Privacy Policy

Effective Date: 15 July 2025
Last Updated: 15 July 2025

RevoNutrition (Pty) Ltd (“RevoNutrition”, “we”, “us”, or “our”) is committed to protecting your privacy and personal information in accordance with the Protection of Personal Information Act 4 of 2013 (POPIA) and other applicable South African privacy laws.

This Privacy Policy explains how we collect, use, store, share, and protect your personal information when you use our website (www.revonutrition.co.za), mobile applications, or interact with our services (collectively, the “Services”).

1. Information We Collect

1.1 Personal Information You Provide

We collect personal information that you voluntarily provide to us, including:

Account and Contact Information:

• Full name and preferred name
• Email address
• Phone number (mobile and landline)
• Date of birth (for age verification)
• Gender (optional)

Address Information:

• Delivery addresses (current and historical)
• Billing addresses
• Business addresses (if applicable)

Payment Information:

• Payment method preferences
• Billing information
• Transaction history
• Order history and preferences

Communication Information:

• Content of messages you send to us
• Customer service interactions
• Survey responses
• Review and feedback submissions
• Newsletter and marketing preferences

1.2 Information Automatically Collected

When you use our Services, we automatically collect:

Technical Information:

• IP address and geolocation data
• Browser type and version
• Operating system
• Device type and model
• Screen resolution
• Referring website
• Time zone and language settings

Usage Information:

• Pages visited and time spent
• Click patterns and navigation paths
• Search queries and filters used
• Products viewed and purchase behavior
• Session duration and frequency of visits
• Error logs and performance data

Cookies and Tracking Technologies:

• Essential cookies for site functionality
• Analytics cookies for usage statistics
• Preference cookies for personalization
• Marketing cookies for targeted content
• Social media cookies (if applicable)

1.3 Information from Third Parties

We may receive information from:

• Payment processors (Paystack)
• Courier and delivery services
• Social media platforms (if you connect accounts)
• Marketing and analytics providers
• Fraud prevention services
• Customer review platforms

2. How We Use Your Information

2.1 Primary Purposes

We use your personal information for:

Order Processing and Fulfillment:

• Processing and confirming orders
• Payment processing and fraud prevention
• Inventory management
• Shipping and delivery coordination
• Order tracking and status updates
• Returns and refunds processing

Customer Service:

• Responding to inquiries and support requests
• Resolving complaints and disputes
• Providing product information and recommendations
• Account management and maintenance
• Technical support and troubleshooting

Legal and Regulatory Compliance:

• Compliance with POPIA and other applicable laws
• Tax reporting and record-keeping
• Responding to legal requests and court orders
• Protecting our rights and interests
• Preventing fraud and abuse

2.2 Secondary Purposes (With Consent)

With your explicit consent, we may use your information for:

Marketing and Communications:

• Sending newsletters and promotional emails
• Providing product updates and announcements
• Personalized product recommendations
• Special offers and discounts
• Event invitations and notifications

Analytics and Improvement:

• Website usage analysis and optimization
• Product development and improvement
• Customer experience enhancement
• Market research and trend analysis
• A/B testing and personalization

Social Media and Community:

• Sharing reviews and testimonials
• Social media interactions
• Community building activities
• User-generated content campaigns

2.3 Automated Decision Making

We may use automated processing for:

• Fraud detection and prevention
• Risk assessment for payments
• Personalized product recommendations
• Website personalization
• Customer segmentation for marketing

You have the right to object to automated decision-making that significantly affects you.

3. Information Sharing and Disclosure

3.1 No Sale or Rent

We do not sell, rent, or trade your personal information to third parties for their marketing purposes.

3.2 Authorized Sharing

We may share your information with:

Service Providers:

• Payment processors (Paystack) for transaction processing
• Courier services for delivery and logistics
• Cloud hosting providers for data storage
• Email service providers for communications
• Analytics providers for website optimization
• Customer support platforms
• Marketing automation tools (with consent)

Business Partners:

• Suppliers and manufacturers (for product fulfillment)
• Affiliated companies within our corporate group
• Professional advisors (lawyers, accountants, auditors)

Legal Requirements:

• Law enforcement agencies (when legally required)
• Courts and regulatory authorities
• Government agencies for compliance purposes
• Legal proceedings and dispute resolution
• Protection of rights, property, and safety

3.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the new entity, subject to the same privacy protections.

3.4 Anonymized Information

We may share anonymized, aggregated information that cannot identify you for research, analytics, and business purposes.

4. Your Rights Under POPIA

4.1 Access Rights

You have the right to:

• Request confirmation of what personal information we hold
• Access your personal information
• Receive a copy of your information in a structured format
• Understand how your information is processed

4.2 Correction Rights

You have the right to:

• Correct inaccurate personal information
• Update incomplete information
• Request amendments to your data
• Ensure information accuracy and completeness

4.3 Deletion Rights

You have the right to request deletion of your personal information when:

• It’s no longer necessary for the original purpose
• You withdraw consent and no other legal basis applies
• Information was unlawfully processed
• Deletion is required for legal compliance

4.4 Restriction and Objection Rights

You have the right to:

• Restrict processing of your information
• Object to processing for direct marketing
• Object to automated decision-making
• Withdraw consent at any time

4.5 Portability Rights

You have the right to:

• Receive your data in a portable format
• Transfer your data to another service provider
• Request direct transfer when technically feasible

4.6 Exercising Your Rights

To exercise your rights:

1. Email: sa@gmail.com
2. Subject Line: “Data Protection Request – [Your Name]”
3. Include: Your full name, email address, and specific request
4. Response Time: We will respond within 30 days
5. Verification: We may require identity verification

4.7 Complaints

If you’re unsatisfied with our response, you may lodge a complaint with:

• Information Regulator of South Africa
• Website: justice.gov.za/inforeg
• Email: IR@justice.gov.za

5. Cookies and Tracking Technologies

5.1 Types of Cookies

We use several types of cookies:

Essential Cookies:

• Required for website functionality
• Enable basic features like page navigation
• Remember your preferences during sessions
• Cannot be disabled without affecting site performance

Analytics Cookies:

• Track website usage patterns
• Measure site performance
• Identify popular content
• Help us improve user experience

Preference Cookies:

• Remember your settings and preferences
• Personalize your experience
• Store language and region settings
• Maintain shopping cart contents

Marketing Cookies:

• Deliver targeted advertisements
• Measure marketing campaign effectiveness
• Track cross-site behavior
• Enable social media features

5.2 Cookie Management

You can manage cookies through:

• Browser settings and preferences
• Cookie consent management tools
• Opt-out links in marketing emails
• Third-party cookie opt-out services

Note: Disabling certain cookies may affect website functionality and user experience.

5.3 Third-Party Tracking

We may use third-party tracking services for:

• Google Analytics for website analytics
• Facebook Pixel for marketing
• Payment processor tracking
• Fraud prevention services

6. Data Security and Protection

6.1 Security Measures

We implement appropriate technical and organizational measures:

Technical Safeguards:

• Encryption of data in transit and at rest
• Secure server infrastructure
• Regular security updates and patches
• Access controls and authentication
• Intrusion detection and prevention systems
• Regular security audits and assessments

Organizational Safeguards:

• Staff training on data protection
• Access controls and need-to-know basis
• Regular policy reviews and updates
• Incident response procedures
• Vendor security assessments
• Data protection impact assessments

6.2 Payment Security

• All payment processing is handled by Paystack
• We do not store complete credit card information
• PCI DSS compliance for payment handling
• Fraud detection and prevention measures
• Secure payment gateway integration

6.3 Data Breach Response

In the event of a data breach:

• We will assess the risk and impact
• Notify affected individuals within 72 hours (if high risk)
• Report to the Information Regulator as required
• Implement remedial measures
• Provide guidance on protective actions

7. Data Retention and Deletion

7.1 Retention Periods

We retain personal information for:

Account Information: Until account closure plus 7 years for legal requirements Order History: 7 years for tax and accounting purposes Marketing Data: Until consent is withdrawn or 5 years of inactivity Customer Service Records: 3 years after resolution Website Analytics: 26 months (anonymized after 14 months) Payment Information: As required by payment processors and law

7.2 Deletion Procedures

We will delete your information when:

• Retention period expires
• You request deletion (where legally permissible)
• Information is no longer necessary
• Legal basis for processing no longer exists

7.3 Backup and Archive Systems

Deleted information may persist in backup systems for up to 90 days before permanent deletion.

8. International Data Transfers

8.1 Data Location

Your personal information is primarily stored and processed in South Africa. Some service providers may process data internationally.

8.2 Transfer Safeguards

When transferring data internationally, we ensure:

• Adequate protection measures are in place
• Appropriate safeguards are implemented
• Compliance with POPIA requirements
• Contractual protections with service providers

9. Children’s Privacy

9.1 Age Restrictions

Our Services are not intended for persons under 18 years of age. We do not knowingly collect personal information from minors.

9.2 Parental Consent

If we become aware that we have collected information from a minor:

• We will delete the information promptly
• We will not use the information for any purpose
• We will implement additional safeguards

9.3 Parental Rights

Parents or guardians may:

• Request access to their child’s information
• Request deletion of their child’s information
• Object to processing of their child’s information
• Contact us at sa@gmail.com

10. Third-Party Services

10.1 Third-Party Websites

Our Services may contain links to third-party websites. We are not responsible for their privacy practices. Please review their privacy policies before providing information.

10.2 Social Media Integration

If you connect social media accounts:

• We may receive information from these platforms
• Your interactions may be governed by their privacy policies
• You can disconnect these accounts at any time

10.3 Service Provider Obligations

All third-party service providers must:

• Comply with POPIA requirements
• Implement appropriate security measures
• Process data only for specified purposes
• Maintain confidentiality of information

11. Marketing and Communications

11.1 Consent-Based Marketing

We will only send marketing communications with your explicit consent through:

• Opt-in forms on our website
• Email subscription preferences
• Account settings and preferences
• Explicit consent during checkout

11.2 Types of Communications

With your consent, we may send:

• Product updates and announcements
• Special offers and promotions
• Newsletter and educational content
• Event invitations and notifications
• Personalized recommendations

11.3 Unsubscribe Options

You can unsubscribe from marketing communications:

• Using unsubscribe links in emails
• Updating your account preferences
• Contacting us directly
• Through our customer service team

Note: You cannot unsubscribe from transactional communications (order confirmations, shipping updates, etc.).

12. Updates to This Privacy Policy

12.1 Policy Changes

We may update this Privacy Policy periodically to reflect:

• Changes in our practices
• Legal and regulatory requirements
• New features or services
• Feedback from users

12.2 Notification of Changes

When we make significant changes:

• We will update the “Last Updated” date
• We will notify you by email (if you have consented)
• We will post prominent notices on our website
• We may request renewed consent for new purposes

12.3 Continued Use

Your continued use of our Services after changes indicates acceptance of the updated Privacy Policy.

13. Contact Information

13.1 Data Protection Officer

RevoNutrition (Pty) Ltd
Attention: Data Protection Officer
Banghoek Rd & Bosman St
Central, Stellenbosch
Western Cape, 7600
South Africa

13.2 Contact Methods

Email: revonutrition.sa@gmail.com
Subject Line: “Privacy Policy Inquiry – [Your Name]”
Website: www.revonutrition.co.za
Response Time: Within 30 days of receipt

13.3 Complaints and Concerns

For privacy-related complaints or concerns:

1. Contact us directly using the information above
2. Allow 30 days for investigation and response
3. If unsatisfied, contact the Information Regulator of South Africa

14. Regulatory Compliance

14.1 POPIA Compliance

This Privacy Policy is designed to comply with the Protection of Personal Information Act 4 of 2013 (POPIA) and its regulations.

14.2 Other Applicable Laws

We also comply with:

• Electronic Communications and Transactions Act 25 of 2002
• Consumer Protection Act 68 of 2008
• Promotion of Access to Information Act 2 of 2000
• Applicable international privacy laws

14.3 Regular Reviews

We regularly review our privacy practices to ensure ongoing compliance with applicable laws and regulations.

By using our Services, you acknowledge that you have read, understood, and agree to this Privacy Policy. This policy is effective as of the date listed above and applies to all information collected by RevoNutrition (Pty) Ltd.