Draft template. This policy must be reviewed and approved by the business and a South African legal adviser before launch. Remove this notice once approved.
This policy explains how [Registered business name — to be confirmed] (“Caudex Collective”, “we”) processes personal information in accordance with the Protection of Personal Information Act 4 of 2013 (POPIA).
Responsible party and Information Officer
Responsible party: [Registered business name — to be confirmed], [Postal / registered address — to be confirmed].
Information Officer: [Information Officer — to be confirmed].
Information we collect
- Orders: name, email, phone, billing and delivery address, order history.
- Payments: handled by our payment provider. We receive confirmation of payment but not your full card details.
- Account: login details if you create an account.
- Enquiries: what you send through our contact form or email.
- Newsletter: your email address, the time you gave consent and confirmed it.
- Technical: cookies needed for the cart and checkout; analytics data where enabled (see Cookies).
Why we use it
To process and deliver orders, provide support, meet legal and tax obligations, keep compliance records for regulated plants, prevent fraud, and — only with your consent — send marketing emails.
Who we share it with
Couriers (delivery details), our payment provider, our website host, email delivery service and, if you subscribe, our mailing-list provider: [List of operators/processors, e.g. hosting, payment gateway, courier, email service — to be confirmed]. Some may store data outside South Africa; we only use providers that offer adequate protection as required by POPIA.
Cookies and analytics
[Cookies used, analytics tools and how visitors can opt out — to be confirmed]Retention
[How long order, account, enquiry and newsletter records are kept — to be confirmed]Your rights
You may request access to, correction of or deletion of your personal information, object to processing, and withdraw marketing consent at any time using the unsubscribe link in any email. You may lodge a complaint with the Information Regulator (South Africa).
Security
The site uses HTTPS encryption, access to customer data is restricted to staff who need it, and we keep software up to date.