Privacy Policy
Plus 92 Computers & Services (Pty) Ltd t/a Gateway IT Solution (Registration: 2012/100508/07), hereinafter referred to as “onlinestore247.co.za" is committed to upholding the highest standards in the protection of your personal information. This commitment extends to the processing of your personal information through your utilization of our Services, engagement with our website http://www.onlinestore247.co.za, or any affiliated blogs, websites, applications, or platforms (collectively referred to as "the Website"). Additionally, providing us with your personal information through any other means prompts the application of this dedicated and comprehensive Privacy Policy. This Policy has been formulated to provide you with a thorough understanding of how we secure your personal information and uphold your privacy.
Kindly ensure that you thoroughly peruse all the stipulations outlined below, as well as any additional rules and policies of Syntech that may be applicable and periodically presented to you. This is imperative for a comprehensive understanding of both your rights and responsibilities, as well as ours.
1.1. Objective of this Privacy Policy
1.1.1. The purpose of this Privacy Policy is to furnish you with details regarding the acquisition and handling of your personal data by onlinestore247.co.za. This encompasses any form of interaction with onlinestore247.co.za, such as contracting, correspondence, utilization of services, access to or usage of the Website, or submission of personal information through various channels (e.g., online purchases, survey participation, event involvement, newsletter subscriptions).
onlinestore247.co.za shall take all reasonable steps to protect the personal information of users. For the purpose of this clause, "personal information" shall be defined as detailed in the Promotion of Access to Information Act 2 of 2000 (PAIA) and as amended lately in 2013. The PAIA may be accessed on:
https://www.justice.gov.za/legislation/acts/2000-0...
1.1.2. This Privacy Policy adheres to and facilitates compliance with the obligations stipulated in the South African Protection of Personal Information Act, No. 4 of 2013 ("POPI"), as amended.
1.1.2.1. Users holding citizenships outside the jurisdiction of South Africa are advised that Onlinestore247.co.za operates in conformity with South African data protection laws while processing personal information in connection with its services, given its status as a South African entity in the South African market. For clarification on the potential applicability of foreign laws to your use of the Services and/or the Website, and how your personal information may be processed, kindly contact Onlinestore247.co.za at info@onlinestore247.co.za, where engagement on its application and your associated rights will be willingly addressed.
1.1.3. It is imperative that you review this Privacy Policy in conjunction with any additional privacy policy or fair processing notice presented on specific occasions when collecting or processing your personal data. This ensures a comprehensive understanding of the purposes and mechanisms behind the utilization of your data. This Privacy Policy supplements other notices and is not intended to supersede them.
1.1.4. It is explicitly stated that we do not engage in the processing of special categories of personal data or data pertaining to minors. Kindly refrain from providing such information, as its submission will be considered an immediate and automatic material breach of these terms.
1.2. Responsible Party and Operator
1.2.1. onlinestore247.co.za assumes the role of the "Responsible Party" and is accountable for the processing operations related to your personal data when we make decisions about such processing. Additionally, we may function as an "Operator" of personal data on behalf of a third-party Responsible Party. In such cases, the privacy terms of the respective Responsible Party will apply, and we will duly bring your attention to them when applicable.
1.2.2. For inquiries regarding this Privacy Policy or to exercise your legal rights, kindly contact our representative using the provided details below.
1.3. Our Contact Details
1.3.1. Our complete information is as follows:
1.3.2. You retain the right to file a complaint with the South African regulator's office (Information Regulator's Office of South Africa) at any time. However, we would appreciate the opportunity to address your concerns before you approach any regulatory authority. Therefore, please contact us in the first instance.
1.4. Changes to the Privacy Policy & Accuracy of your Personal Data
1.4.1. In the event that onlinestore247.co.za modifies or amends its Privacy Policy, it is the company's responsibility to update and inform the public through the contents of our Privacy Policy.
1.4.2. Ensuring the accuracy and currency of the personal data we hold about you is vital. Please utilize the relevant prompts on the Website to update your personal data yourself, or keep us informed if changes occur during your trade relationship/interaction with us.
1.5. Third-Party Links on Website or otherwise
1.5.1. The Website may contain links to third-party websites, plug-ins, and applications. Clicking on these links or enabling connections may permit third parties to collect or share data about you. We do not exercise control over these third-party websites or applications and disclaim responsibility for their privacy statements or terms. Upon leaving our Website or engaging with such third parties, we encourage you to review the distinct privacy policy of each third party with whom you engage.
2. THE INFORMATION WE GATHER ABOUT YOU
2.1. Personal data, or personally identifiable information, pertains to any information about an individual, encompassing both natural and juristic entities (i.e., individuals and companies), from which that entity can be identified. This does not include data where identity has been removed (anonymous data).
2.2. We may collect, use, store, and transfer ("process") various types of personal data about you, which we categorize as follows:
2.2.1. Identity Data: This includes first name, maiden name, last name, country of residence, username or similar identifier, title, date of birth, gender, or information about your company such as company registration details, company address, and name.
2.2.2. Contact Data: This encompasses email address, physical/registered addresses, social media contact details, and telephone numbers.
2.2.3. Financial Data: This involves bank account details, third-party payment provider information, and payment card details (which we do not store but only provide to our authorized third-party payment service provider under contract with us).
2.2.4. Social Media Data: This includes all information accessible on your publicly available profile, such as images, photos, photo tags, likes, followers, comments, posts, and stories.
2.2.5. Transaction Data: Details about payments to and from you, contracts, contractual terms, contract fees, signups, subscriptions, invoices, and other details of products and services you have obtained from us or provided to us.
2.2.6. Technical Data: This encompasses internet protocol addresses, login data, browser type and version, time zone setting and location, cookies, browser plug-in types and versions, operating system and platform, and other technology on the devices you use to access the Website.
2.2.7. Profile Data: This includes your Website/Profile username and password, preferences, feedback, ratings and reviews, and survey responses.
2.2.8. Usage Data: Information about how you use our company, Website, surveys, events, and Services.
2.2.9. Marketing and Communications Data: This involves your preferences in receiving notices and marketing from us and our third parties, as well as your communication preferences.
2.3. Additionally, we collect, use, and share Aggregated Data, such as statistical or demographic data, for any purpose. Aggregated Data is derived from personal data but is not considered personal data in law, as it does not directly or indirectly reveal your identity.
2.4. When required by law or under the terms of a contract, and you fail to provide necessary personal data upon request, we may not be able to perform the contract or service. In such cases, we will notify you if this becomes necessary.
3.1. We employ various methods to collect data from and about you, including:
3.1.1. Direct Interactions: You may provide us with your Identity, Contact, Profile, Social Media, Transaction, and Financial Data by filling in various Onlinestore247.co.za forms, Website forms, or by corresponding with us via phone and email. This includes personal data provided when you:
3.1.2. Automated Technologies or Interactions: As you interact with our Website, we may automatically collect Technical Data, Profile, and Usage Data about your equipment, browsing actions, and patterns. This may be done using cookies, server logs, and other similar technologies. Technical Data about you may also be received if you visit other websites employing our cookies.
3.1.3. Third Parties or Publicly Available Sources: We may receive personal data about you from various third parties and public sources, including:
3.1.3.1. Technical Data and Social Data from the following parties: 3.1.3.1.1. Analytics providers Google Analytics and Google Search Console, based in the USA. 3.1.3.1.2. Social networks Facebook, Instagram, Twitter, LinkedIn, and YouTube, based in the USA. 3.1.3.1.3. Google Ads, based in the USA. 3.1.3.2. Contact, Financial, and Transaction Data from providers of technical and/or payment services: PayPal & PayGate, based in South Africa.
4. UTILIZATION OF YOUR PERSONAL DATA
4.1. Legal and Legitimate Usage:
We shall employ your personal data solely in accordance with the law and for legitimate reasons, to which you explicitly acknowledge and provide consent. Primarily, we will utilize your personal data under the following circumstances:
4.1.1. Explicit Consent:
We will use your personal data where we have obtained your explicit consent to do so.
4.1.2. Contractual Obligations:
Usage of your personal data will occur when we need to consult with you or fulfill contractual obligations related to Services delivery, supply, or product shipment—whether impending or already established with you.
4.1.3. Legitimate Interests:
In cases where it is essential for our legitimate interests (or those of a third party) and where your interests and fundamental rights do not supersede those interests.
4.1.4. Legal or Regulatory Compliance:
Utilization of your personal data may be necessary to comply with a legal or regulatory obligation.
4.2. Purposes of Personal Data Utilization:
4.2.1. Multifaceted Processing:
It is important to note that we may process your personal data for multiple lawful grounds, contingent upon the specific purpose for which we are utilizing your data.
4.2.3. Marketing
4.2.3.1. Our Pledge Regarding Personal Data Use in Marketing
We are dedicated to affording you choices concerning the utilization of specific personal data, particularly within the context of marketing and advertising. To exercise your rights related to any marketing communication received as an existing customer, please utilize the built-in prompts provided in those communications or contact us directly.
4.2.3.2. Receipt of Marketing Communications
You will receive marketing communications from us under the following circumstances: if you have sought information from us, participated in any Onlinestore247.co.za service or event, or provided your details during the registration for a promotion or event. In each case, unless you have opted out, you may continue to receive such marketing communications.
4.2.5. Opting-Out
4.2.5.1. Ceasing Marketing Messages
You can request us or authorized third parties to cease sending you marketing messages at any time by contacting us or the relevant third party and expressing your desire to discontinue or modify your marketing preferences.
4.2.5.2. Scope of Opting-Out
Opting out of marketing messages does not extend to other personal data processed based on a different lawful basis.
4.2.6. Change of Purpose
4.2.6.1. Purposeful Data Usage
Your personal data will be used only for the purposes for which it was originally collected, unless there is a reasonable need to use it for another purpose that is compatible with the original one. If you seek clarification on how processing for a new purpose aligns with the original one, please contact us.
4.2.6.2. Unrelated Purpose Usage
In the event that we need to use your personal data for an unrelated purpose, we will inform you and provide an explanation of the legal basis that permits such usage.
4.2.6.3. Legal Compliance
It's important to note that processing of your personal data may occur without your explicit consent or knowledge, in adherence to applicable laws and regulations.
DISCLOSURES OF YOUR PERSONAL DATA
5.1. Sharing with Third Parties
We may need to share your personal data with the following parties for the purposes outlined in the table above.
In case of organizational changes, new owners may utilize your personal data in accordance with this Privacy Policy.
5.2. Third-Party Obligations
We mandate all third parties to uphold the security of your personal data and process it in compliance with the law. Our third-party service providers are not permitted to use your personal data for their own purposes and are authorized to process it solely for specified purposes, primarily Transaction & Goods Delivery Purposes, following our instructions and standards.
EXPRESS COOKIES PROVISION
6.1. Use of "Cookies"
The Website may employ "cookies" to automatically collect information and data through standard Internet server operations. "Cookies" are small text files used by websites, including ours, to recognize repeat users, facilitate ongoing access, track usage behavior, and compile aggregate data for improving website functionality and content. This data may also be used to display targeted advertising via third-party tools.
6.2. Cookie Information Collection
The information collected by cookies does not personally identify you. If you prefer not to have information collected through cookies, the Website provides an option to deny or modify the type of cookies collected. Most browsers also offer a simple procedure to deny or accept the cookie feature entirely. However, note that cookies may be essential for certain features on our Website, and disabling them may limit your access to those features. By not denying or disabling "cookies," you are considered to consent to our use of any personal information collected through those cookies, subject to the provisions of this Policy and our other policies or terms.
7. International Data Transfers
7.1 Intragroup Data Sharing
7.2 Measures for International Data Transfers
8. Data Security
8.1 Implementation of Security Measures
8.2 Protocol for Data Breaches
9. Data Retention
9.1 Duration of Data Retention
9.2 Factors Influencing Retention Period
9.3 Data Deletion Requests
9.4 Anonymization Practices
This documentation articulates the organization's commitment to data protection, international data transfers, security protocols, breach response procedures, and data retention policies. Users are encouraged to acquaint themselves with these provisions to gain insight into the organization's approach to handling their personal information.
Top of Form
10. YOUR LEGAL RIGHTS
10.1. Under specific circumstances, you possess rights in accordance with data protection laws concerning your personal data when we assume the role of the "Responsible Party" for such data. To obtain more information on these rights or to exercise them, please contact us:
10.1.1. Request access to your personal data.
10.1.2. Request correction of your personal data.
10.1.3. Request erasure of your personal data.
10.1.4. Object to the processing of your personal data.
10.1.5. Request a restriction of processing of your personal data.
10.1.6. Request the transfer of your personal data.
10.1.7. Right to withdraw consent.
10.2. You will not incur any charges for accessing your personal data or exercising any of the aforementioned rights. However, in the case of a request deemed unfounded, repetitive, or excessive, a reasonable fee may be charged, or we may choose to refuse compliance.
10.3. To verify your identity and ensure your right to access personal data, we may request specific information. This serves as a security measure to prevent unauthorized disclosure.
10.4. Legitimate requests are typically addressed within seven working days. In the event of a complex or numerous request, we may extend the response time, and you will be duly notified.
11. GLOSSARY
11.1. Lawful Basis
11.1.1. Legitimate Interest refers to our organization's interest in managing and conducting operations for optimal service and security. We assess and balance potential impacts on your rights before processing personal data for legitimate interests.
11.1.2. Performance of Contract involves processing data necessary for a contract to which you are a party or taking pre-contractual steps at your request.
11.1.3. Compliance with a legal or regulatory obligation entails processing personal data necessary for compliance with legal or regulatory obligations.
11.1.4. Express Consent is the confirmed explicit consent provided by you for our processing of personal data through active acceptance of this Privacy Policy or consent during registration or purchasing.
11.2. Third Parties
11.2.1. Internal Third Parties include entities or parties within the Onlinestore247.co.za group acting as joint controllers or processors, providing IT and system administration services.
11.2.2. External Third Parties encompass:
11.2.2.1. Authorized third-party service providers under contract with Onlinestore247.co.za requiring your personal information for services.
11.2.2.2. Specific third parties referenced in the table above.
11.2.2.3. Service providers acting as processors globally for IT and system administration services.
11.2.2.4. South African or other national governments and their respective authorities, in adherence with anti-corruption and crime-fighting legislation.
11.2.2.5. Professional advisers acting as processors or joint controllers, including lawyers, bankers, auditors, and insurers based in South Africa, offering consultancy, banking, legal, insurance, and accounting services as required.
Top of Form
12. YOUR LEGAL RIGHTS
12.1. You are entitled to:
12.1.1. Request access to your personal data: This is commonly referred to as a "data subject access request." It grants you the ability to obtain a copy of the personal data we possess about you and verify the lawfulness of its processing.
12.1.2. Request correction of your personal data: You have the right to rectify any incomplete or inaccurate data we hold about you. However, we may need to verify the accuracy of the new information you provide.
12.1.3. Request erasure of your personal data: You can request the deletion or removal of personal data when there is no valid reason for us to continue processing it. This right also applies if you have successfully exercised your right to object to processing, if we have processed your information unlawfully, or if erasure is required to comply with local law. Note that compliance with requests for erasure may be restricted for specific legal or operational reasons, which will be communicated to you.
12.1.4. Object to processing of your personal data: You can object to the processing of your personal data when we rely on legitimate interests (or those of a third party) and the processing impacts your fundamental rights and freedoms. This right also applies to cases where we process your personal data for direct marketing purposes. We may, in some cases, demonstrate compelling legitimate grounds that override your rights and freedoms.
12.1.5. Request restriction of processing of your personal data: You can ask us to suspend the processing of your personal data in certain scenarios, including cases where you want us to establish data accuracy, where the use of data is unlawful but you do not want it erased, where you need us to retain data for legal claims, or where you have objected to our use of your data, and we need to verify overriding legitimate grounds.
12.1.6. Request the transfer of your personal data: You have the right to receive your personal data in a structured, commonly used, machine-readable format. This right applies to automated information for which you initially provided consent or where we used the information to perform a contract with you.
12.1.7. Withdraw consent: You can withdraw consent at any time if we rely on consent to process your personal data. However, the withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal. Note that withdrawal of consent may impact our ability to provide certain website access or services, and we will inform you if this is the case. Please be aware that, notwithstanding your right to withdraw consent under POPI, other South African legislation may require us to continue processing your data to comply with anti-corruption, crime-fighting, and/or other national legislation, as expressly understood and agreed by you.
.