Privacy Policy
Effective Date: 29 September 2025
This Privacy Policy explains how Thanda Bantu Online (Pty) Ltd (“we”, “us”, “our”) collects, uses, protects, and shares your personal information in compliance with the Protection of Personal Information Act (POPIA) and other applicable South African laws.
By using our website or purchasing our products, you agree to the terms of this Privacy Policy.
1. Information We Collect
We may collect and process the following personal information:
-
Identity Information: name, surname, ID number, company name (if applicable).
-
Contact Information: email address, phone number, billing and delivery addresses.
-
Payment Information: bank details, card details (processed securely via trusted payment gateways – we do not store full card numbers).
-
Transaction Records: purchase history, invoices, and proof of payment.
-
Technical Data: IP address, browser type, operating system, and website usage (through cookies and analytics tools).
-
Communication Data: emails, queries, and customer support requests.
2. How We Use Your Information
Your personal information is used for the following purposes:
-
To process and fulfil your orders.
-
To arrange delivery or collection of goods.
-
To provide customer service and respond to enquiries.
-
To send order confirmations, invoices, and important updates.
-
To comply with legal and regulatory requirements.
-
To improve our website, services, and customer experience.
-
With your consent, to send promotional material (you may opt out at any time).
3. Legal Basis for Processing
We process personal information based on:
-
Contractual necessity – to fulfil your order.
-
Legal obligations – compliance with South African law (e.g., tax and consumer protection).
-
Legitimate interests – improving our services and preventing fraud.
-
Consent – for marketing and optional communications.
4. Sharing of Personal Information
We do not sell your personal information. We may share your data with trusted third parties only when necessary, such as:
-
Payment gateways and credit providers (for secure processing of payments).
-
Delivery providers and couriers (to complete deliveries).
-
IT, hosting, and support services (to maintain website and security).
-
Legal, regulatory, or government authorities (when required by law).
5. Data Security
We take reasonable technical and organisational measures to protect personal information from loss, misuse, unauthorised access, disclosure, alteration, or destruction. These measures include:
-
Secure servers and firewalls.
-
SSL encryption for online transactions.
-
Limited access to personal data by authorised staff only.
6. Data Retention
-
Personal information is kept only as long as necessary to fulfil the purposes outlined in this policy or as required by law.
-
Transaction and tax records may be retained for up to 5 years in compliance with South African legislation.
7. Your Rights Under POPIA
As a data subject, you have the right to:
-
Access the personal information we hold about you.
-
Request correction or deletion of inaccurate, irrelevant, or outdated information.
-
Object to the processing of your personal information.
-
Withdraw consent where processing is based on consent (e.g., marketing).
-
Lodge a complaint with the Information Regulator of South Africa if you believe your rights are being infringed.
8. Cookies & Website Usage
-
Our website may use cookies to improve your browsing experience.
-
Cookies help us analyse website traffic, store preferences, and improve functionality.
-
You may disable cookies in your browser, but some features of the site may not function properly.
9. Cross-Border Data Transfers
If personal information is transferred outside South Africa (for example, when using international hosting or service providers), we will ensure that appropriate data protection safeguards are in place, as required by POPIA.
10. Updates to This Policy
We may update this Privacy Policy from time to time. Updates will be posted on our website and will take effect immediately. We encourage you to review this policy periodically.
11. Contact Information
If you have questions about this Privacy Policy or wish to exercise your POPIA rights, please contact us:
Thanda Bantu Online (Pty) Ltd
Email: sales@thandabantuonline.co.za
Phone: 043 683 1344
Address: Alfred Street Stutterheim 4930 Eastern Cape; South Africa
