Privacy policy
1. Introduction
H.G. Bava CC, registration number CK2018/532354/07 ("HG Bava", "we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and disclose your personal information when you visit or make a purchase on www.hgbavaco.co.za (the "Website"), in accordance with the Protection of Personal Information Act, 4 of 2013 ("POPIA").
By using the Website, you consent to the collection and use of your personal information as described in this Privacy Policy.
2. Information We Collect
We may collect the following personal information:
Contact details: name, delivery address, billing address, phone number, email address
Payment information: processed securely through PayFast, Payflex, PayJustNow or bank transfer — we do not store your full card details
Order information: items purchased, order history, delivery preferences
Account information: if you create an account, your login details and preferences
Communications: any information you share when contacting us for support or enquiries
Technical information: IP address, browser type, and device information, collected automatically through cookies and similar technologies
3. How We Use Your Information
We use your personal information to:
Process and fulfil your orders, including arranging delivery
Communicate with you about your order, account, or enquiries
Process payments securely through our payment partners
Improve our Website and product offering
Send you marketing communications, where you have consented to receive them (you may opt out at any time)
Comply with our legal and regulatory obligations, including under the Consumer Protection Act and tax legislation
4. Legal Basis for Processing
We process your personal information based on: your consent, the necessity to perform our contract with you (fulfilling your order), our legal obligations, and our legitimate business interests, in each case as permitted under POPIA.
5. Sharing Your Information
We may share your personal information with:
Payment providers (PayFast, Payflex, PayJustNow) to process your payment securely
Courier and delivery partners to fulfil and deliver your order
Shopify, our e-commerce platform provider, which hosts the Website and processes data on our behalf
Service providers who support our business operations (e.g. email and marketing tools)
Meta (Facebook and Instagram), to power personalized advertising and measure ad performance. We use Meta Pixel, Advanced Matching, and Conversions API to share certain customer activity data (such as pages viewed, products added to cart, and purchases made) with Meta. You can control how your data is used for advertising by adjusting your Off-Facebook Activity settings in your Facebook account.
Legal and regulatory authorities, where required by law
We do not sell your personal information to third parties.
6. Cookies
Our Website uses cookies to improve your browsing experience, remember your preferences, and understand how visitors use our site. You can control cookie settings through your browser, though disabling cookies may affect certain Website features.
7. Data Security
We take reasonable technical and organisational measures to protect your personal information against loss, unauthorised access, alteration, or disclosure. All payment transactions are encrypted using industry-standard SSL/TLS encryption. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.
8. Data Retention
We retain your personal information for as long as necessary to fulfil the purposes described in this Privacy Policy, including to comply with our legal, accounting, and tax obligations.
9. Your Rights Under POPIA
As a data subject under POPIA, you have the right to:
Request access to the personal information we hold about you
Request correction of inaccurate or incomplete information
Request deletion of your personal information, subject to our legal retention obligations
Object to the processing of your personal information for direct marketing purposes
Withdraw consent, where processing is based on consent
Lodge a complaint with the Information Regulator of South Africa if you believe your rights under POPIA have been infringed
To exercise any of these rights, please contact us using the details below.
10. Children's Information
Our Website is not directed at children, and we do not knowingly collect personal information from children under the age of 18 without parental or guardian consent.
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The updated policy will be posted on this page with a revised "Last updated" date.
12. Contact Us
For any questions about this Privacy Policy or to exercise your rights under POPIA, please contact us:
Email: info@hgbavaco.co.za
Phone: 015 292 1628
Physical address: 57 Nelson Mandela Dr, Superbia, Polokwane, 0699, South Africa
If you are not satisfied with our response, you may lodge a complaint with the Information Regulator (South Africa):
Website: www.justice.gov.za/inforeg
Email: complaints.IR@justice.gov.za