1. Introduction
Japtrap Bak (“we,” “us,” or “our”) is committed to protecting the privacy of your personal information. This Privacy Policy explains how we collect, use, and disclose your personal information in accordance with the Protection of Personal Information Act, 4 of 2013 (“POPIA”) and other applicable South African laws. This policy applies to all personal information collected through our website, social media pages, and other interactions you may have with us.
2. Purpose of this Policy
This policy outlines how Japtrap Bak collects, uses, stores, and protects your personal information. We want to help you understand:
What personal information we collect
Why we collect it
How we use it
How we protect it
Your rights regarding your personal information
3. Scope
This Privacy Policy applies to all individuals who interact with Japtrap Bak, including:
Customers who purchase our products
Visitors to our website
Users of our social media pages
Individuals who contact us with inquiries
Suppliers and business partners
4. Definitions
Personal Information: As defined in POPIA, means any information relating to an identifiable, living, natural person, and where it is applicable, an identifiable, existing juristic person, including, but not limited to:
Contact details (name, address, email address, phone number)
Identity number
Age
Gender
Purchase history
Online identifiers (IP address, cookies)
Financial information
Processing: As defined in POPIA, means any operation or activity or any set of operations, whether or not by automatic means, concerning personal information, including:
Collection, receipt, recording, organisation, collation, storage, updating or modification, retrieval, alteration, consultation or use;
Dissemination by means of transmission, distribution or making available in any other form; or
Merging, linking as well as de-identification, destruction or erasure of information.
Responsible Party: Japtrap Bak, the entity that determines the purpose of and means for the processing of personal information.
Data Subject: The person to whom the personal information relates (you).
Operator: A person who processes personal information on behalf of the responsible party.
5. Information We Collect
We collect personal information that is necessary for us to provide our products and services, and to operate our business effectively. The types of personal information we collect may include:
Contact Information: Your name, surname, email address, telephone number, and physical address. This is collected when you place an order, create an account, or subscribe to our mailing list.
Purchase Information: Details of the products you purchase from us, including order history and preferences. This is collected to fulfill orders and provide customer support.
Payment Information: If you make a purchase, we collect payment information, such as your bank account details or other payment method information. Payment information is processed through secure payment gateways.
Website Usage Information: We collect information about how you use our website, including your IP address, browser type, and browsing patterns. This information is collected using cookies and similar technologies.
Communications: Records of any correspondence or communication you have with us, including emails, phone calls, and social media interactions.
Social Media Information: If you interact with us on social media, we may collect your social media profile information, depending on your privacy settings.
Voluntary Information: Any information you voluntarily provide to us, such as feedback, survey responses, or participation in promotions.
6. How We Collect Information
We collect personal information in the following ways:
Directly from you: When you provide information to us, such as when you place an order, create an account, subscribe to our mailing list, contact us with inquiries, or participate in surveys or promotions.
Automatically: When you use our website, we automatically collect certain information through cookies and similar technologies.
From third parties: We may receive personal information from third-party service providers (e.g., payment processors, shipping companies) and social media platforms (depending on your privacy settings).
7. Purpose of Processing
We process your personal information for the following purposes:
To provide our products and services: To process your orders, deliver products, and provide customer support.
To communicate with you: To respond to your inquiries, provide information about our products and services, and send you promotional materials (with your consent).
To improve our website and services: To analyse website usage and trends, and to improve the functionality and content of our website.
To personalise your experience: To tailor our products, services, and communications to your individual needs and preferences.
To process payments: To facilitate and process your payments for purchases.
To comply with legal obligations: To comply with applicable laws, regulations, and legal processes.
To protect our rights and interests: To enforce our terms and conditions, and to protect our business and legal rights.
Marketing: To send you promotional materials. You will be able to opt out of these communications.
8. Legal Basis for Processing
We process your personal information based on the following legal grounds, as permitted by POPIA:
Consent: You have given your explicit consent to the processing of your personal information for a specific purpose.
Contract: The processing is necessary for the performance of a contract with you or to take steps at your request prior to entering into a contract.
Legal Obligation: The processing is necessary for us to comply with a legal obligation.
Legitimate Interests: The processing is necessary for our legitimate interests or the legitimate interests of a third party, provided that your interests and fundamental rights do not override those interests.
9. Disclosure of Personal Information
We may disclose your personal information to the following categories of third parties:
Service Providers: We may share your information with third-party service providers who assist us in operating our business, such as payment processors, shipping companies, marketing service providers, and IT support providers. We have agreements with these providers to ensure your information is protected.
Business Partners: We may share information with business partners involved in providing products or services to you.
Legal Authorities: We may disclose your information to legal authorities or government agencies when required by law or legal process.
Other Parties: We may disclose your information to other parties with your consent or as otherwise permitted by law.
Operators: We may share your information with operators who process data on our behalf. We will ensure that these operators comply with POPIA.
10. Security Measures
We take reasonable and appropriate technical and organisational measures to protect your personal information from loss, misuse, unauthorised access, disclosure, alteration, and destruction. These measures include:
Encryption: Using encryption to protect sensitive information during transmission.
Access Controls: Implementing access controls to restrict access to personal information to authorised personnel only.
Secure Storage: Storing personal information securely.
Regular Security Assessments: Conducting regular security assessments to identify and address potential vulnerabilities.
Employee Training: Providing our employees with training on POPIA and data protection best practices.
Physical Security: Implementing measures to secure our physical premises.
11. Retention of Personal Information
We will retain your personal information only for as long as necessary to achieve the purposes for which it was collected, or as required by applicable laws. The duration for which we retain your personal information will depend on the specific purposes for which it was collected and the legal requirements.
12. Your Rights
As a data subject, you have the following rights under POPIA:
Right of Access: You have the right to request access to your personal information that we hold.
Right to Rectification: You have the right to request that we correct any inaccurate or incomplete personal information.
Right to Erasure (Right to be Forgotten): You have the right to request that we delete your personal information, subject to certain exceptions.
Right to Restriction of Processing: You have the right to request that we restrict the processing of your personal information in certain circumstances.
Right to Object: You have the right to object to the processing of your personal information on certain grounds, including direct marketing.
Right to Data Portability: You have the right to receive your personal information in a structured, commonly used, and machine-readable format and to transmit it to another responsible party.
Right to Complain: You have the right to lodge a complaint with the Information Regulator if you believe that we have infringed your rights under POPIA.
Right not to be subject to automated decision-making: You have the right not to be subjected to a decision based solely on the automated processing of your personal information.
13. How to Exercise Your Rights
To exercise your rights under POPIA, please contact our Information Officer at the contact details provided below. We will respond to your request within the timeframes stipulated in POPIA. We may require you to provide proof of identity to verify your request.
14. Transfer of Information to Other Countries
We may transfer your personal information to other countries outside of South Africa. These countries may not have data protection laws similar to POPIA. If we transfer your personal information to such countries, we will take reasonable steps to ensure that your information is protected as required by POPIA, such as entering into agreements with recipients that include standard contractual clauses approved by the Information Regulator.
15. Cookies and Similar Technologies
We use cookies and similar technologies on our website to collect information about your browsing activities. Cookies are small text files that are stored on your device when you visit a website. We use cookies to:
Improve your browsing experience
Personalise content
Analyse website traffic
Target advertising
You can control cookies through your browser settings. However, disabling cookies may affect your ability to use certain features of our website.
16. Direct Marketing
We may send you direct marketing communications about our products and services. We will only send you direct marketing communications if you have consented to receive them. You have the right to opt out of receiving direct marketing communications at any time. You can do so by contacting our Information Officer or by using the unsubscribe link provided in our marketing emails.
17. Children’s Privacy
Our website and services are not directed at children under the age of 18. We do not knowingly collect personal information from children under 18. If you are a parent or guardian and believe that your child has provided us with personal information, please contact us, and we will take steps to delete that information.
18. Changes to this Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated policy on our website and, where appropriate, by sending you a notification. Your continued use of our website or services after the changes have been implemented will constitute your acceptance of the updated Privacy Policy.
19. Information Officer
Our Information Officer is responsible for overseeing our compliance with POPIA. If you have any questions or concerns about our Privacy Policy or the processing of your personal information, please contact our Information Officer at:
Retha Webber 082 5644 512
japtrapbak@gmail.com
17 Lionel Street, Kimberley, 8301
20. Complaints to the Information Regulator
You have the right to lodge a complaint with the Information Regulator if you are not satisfied with how we have handled your personal information. The Information Regulator’s contact details are:
The Information Regulator (South Africa)
JD House, 27 Stiemens Street Braamfontein, Johannesburg, 2001 P.O. Box 31533, Braamfontein, 2017
Tel: 010 023 5200
Email: enquiries@inforegulator.org.za
