Privacy Policy

Last updated: [PLACEHOLDER: date published]

Your privacy matters to us. This policy explains what personal information NonEntity collects, why we collect it, how we protect it, and the rights you have under the Protection of Personal Information Act 4 of 2013 (POPIA). By using nonentity.co.za you acknowledge this policy.

1. Who we are

The responsible party for your personal information is [PLACEHOLDER: registered legal entity name] (registration no. [PLACEHOLDER: company registration number]), trading as NonEntity, of [PLACEHOLDER: physical business address].

Information Officer

[PLACEHOLDER — INFORMATION OFFICER: full name, job title, email address and phone number of the person responsible for POPIA compliance. This person must be registered with the Information Regulator.]

[PLACEHOLDER — DEPUTY INFORMATION OFFICER (optional): name and contact details, or delete this line]

General privacy queries can also be sent to admin@nonentity.co.za.

2. What we collect

• Identity and contact details: name, email address, phone number, and billing and delivery addresses.
• Account details: username and password (stored encrypted), and order history.
• Order and transaction details: products bought, amounts, payment status and delivery information. We do not receive or store your full card details. Those are handled by Payfast.
• Communications: messages you send us by email, WhatsApp, phone or contact forms, including support and warranty requests.
• Technical information: IP address, browser and device type, pages visited, and cookie data, collected automatically when you use the site.
• Business details (if you buy for a business): company name and VAT number.

We don’t intentionally collect special personal information (such as health, religious or biometric information). Our store isn’t aimed at children under 18, and we don’t knowingly collect their personal information without the consent of a parent or guardian.

3. Why we use it

• To process, deliver and support your orders, returns and warranty claims (performance of a contract).
• To create and manage your account.
• To communicate with you about your orders and answer your questions.
• To prevent fraud and keep the site secure (legitimate interest).
• To meet our legal obligations, for example tax, accounting and consumer law (legal obligation).
• To improve our website, products and service (legitimate interest).
• To send you news and special offers, but only if you’ve opted in, or if you’re an existing customer and we’re marketing similar products, as section 69 of POPIA allows. Every marketing message includes a free, easy way to unsubscribe.

4. Who we share it with

We only share what’s needed, with service providers (“operators”) who must keep your information confidential and secure:

• Payfast, to process payments, including any pay-later or credit options you choose. These may involve Payfast’s credit partners, who process your information under their own privacy policies.
• The Courier Guy, to deliver your order and manage collections for returns.
• Our distribution partners, who fulfil and ship orders and handle warranty assessments. They receive the delivery and order details needed to do this.
• Website hosting, security and backup providers that run and protect our site.
• Email, analytics and marketing tools: [PLACEHOLDER: list any analytics/marketing services you use, e.g. Jetpack Stats, Google Analytics, Meta Pixel, Mailchimp; or delete]
• Authorities, such as SARS, law enforcement or regulators, where the law requires it.

We never sell your personal information.

5. Information sent outside South Africa

Some of our service providers, including our website hosting and backup provider, store data on servers outside South Africa, including in the United States. Where this happens, we make sure, as section 72 of POPIA requires, that the recipient is bound by laws, binding corporate rules or agreements that give your information a level of protection substantially similar to POPIA.

6. Cookies

We use cookies and similar technologies to keep your cart and login working (essential cookies), remember your preferences, and understand how the site is used (analytics). You can block or delete cookies in your browser settings, but some parts of the site, such as the cart and checkout, may not work without essential cookies. [PLACEHOLDER: if you add a cookie consent banner or marketing pixels, describe them here]

7. How we protect it

We use reasonable technical and organisational measures to protect your information. These include SSL/TLS encryption across the site, secure payment processing through Payfast, access controls, strong passwords, security monitoring and regular backups. No system is 100% secure, though. If a security compromise affects your personal information, we’ll notify you and the Information Regulator as POPIA requires.

8. How long we keep it

We keep personal information only as long as we need it for the purposes above, or as long as the law requires. For example, we keep order and invoice records for at least five years for tax purposes. When information is no longer needed, we delete it or de-identify it. [PLACEHOLDER: optional specific retention periods, e.g. inactive accounts deleted after X years]

9. Your rights

Under POPIA you have the right to:

• ask whether we hold your personal information, and request a copy of it;
• ask us to correct or update inaccurate or incomplete information;
• ask us to delete or destroy information we no longer have a lawful reason to keep;
• object to us processing your information, including for direct marketing, at any time;
• withdraw consent you’ve given, without affecting processing done before you withdrew it;
• lodge a complaint with the Information Regulator.

To exercise any of these rights, contact our Information Officer (details above) or email admin@nonentity.co.za. We may need to verify your identity first. We’ll respond within a reasonable time and won’t charge you for reasonable requests. Formal access requests are handled under our PAIA manual: [PLACEHOLDER: link to your PAIA manual, or “available on request”].

The Information Regulator (South Africa)

If you’re unhappy with how we’ve handled your information, please let us know first so we can try to fix it. You can also complain to the Information Regulator at inforegulator.org.za.

10. Changes to this policy

We may update this policy from time to time. The latest version will always be on this page, with the “last updated” date at the top. If we make significant changes, we’ll let you know by email or with a notice on the site.

11. Contact

Email admin@nonentity.co.za · Phone +27 87 163 5756 · WhatsApp +27 71 979 7182 · Postal/physical address: [PLACEHOLDER: physical business address]