Privacy Policy

Aqua Zen (Pty) Ltd ("AquaZen", "we", "us") respects your privacy. This policy explains what personal information we collect when you use aquazenonline.co.za, why we collect it, how we protect it, and what rights you have. It is written to comply with the Protection of Personal Information Act 4 of 2013 (POPIA).

What Information We Collect

Why We Process Your Information

Who We Share It With

We share only what is necessary, and only with operators who are contractually required to protect your information:

• Our bottling and packaging partner — order contents and, for personalised orders, your artwork
• Courier companies — your name, delivery address and mobile number, so they can deliver and contact you
• Payment providers (Ozow, Peach Payments, Payfast) — the amount and order reference
• Email and hosting providers — to send notifications and run the shop
• Our accountant and SARS — where required for tax and audit purposes

We do not sell your personal information, and we do not share it with third parties for their own marketing.

Cross-Border Transfers

Some of our service providers (for example hosting and email delivery) may store data on servers outside South Africa. Where that happens, we use providers that offer a level of protection substantially similar to POPIA, as required by section 72 of the Act.

How Long We Keep It

• Order, invoice and tax records: 5 years, as required by South African tax law
• Customer account and address details: until you ask us to delete them
• Personalised artwork: 12 months after the order, so you can easily reorder
• Marketing consent records: until you unsubscribe, plus 12 months

How We Protect It

• All traffic to this website is encrypted with HTTPS/TLS
• Administrator access is password protected and limited to authorised staff
• Passwords are stored as one-way hashes, never in readable form
• Card data never touches our servers
• If a security compromise affects your personal information, we will notify you and the Information Regulator as required by section 22 of POPIA

Your Rights

Under POPIA you have the right to:

• Ask what personal information we hold about you
• Ask us to correct or delete information that is wrong, outdated or excessive
• Object to processing, and to withdraw consent for marketing at any time
• Not be subject to unsolicited direct marketing
• Complain to the Information Regulator of South Africa if you believe we have not handled your information lawfully

To exercise any of these rights, email privacy@aquazenonline.co.za. We respond within 30 days. The Information Regulator can be reached at inforeg@justice.gov.za.

Cookies

We use only the cookies needed to make the shop work: a session cookie that remembers your cart, and a secure cookie for administrator login. We do not use advertising or cross-site tracking cookies. If we add analytics in future, this policy will be updated first.

Children

Our shop is intended for customers aged 18 and over. We do not knowingly collect personal information from children without the consent of a parent or guardian.