1. RESPONSIBLE PARTY

IRUNSVAN South Africa (PTY) LTD

Registration Number: 2026/032922/07

Physical Address:

Email: info@irunsvansa.co.za

Information Officer: IRUNSVAN acts as the Responsible Party under POPIA.

2. PERSONAL INFORMATION WE COLLECT

We may collect:

2.1 Identification Information

• Full name
• ID number (if required for finance providers)
• Date of birth (if required for BNPL)

2.2 Contact Information

• Email address
• Phone number
• Delivery address
• Billing address

2.3 Transaction Information

• Purchase history
• Payment confirmation data
• Order records

2.4 Technical Information

• IP address
• Browser type
• Device information
• Cookies (see Cookie Policy)

2.5 Marketing Data

• Email subscription preferences
• Campaign interactions
• Website engagement behaviour

3. PURPOSE OF COLLECTION

Personal information is collected for:

• Processing and fulfilling orders
• Delivering products
• Communicating order updates
• Customer service
• Fraud prevention
• Marketing (with consent)
• Legal and regulatory compliance

We collect only information necessary for legitimate business purposes.

4. LAWFUL BASIS FOR PROCESSING

Processing is based on:

• Consent
• Contractual necessity (order fulfilment)
• Legal obligation
• Legitimate interest (fraud prevention, analytics)

5. SHARING OF PERSONAL INFORMATION

We may share personal information with:

• Courier companies
• Payment gateways
• BNPL providers
• CRM and marketing platforms
• IT service providers

All third parties are required to protect personal information in accordance with POPIA.

We do not sell personal data.

6. DATA SECURITY

We implement:

• SSL encryption
• Secure payment gateways
• Access controls
• Restricted internal access
• Data minimisation protocols

No system is completely secure; however, we take reasonable technical and organisational measures to safeguard information.

7. DATA RETENTION

Personal information is retained only as long as necessary:

• For contractual purposes
• For legal compliance
• For tax obligations
• For dispute resolution

After this period, information is securely deleted or anonymised.

8. YOUR RIGHTS UNDER POPIA

You have the right to:

• Access your personal information
• Correct inaccurate information
• Request deletion (where lawful)
• Object to processing
• Withdraw marketing consent
• Lodge a complaint with the Information Regulator

Information Regulator Contact:
https://www.justice.gov.za/inforeg/

9. CROSS-BORDER TRANSFERS

Some service providers may be located outside South Africa.

Where cross-border transfers occur, we ensure adequate data protection safeguards are in place.

10. MARKETING COMMUNICATIONS

Marketing communications are sent only where:

• You have opted in; or
• You are an existing customer (subject to CPA rules).

You may unsubscribe at any time.

11. CHANGES TO THIS POLICY

IRUNSVAN reserves the right to amend this Privacy Policy.

Updated versions will be published on the website.