we collect, use, disclose, and safeguard your Personal Information when you visit our website, use our e-commerce platform, purchase our artisan sauces, or communicate with us.
2. INFORMATION WE COLLECT
We may collect and process the following categories of Personal Information:
- Contact Information: Full name, billing address, delivery address, email address, and phone number.
- Transaction Details: Details of products you purchase from us, payment confirmation data (processed securely via our payment gateways; we do not store raw card numbers).
- Technical Data: IP address, browser type, operating system, and website usage statistics via cookies.
- Correspondence: Information you provide when contacting us via WhatsApp, email, or our contact forms.
3. HOW WE COLLECT YOUR PERSONAL INFORMATION
We collect Personal Information in the following ways:
- Directly from you: When you register an account, purchase products, sign up for our newsletter ("Join the Firecircle"), fill out contact forms, or send us WhatsApp/email messages.
- Automatically: Via cookies and tracking technologies when you browse our website.
4. PURPOSE OF PROCESSING
We process your Personal Information for the following purposes:
- To process, fulfill, and deliver your orders (including sharing details with our courier partners).
- To manage your account and process payments securely.
- To communicate with you regarding your orders, product inquiries, or support requests.
- To send you marketing newsletters and inventory updates (only where you have opted in).
- To comply with applicable South African tax, accounting, and corporate laws.
5. DISCLOSURE OF PERSONAL INFORMATION
We do not sell your Personal Information. We only disclose your information to trusted third-party service providers who assist us in operating our business:
- Payment Gateways: Secure third-party payment processors (e.g., PayFast/Yoco) to process payments.
- Courier Services: Door-to-door delivery partners (e.g., EPX) to ship your orders.
- Hosting and Technical Support: Providers hosting our website, database, and email servers.
- Legal Authorities: When required by South African law or to protect our legal rights.
6. SECURITY OF YOUR INFORMATION
We implement appropriate technical and organisational security measures to protect your Personal Information against unauthorized access, loss, damage, or alteration. These include secure database access controls, SSL encryption on our website, and strict operational data-handling procedures.
7. DATA RETENTION
We retain your Personal Information only for as long as necessary to fulfill the purposes for which it was collected, or to comply with statutory record-keeping obligations (e.g., South African SARS tax requirements which dictate retaining financial transaction records for 5 years).
8. YOUR RIGHTS UNDER POPIA
You have the following rights regarding your Personal Information:
- Right of Access: You can request confirmation of whether we hold your Personal Information and request a copy thereof.
- Right of Correction: You can request that we update or correct inaccurate or outdated information.
- Right of Objection: You can object to the processing of your information for direct marketing purposes.
- Right of Deletion: You can request that we delete or destroy your Personal Information, subject to legal record retention requirements.
To exercise any of these rights, please contact our Information Officer using the contact details below.
9. CONTACT DETAILS AND INFORMATION OFFICER
For any queries, concerns, or requests regarding this Privacy Notice, please contact our designated Information Officer:
10. COMPLAINTS TO THE REGULATOR
If you believe that we have not processed your Personal Information in accordance with POPIA, you have the right to lodge a complaint with the South African Information Regulator:
- Website: https://inforegulator.org.za/
- Email: [email protected]