GELDHOF CHOCOLATES PRIVACY POLICY 1. INTRODUCTION Welcome to the Geldhof Chocolates Privacy Policy. This policy applies to all users of our website, related mobile sites, and software applications (collectively referred to as “our Platforms”). The purpose of this Privacy Policy is to outline how, why, and when Geldhof Chocolates (“Geldhof,” “we,” “us,” or “our”) collects, uses, and processes your personal information in compliance with the Protection of Personal Information Act 4 of 2013 (“POPIA”). Please ensure that you read this Privacy Policy together with any other relevant terms and conditions, privacy notices, or policies we may provide when collecting or processing your personal information. 2. ACCEPTANCE AND CONSENT By accessing or using our Platforms, you agree to the processing of your personal information as outlined in this Privacy Policy. If you do not agree with the terms, please refrain from using our Platforms. Cookies that are not needed to run the site are only used with your permission, as set out in section 7. 3. DEFINITIONS •“Personal Information” and “process/processing” have the same meanings as defined in POPIA. •“You” and “your” refer to anyone accessing or using our Platforms. •“Registered user(s)” refers to individuals who have registered on our Platforms by providing a unique email address, password, and other personal information to place orders for our products and services. 4. COLLECTION AND PROCESSING OF PERSONAL INFORMATION We collect and process personal information in a manner that is lawful, adequate, relevant, and not excessive. The types of personal information we may collect include: •Full name and surname •Email address •Physical address •Gender •Mobile phone number •Online identifiers (e.g., IP address) •Date of birth •Identification number •Banking details (if applicable for processing payments) We process this personal information for various purposes, including but not limited to: •Account creation and management: To create and manage your user account. •Order fulfillment: To process and deliver orders, handle returns, and communicate with you regarding your purchases. •Communication: To notify you of changes to our Platforms, services, products, terms and conditions, and to provide customer support. •Legal compliance: To comply with any legal or regulatory obligations. 5. SIGNING IN WITH GOOGLE Our Platforms allow you to create an account or sign in using your Google account (“Google Sign-In”) instead of choosing a password with us. This is optional — you may register and sign in with an email address and password instead. If you choose to use Google Sign-In: •Google asks for your permission before sharing anything with us, and shows you what will be shared. •We receive from Google only your name, your email address, your Google profile picture and a unique Google account identifier. We do not receive your Google password, and we have no access to your Gmail, Drive, contacts, calendar or any other Google service. •We use this information solely to create and identify your Geldhof account, to sign you in, and to communicate with you about your orders. We do not use it for advertising, and we do not sell or share it, as set out in section 8. •This information is stored with the rest of your account information and retained in line with section 6. •If an account already exists on our Platforms under the same email address, your Google account is linked to that existing account rather than a new one being created. •Google’s own handling of your information is governed by the Google Privacy Policy at policies.google.com/privacy. You may revoke our access to your Google account at any time at myaccount.google.com/permissions. Doing so does not delete your Geldhof account, but you will need a password with us in order to sign in afterwards. 6. RETENTION OF PERSONAL INFORMATION We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, to comply with legal obligations, or as permitted by law. Once the purpose for which the personal information was collected has been fulfilled, we will either delete or anonymize the information, or retain it only in a form that does not allow identification of individuals, unless otherwise required by law. 7. COOKIES AND TRACKING TECHNOLOGIES Cookies are small text files stored on your device. When you first visit our Platforms, we ask which cookies you allow. We only use cookies that are not needed to run the site if you say yes. Cookies we always use (needed for the shop). These keep your cart, your login, checkout and payment working. The site cannot work without them, so they cannot be switched off. Site visits (only with your permission). Google Analytics and WordPress.com (Jetpack) statistics tell us which pages people visit and how they use the site, so we can improve it. Advertising (only with your permission). Google Ads, and a note of where you came to us from (for example a Google search or Instagram), help us see which adverts work and show our adverts to people likely to enjoy them. Your choice. You can accept all, reject all, or choose. Rejecting cookies does not stop you from browsing or buying. You can change your choice at any time with the Cookie Settings link at the bottom of every page. We ask again after 12 months, or sooner if this section changes. What we keep as a record of your choice. When you make a choice, we keep a receipt number, what you chose, the date and time, and your IP address with its last part removed (for example 102.65.14.xxx), so that the full address is never stored. Your receipt number is also saved on your device and is shown under Cookie Settings. We keep these records for 3 years and then delete them. Google. Google’s handling of information from these cookies is governed by the Google Privacy Policy at policies.google.com/privacy. 8. THIRD-PARTY DISCLOSURE We do not sell your personal information to third parties. However, we may share your information with: •Service providers: Third-party service providers who assist us with business operations, such as payment processing, order fulfillment, and IT services. These providers are contractually obligated to use your personal information only for the purposes for which it was provided and to protect its confidentiality. •Legal and regulatory authorities: When required by law, we may disclose your personal information to law enforcement or other government authorities. 9. TRANSFERS OF PERSONAL INFORMATION OUTSIDE SOUTH AFRICA We may transfer your personal information outside the geographic borders of South Africa to service providers or for data storage purposes. When transferring personal information internationally, we ensure that the receiving party is subject to binding obligations to protect your information in line with POPIA. 10. SECURITY OF PERSONAL INFORMATION We take the security of your personal information seriously and have implemented appropriate technical and organizational measures to protect it from unauthorized access, loss, or damage. These measures include secure storage, encryption, access controls, and regular security assessments. However, please note that no security system is impenetrable, and we cannot guarantee the absolute security of your information. 11. YOUR RIGHTS Under POPIA, you have the right to: •Access your personal information: Request a copy of the personal information we hold about you. •Correct your personal information: Request corrections to any inaccuracies in your personal information. •Delete your personal information: Request the deletion of your personal information, subject to certain conditions. •Object to processing: Object to the processing of your personal information in certain circumstances. •Withdraw consent: Withdraw your consent to the processing of your personal information, where consent is the basis for processing. To exercise your rights, please contact us using the details provided below. 12. CHANGES TO THIS PRIVACY POLICY We may update this Privacy Policy from time to time. Any changes will be posted on this page, and the updated policy will be effective as soon as it is published. We encourage you to review this policy periodically to stay informed about how we protect your personal information. 13. CONTACT US If you have any questions, concerns, or requests regarding this Privacy Policy, please contact us at: Contact form: geldhofchocolates.com/contactus Phone: +27 (0)11 792 8346 Address: Unit C1, Mikro Industrial Park, 17-19 Hammer Ave, Strydom Park, Randburg, Johannesburg, South Africa 14. COMPLAINTS If you believe that we have not complied with this Privacy Policy or POPIA, you may lodge a complaint with the Information Regulator: Website: https://inforegulator.org.za/ Email: enquiries@inforegulator.org.za Phone: +27 (0)10 023 5200