Privacy policy.

Purpose and consent

The purpose of this Privacy Policy is to explain how, why, and when IBV Gift of Gold (Pty) Ltd (“IBV Gift of Gold”, “we”, “us”, or “our”) collects, uses, stores, discloses, and protects your personal information, in compliance with the Protection of Personal Information Act, No. 4 of 2013 (“POPIA”), the provisions of the General Data Protection Regulation (EU) No 2016/679 of 27 April 2016 and all other applicable data protection legislation in South Africa.

By accessing and using our Platforms, you consent to the processing of your personal information as described in this Privacy Policy.

1. Definitions

For purposes of this Policy:

• “Personal Information” and “processing” bear the meanings assigned in POPIA.
• “User”, “you”, or “your” refers to any person who accesses or uses our Platforms, whether registered or not.
• “Registered User” refers to a person who has created an account on our Platforms and provided us with personal details to facilitate the purchase of goods or services.

2. Personal information we collect

IBV Gift of Gold only collects and processes personal information that is relevant, adequate, and necessary for the purposes for which it is collected.

When you register as a user, place an order, or interact with our Platforms, we may collect the following information:

• Full name and surname;
• Email address;
• Mobile phone number;
• Delivery and billing address;
• Date of birth or identification number;
• Gender (where voluntarily provided);
• Payment and transactional details (processed securely through third-party payment providers);
• Device identifiers, IP address, and online activity information (as described in section 4 below).

You warrant that all information supplied is true, complete, and accurate, and that you will promptly update your account details should any changes occur.

3. Children under 18

If you are under the age of 18, you may not use our Platforms or provide us with personal information without the prior consent and supervision of your parent or legal guardian. We may verify such consent by requesting contact details for your parent or guardian and confirming their approval.

If we are unable to verify such consent, or if a parent or guardian notifies us that you do not have their permission, you will not be permitted to use our Platforms or transact with us.

4. Information automatically collected when using our Platforms

When you access our Platforms, we may automatically collect limited technical and analytical data, including:

• Log information such as pages visited, time spent, and interactions on the Website;
• Device and browser information, including IP address and operating system;
• Geolocation information derived from device settings or network data (if enabled);
• Cookies and similar tracking technologies that recognise your device and improve your browsing experience.

5. Why we process your personal information

We process your personal information to:

• Verify your identity and register your user account;
• Fulfil orders, deliver products, process returns or exchanges, and communicate order updates;
• Provide customer service and support, including responding to queries or complaints;
• Manage payments and prevent fraudulent transactions;
• Comply with legal, tax, or accounting obligations;
• Improve our Platforms, services, and product offerings;
• Send marketing or promotional material (where you have not opted out); and
• Conduct lawful business operations, research, and statistical analysis (anonymised where possible).

We will not use your personal information for any purpose other than those stated above, unless we obtain your prior consent or are required by law to do so.

6. Retention of personal information

We will retain your personal information only for as long as necessary to fulfil the purpose for which it was collected, including any legal, accounting, or reporting requirements.

Retention periods may vary based on statutory obligations (for example, tax or anti-money laundering laws) or legitimate business needs.

Where personal information is used for multiple lawful purposes, we will retain it until all relevant periods have expired but will cease processing for purposes no longer required.

By using our Platforms, you consent to our retaining your personal information for the duration necessary to achieve the stated purposes.

7. Cookies and tracking technologies

Our Platforms use cookies and similar technologies to enhance user experience, analyse traffic, and personalise content. Cookies are small text files stored on your device and do not directly identify you.

We use cookies to:

• Recognise returning users and maintain session preferences;
• Tailor our Platforms and advertisements to your interests;
• Improve functionality and security; and
• Measure the performance of our marketing campaigns.

We group the cookies and similar technologies we use into two kinds:

• Essential: a session cookie that keeps you signed in to your member account, and local storage that remembers your basket and your cookie choice. The Platforms cannot work without these, so they are always on.
• Analytics: Microsoft Clarity records how visitors use the Platforms (pages viewed, clicks and scrolling, and anonymised session replays) so that we can find problems and improve the experience. Clarity runs for all visitors. Typed form fields, including passwords and payment details, are masked and not recorded.

You can disable or delete cookies in your browser settings, although this may affect the functionality of certain features on our Platforms.

8. Marketing communications

You may choose to receive promotional communications from IBV Gift of Gold regarding products, services, or events that may interest you.

You may opt out of marketing communications at any time by following the unsubscribe link in our emails or contacting us at info@ibvgiftofgold.com.

We will never sell or disclose your personal information to third parties for their independent marketing purposes.

9. Sharing of personal information

We may disclose personal information only to the extent necessary and only to the following categories of recipients:

• Our employees and authorised personnel, who require access to fulfil their duties and are bound by confidentiality obligations;
• Third-party service providers under written contract with us who assist with business operations such as payment processing, logistics, IT support, analytics, and marketing. These service providers may not use your information for any purpose other than to perform contracted services on our behalf;
• Legal or regulatory authorities, if required by law or to protect our legitimate interests, investigate fraud, or respond to legal process;
• Business transferees or successors, in the event of a merger, acquisition, restructuring, or sale of assets, subject to continued data protection safeguards;
• Suppliers or couriers for the limited purpose of fulfilling and delivering your orders.

IBV Gift of Gold will never sell, rent, or trade your personal information to unauthorised third parties.

10. Transfer of information outside South Africa

We may transfer personal information outside the borders of South Africa for purposes such as secure data hosting, backup, or processing through international service providers.

Where such transfers occur, IBV Gift of Gold ensures that the destination country or recipient is subject to data protection laws or contractual safeguards that meet the standards required by section 72 of POPIA.

IBV Gift of Gold may collect or process personal data of individuals within the European Union (EU) or European Economic Area (EEA). Where applicable, we comply with the principles of the General Data Protection Regulation (EU) 2016/679 (“GDPR”), in addition to our obligations under POPIA.

Any transfer of personal data outside the EU/EEA (including to South Africa) will occur only where appropriate safeguards are in place, such as Standard Contractual Clauses, transfers to jurisdictions recognised as adequate by the European Commission, or with the explicit consent of the data subject.

Individuals in the EU/EEA have the right to access, rectify, erase, restrict, or object to the processing of their personal data, to data portability, and to lodge a complaint with their local supervisory authority.

By using our Platforms, you consent to the cross-border transfer of your information under these conditions.

11. Security safeguards

We implement appropriate technical and organisational measures to protect the integrity, confidentiality, and availability of personal information in our possession.

These include, but are not limited to:

• Data encryption and secure socket layer (SSL) technology;
• Controlled access to information and facilities;
• Regular system monitoring and penetration testing;
• Secure storage and disposal procedures; and
• Binding confidentiality obligations on all personnel and third-party processors.

In the unlikely event of a data breach, IBV Gift of Gold will notify the Information Regulator and affected individuals in accordance with POPIA.

We are not responsible for the security of information shared with unaffiliated third parties whose websites or services may be linked to ours. You should always review their own privacy policies.

12. Your rights under POPIA

You have the right, subject to proof of identity, to:

• Request access to and a copy of your personal information held by us;
• Request the correction, updating, or deletion of your information where inaccurate or outdated;
• Withdraw consent to processing, subject to legal or contractual restrictions;
• Object to the processing of your personal information on reasonable grounds;
• Be notified of any unauthorised access or breach affecting your information; and
• Lodge a complaint with the Information Regulator of South Africa.

Registered users may update or correct their details directly within their online account. Other users may exercise these rights by contacting info@ibvgiftofgold.com.

13. Information Regulator contact details

If you have any complaints about this Privacy Policy or our compliance with this Privacy Policy you can lodge a complaint with the Information Regulator. The contact details are as follows:

• Information Regulator (South Africa)
• Website: https://justice.gov.za/inforeg
• Email: inforeg@justice.gov.za
• Address: JD House, 27 Stiemens Street, Braamfontein, Johannesburg, 2001

14. Updates to this policy

IBV Gift of Gold reserves the right to amend this Privacy Policy from time to time to reflect changes in legislation, business operations, or security practices. The updated version will be published on our website with the effective date displayed.

Your continued use of our Platforms after such publication constitutes acceptance of the revised Policy.

Contact for privacy queries: info@ibvgiftofgold.com