Privacy Policy & Popia Notice

DEVICE SHOP – PRIVACY & POPIA NOTICE

  1. Who we are

This Privacy & POPIA Notice explains how Device Shop (Pty) Ltd (“Device Shop”, “we”, “us”) collects, uses and protects personal information in South Africa in terms of the Protection of Personal Information Act 4 of 2013 (POPIA).

  1. What we collect

Depending on how you interact with us, we may collect:

  • Identification & contact: name, company, email, phone, delivery/billing address, VAT number.
  • Order & payment info: items bought, invoice details, payment method (we don’t store full card details if a payment gateway is used).
  • Account / comms: emails you send us, support queries, marketing preferences.
  • Technical data: IP address, device/browser info, pages viewed, referral source, approximate location.
  • Courier/delivery data: delivery instructions, contact for the parcel.
  1. How we collect it
  • Directly from you (checkout, contact forms, email, phone).
  • Automatically via the website (cookies, analytics, security logs).
  • From third parties we work with (couriers, payment providers) – only what we need.
  1. Why we collect it (purposes)

We process personal information to:

  1. Take and fulfil your order (process payment, deliver, communicate status).
  2. Provide customer/service support (warranty, returns, after-sales).
  3. Run and secure our website (prevent abuse, troubleshoot).
  4. Improve our products and marketing (analytics, performance).
  5. Send you relevant offers about Device Shop products and services (you can opt out).
  6. Comply with South African law (tax, accounting, consumer law).
  1. Our legal basis (POPIA grounds)

We rely on one or more of these grounds:

  • Performance of a contract – we need the info to supply what you bought.
  • Compliance with law – we must keep some records.
  • Legitimate interests – to run our business, prevent fraud, improve service.
  • Consent – mainly for marketing where consent is required.
  1. Who we share with

We do not sell your personal information. We may share it with:

  • Couriers / logistics partners – to deliver your order.
  • Payment processors / banks – to process or verify payment.
  • IT / hosting / security providers – to keep the site running.
  • Related / affiliated entities in the Device Shop group (C2Kit, Africa PC, Device SA) for legitimate business purposes.
  • Regulators / law enforcement – if we are legally required to.

They only get what they need to do their job.

  1. Cross-border transfers

Some service providers may store or process information outside South Africa. Where we do this, we take reasonable steps to ensure there is an adequate level of protection or appropriate safeguards in place.

  1. Security

We use reasonable technical and organisational measures to protect personal information (access control, passwords, secure hosting). No system is 100% secure, but we work to limit unauthorised access, loss or misuse.

  1. How long we keep it

We keep personal information only as long as necessary for the purpose it was collected, or as long as we are required to keep it by law (for example tax / accounting retention periods), and then we delete or de-identify it.

  1. Your rights (POPIA)

You may:

  1. Ask what information we hold about you.
  2. Ask us to correct or update your information.
  3. Object to certain processing (for example, direct marketing).
  4. Withdraw consent (where consent was the basis).
  5. Complain to the Information Regulator if you believe we are not complying.

To exercise these rights, email: [email protected] (or your usual Device Shop email if you prefer).

  1. Marketing

We may send you emails / WhatsApps / SMSs about our stock, specials and refurbished gear because you bought from us or asked for it. You can opt out at any time by using the unsubscribe option in the message or by emailing us.

  1. Cookies

We use essential cookies to make the site work (cart, login, checkout), and we may use analytics cookies to understand how the site is used. You can block cookies in your browser, but some features may not work. For more detail, see our Cookies page.

  1. Links to other sites

Our website may link to other sites (payment gateways, couriers, partners). They have their own privacy policies. We are not responsible for their content or practices.

  1. Children

We do not knowingly collect personal information from children. If you believe we have, contact us and we will remove it.

  1. Changes to this Notice

We may update this Privacy & POPIA Notice from time to time. The current version will always be on the website and will apply to new interactions with us.

  1. Contact

Device Shop (Pty) Ltd
6 Burke Street, Kensington B, Randburg, 2194
Tel: +27 10 001 4204
Email: [email protected]