How we protect your data

We believe in complete transparency. This policy explains what information we collect, why we need it, and your rights regarding your personal data.

Introduction

The Chilli Collective ("we", "us", "our") respects your privacy and is committed to protecting your personal information.
This Privacy Policy outlines how we collect, use, and safeguard your data in accordance with the Protection of Personal Information Act (POPIA) of South Africa.

Data Collection (Data Minimization)

We only collect the personal information strictly necessary to fulfill your orders and provide customer support.
This may include your name, email address, physical delivery address, and contact number.
We do not collect or store credit card details. All financial transactions are securely processed by third-party payment gateways.

Purpose of Processing

Order Fulfillment: To process your payments and deliver physical goods to your address.
Communication: To send order confirmations, shipping updates, and respond to your customer service inquiries.
Legal Compliance: To maintain accurate financial records as required by South African tax laws.

Third-Party Processors

Courier Partners: We share your name, address, and phone number with our designated courier partners solely for the purpose of delivering your order.
Payment Providers: We utilize Yoco and iKhokha to securely process your payments. These providers operate under their own strict security protocols and privacy policies.
We will never sell, rent, or trade your personal information to third parties for marketing purposes.

Data Security

We implement reasonable technical and organizational measures to protect your personal information against accidental loss, unauthorized access, or unlawful processing.
While we strive to protect your data, no transmission over the internet or electronic storage method is 100% secure.

Your POPIA Rights

Under POPIA, you have the right to request access to the personal information we hold about you.
You have the right to request the correction of inaccurate or outdated information.
You have the right to object to the processing of your personal information on reasonable grounds.
You have the "Right to be Forgotten" (Right to Erasure), which allows you to request the deletion of your personal data from our active systems, subject to legal retention requirements.

Request Data Erasure

In accordance with Section 24 of the Protection of Personal Information Act (POPIA), you have the right to request the deletion of your personal information from our active systems. Enter your email below to initiate this request.