‎

1. Who This Policy Covers

This policy applies to anyone who visits our website, creates an account, places an order, contacts our support team, or otherwise shares personal information with CoffeeOnTheGo.

2. Information We Collect

We collect only what's needed to run our store and support you as a customer:

• Contact details — full name, email address, phone number, and delivery address
• Order details — items purchased, order value, and order history
• Payment confirmation data — limited to what our payment gateway returns to us (e.g. transaction status and reference number); we do not receive or store your full card number
• Support correspondence — the content of emails or messages you send us
• Technical data — IP address, browser type, and basic site-usage data collected automatically via cookies (see Section 6)

3. Why We Collect It

We use your personal information only for the following purposes:

• Processing and fulfilling your order, including shipping and delivery
• Communicating with you about your order status, or in response to a support request
• Detecting and preventing fraud or misuse of our website
• Meeting our legal and accounting obligations
• Improving our website and product offering based on aggregate, non-identifying usage patterns

We do not use your personal information for automated decision-making that produces legal or similarly significant effects on you.

4. Who We Share It With

We do not sell, rent, or trade your personal information. We only share it with the following categories of third parties, and only to the extent needed for them to provide their service to us:

We may also disclose personal information where required by law, such as in response to a valid request from a South African regulatory or law enforcement authority.

5. Payment Information

All payments are processed through a secure, PCI-DSS compliant third-party payment gateway. Your card number, expiry date, and CVV are entered directly with our payment provider and are never transmitted to or stored on our own servers.

6. Cookies & Tracking

Our website uses cookies and similar technologies to keep your cart working correctly, remember your preferences, and understand basic site performance (such as which pages are visited most). You can disable cookies in your browser settings, though some parts of the site — such as checkout — may not function correctly without them.

7. How Long We Keep Your Data

We retain order and transaction records for as long as necessary to meet our accounting, tax, and legal obligations under South African law, and to handle any warranty, return, or dispute related to your order. Support correspondence is retained only as long as reasonably needed to resolve your query and for our records. You may request earlier deletion of your data as described in Section 9, subject to any legal retention requirements we must comply with.

8. How We Protect Your Data

We take reasonable technical and organizational measures to protect your personal information against loss, unauthorized access, misuse, or disclosure, including restricting access to personal information to those who need it to fulfil your order or respond to your query, and relying on reputable, secure third-party providers for payments and hosting.

No method of transmission over the internet is completely secure; while we work to protect your information, we cannot guarantee absolute security.

9. Your Rights Under POPIA

Under the Protection of Personal Information Act, you have the right to:

• Request access to the personal information we hold about you
• Request correction of any inaccurate or outdated information
• Request deletion of your personal information, subject to any legal retention obligations
• Object to the processing of your personal information in certain circumstances
• Lodge a complaint with the Information Regulator of South Africa if you believe your information has been mishandled

To exercise any of these rights, contact us using the details in Section 12. We will respond within a reasonable time and, where required, within the timeframes set out under POPIA.

10. Children's Privacy

Our website and products are not directed at children, and we do not knowingly collect personal information from anyone under the age of 18 without the consent of a parent or guardian, as required under POPIA. If you believe a child has provided us with personal information, please contact us and we will delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. Any changes will be posted on this page with a revised "last updated" date. We encourage you to review this page periodically.

12. Information Officer & Contact

Under POPIA, every organization that processes personal information must designate an Information Officer responsible for compliance. For CoffeeOnTheGo, as a sole proprietorship, this role is held by the owner.