Privacy Policy

1. Introduction

Imvula Mandla Group ("we", "us", "our") is committed to protecting your personal information in accordance with the Protection of Personal Information Act 4 of 2013 (POPIA) and other applicable South African legislation. This Privacy Policy explains how we collect, use, store, and protect your information when you use our website and services.

2. Information We Collect

We may collect the following personal information when you place an order or interact with our website:

• Identity information: Full name.
• Contact information: Email address, phone number.
• Delivery information: Estate, unit/house number, delivery notes.
• Transaction information: Order details, payment references, purchase history.
• Technical information: Browser type, IP address, and cookies for website functionality.

3. How We Use Your Information

We use your personal information for the following purposes:

• Processing and fulfilling your orders.
• Sending order confirmations, invoices, and delivery updates via email and WhatsApp.
• Communicating with you about your orders or inquiries.
• Improving our products, services, and website experience.
• Complying with legal obligations.

4. Legal Basis for Processing (POPIA)

We process your personal information on the following lawful grounds:

• Contract: Processing is necessary to fulfil your order and deliver goods to you.
• Legitimate interest: To improve our services and communicate relevant information.
• Consent: Where you have opted in to marketing communications.
• Legal obligation: Where required by South African law.

5. Information Sharing

We do not sell, rent, or trade your personal information. We may share your information with:

• Delivery personnel: Name, estate, and unit number for delivery purposes only.
• Payment processors: To verify EFT payments.
• Email/communication providers: To send order notifications (e.g., Resend, WhatsApp Business API).
• Law enforcement: If required by law or court order.

6. Data Security

We take reasonable technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. This includes encrypted communications, secure data storage, and restricted access to personal data.

7. Data Retention

We retain your personal information only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. Order records are retained for a minimum of 5 years for tax and regulatory compliance.

8. Your Rights Under POPIA

You have the right to:

• Request access to your personal information we hold.
• Request correction of inaccurate or incomplete information.
• Request deletion of your personal information (subject to legal retention requirements).
• Object to the processing of your personal information.
• Withdraw consent for marketing communications at any time.
• Lodge a complaint with the Information Regulator of South Africa.

9. Cookies

Our website uses essential cookies to enable cart functionality and remember your preferences. We do not use third-party tracking or advertising cookies. By using our website, you consent to the use of essential cookies.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated "Last updated" date. We encourage you to review this page periodically.

11. Information Officer

For any privacy-related queries, data access requests, or complaints, please contact our Information Officer:

• Email: info@imvulamandla.co.za
• Phone: 070 532 8147
• Address: Somerset West, Cape Town, South Africa

You may also contact the Information Regulator of South Africa at inforegulator.org.za.