Privacy Policy

1.1 Personal Information

We collect the following personal information when you use our services:

• Identity Information: Full name, company name, identification numbers (for business verification)
• Contact Information: Email address, phone number, physical and postal addresses
• Financial Information: Banking details for payments, VAT registration numbers
• Transaction Information: Order history, payment records, delivery information
• Account Information: Username, password (encrypted), account preferences
• Business Information: Company registration details, tax information, reseller credentials

1.2 Technical Information

• IP address, browser type, device information
• Usage data, browsing patterns, session information
• Cookies and similar tracking technologies

We process your personal information for the following purposes:

• Order Processing: To fulfill your orders, process payments, and arrange delivery
• Account Management: To create and manage your customer or reseller account
• Communication: To send order updates, respond to inquiries, and provide customer support
• Marketing: To send promotional materials (with your consent, which can be withdrawn)
• Business Operations: To manage reseller relationships, calculate commissions, and maintain records
• Legal Compliance: To comply with South African tax, financial, and business regulations
• Fraud Prevention: To detect and prevent fraudulent transactions and protect our business

Under POPIA, we process your personal information based on:

• Consent: You have given clear consent for specific purposes (e.g., marketing communications)
• Contractual Necessity: Processing is necessary to fulfill our contract with you (e.g., order fulfillment)
• Legal Obligation: Required by South African law (e.g., tax records, financial regulations)
• Legitimate Interests: Necessary for our business operations while respecting your rights

We may share your information with:

• Service Providers: Payment processors (PayFast), courier services, email providers
• Business Partners: Manufacturers and suppliers (only information necessary for order fulfillment)
• Professional Advisors: Lawyers, accountants, auditors (under confidentiality obligations)
• Regulatory Authorities: SARS, CIPC, and other government bodies when legally required
• Law Enforcement: When required by law or to protect our legal rights

We do not sell your personal information to third parties.

You have the following rights regarding your personal information:

• Right of Access: Request a copy of your personal information we hold
• Right to Correction: Request correction of inaccurate or incomplete information
• Right to Deletion: Request deletion of your personal information (subject to legal retention requirements)
• Right to Object: Object to processing for direct marketing or legitimate interests
• Right to Restrict Processing: Request limitation of processing in certain circumstances
• Right to Data Portability: Receive your information in a structured, commonly used format
• Right to Lodge a Complaint: File a complaint with the Information Regulator

To exercise your rights, contact our Information Officer at privacy@retrocraft.co.za

We implement appropriate technical and organizational measures to protect your personal information:

• Encryption of sensitive data in transit and at rest
• Secure data centers with restricted physical access
• Regular security audits and vulnerability assessments
• Employee training on data protection and confidentiality
• Access controls and authentication mechanisms
• Regular data backups and disaster recovery procedures

We retain your personal information for as long as necessary to:

• Provide our services and maintain your account
• Comply with legal obligations (e.g., tax records for 5 years as required by SARS)
• Resolve disputes and enforce our agreements
• Support business operations and historical analysis

Upon account closure or deletion request, we will delete or anonymize your information within 30 days, except where retention is required by law.

Information Officer:

Information Regulator (South Africa):