Legal

Privacy Policy

Last Updated: 16 July 2025

1. Introduction and Purpose

SUP SUP (Pty) Ltd (Registration Number: 2025/219343/07), hereafter referred to as "SUP SUP," "we," "us," or "our," is a vitamin supplement business operating in the Republic of South Africa.

We are committed to protecting your privacy and ensuring that your personal information is collected and used properly, lawfully, and transparently. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website www.supsuphealth.com, purchase our products, or interact with us through our various sales and marketing channels.

This policy has been developed in compliance with the Protection of Personal Information Act 4 of 2013 (POPIA) and other applicable South African laws.

2. Definitions

"Data Subject" means the person to whom the personal information relates (i.e., you).

"Personal Information" means information relating to an identifiable, living, natural person, and where applicable, an identifiable, existing juristic person. This includes, but is not limited to, your name, contact details, address, and online identifiers.

"Processing" means any operation or activity concerning personal information, including its collection, use, storage, dissemination, and destruction.

"Information Officer" means the person designated by SUP SUP to be responsible for ensuring compliance with POPIA.

3. What Personal Information We Collect

We may collect the following types of personal information:

Identity Information: Your first name, last name and title.
Contact Information: Your email address, telephone numbers, billing address and delivery address.
Financial Information: Payment card details and bank account information, which are processed securely by our third-party payment gateways (e.g., PayFast, Yoco). We do not store your full credit card details on our servers.
Transaction Information: Details about products you have purchased from us, payments made and order history.
Technical & Usage Information: Internet protocol (IP) address, browser type and version, time zone setting and location, operating system and platform, and other information on how you use our website.
Marketing and Communications Information: Your preferences in receiving marketing from us and your communication preferences.
Information from Social Media: If you interact with us on social media (e.g., TikTok, Instagram, Facebook, LinkedIn), we may process your public profile information.

4. How We Collect Your Personal Information

Directly from You: When you create an account, purchase products, subscribe to our newsletter, fill out a contact form, or correspond with us directly.
Automated Technologies: As you interact with our website, we may automatically collect Technical and Usage Information through cookies and other tracking technologies.
Third Parties: We may receive information from third parties, including our advertising partners (e.g., Google, Meta) and payment and delivery services.

5. How and Why We Use Your Personal Information

We will only use your personal information when the law allows us to. Most commonly, we will use your personal information in the following circumstances:

To Fulfil Our Contract with You:

To process and deliver your orders.
To manage payments, fees, and charges.

For Our Legitimate Interests:

To manage our relationship with you, including notifying you about changes to our terms or privacy policy.
To respond to your queries and provide customer support.
To improve our website, products, services, marketing, and customer relationships.
To administer and protect our business and this website.

With Your Explicit Consent:

To send you direct marketing communications via email or other channels about our products, special offers, and events. You can withdraw this consent at any time.

To Comply with a Legal Obligation:

To comply with any legal or regulatory requirements, such as for tax purposes.

6. Disclosure of Personal Information

We will not sell your personal information to third parties. We may disclose your information to trusted third-party service providers who assist us in operating our business, including:

Payment Gateways: To process your payments securely.
Courier and Delivery Services: To deliver your orders.
IT and System Administration Providers: Including our website host (e.g., Shopify) and data storage providers.
Marketing Platforms: Such as Mailchimp for email marketing and Google/Meta for advertising analytics.
Professional Advisers: Including lawyers, bankers, auditors, and insurers who provide services to us.
The South African Police Service or other regulatory bodies as required by law.

7. Security of Your Personal Information

We have implemented appropriate technical and organisational security measures to prevent your personal information from being accidentally lost, used, accessed in an unauthorised way, altered, or disclosed. These measures include:

Using Secure Socket Layer (SSL) technology to encrypt data transmission.
Limiting access to your personal information to those employees, agents, and contractors who have a business need to know.
Implementing procedures to deal with any suspected personal information breach and notifying you and the Information Regulator where legally required.

8. Your Legal Rights as a Data Subject

Under POPIA, you have the right to:

Request Access: You can request a copy of the personal information we hold about you.
Request Correction: You can request that we correct any information you believe is inaccurate or incomplete.
Request Erasure: You can ask us to delete or remove your personal information where there is no good reason for us continuing to process it.
Object to Processing: You can object to the processing of your personal information, including for direct marketing purposes.
Request Restriction of Processing: You can ask us to suspend the processing of your personal information in certain scenarios.
Withdraw Consent: Where we are relying on your consent to process your information, you may withdraw that consent at any time.
Lodge a Complaint: You have the right to lodge a complaint with the South African Information Regulator if you believe we have not complied with the requirements of POPIA.

The Information Regulator (South Africa):
Website: https://www.inforegulator.org.za/
Email: complaints.IR@justice.gov.za

9. Direct Marketing

We will only send you direct marketing materials if you have given us your explicit consent (opt-in). All our marketing communications will contain a clear and easy way for you to unsubscribe from future communications.

10. Cross-Border Transfer of Information

Some of our third-party service providers (such as Shopify, Google, Meta) are based outside of South Africa. When we transfer your personal information out of the country, we will ensure a similar degree of protection is afforded to it in accordance with POPIA.

11. Retention of Information

We will only retain your personal information for as long as is necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting or reporting requirements.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The updated version will be indicated by a "Last Updated" date and will be effective as soon as it is accessible. We encourage you to review this policy frequently.

13. Contact Us & Information Officer

If you have any questions about this Privacy Policy or wish to exercise any of your rights, please contact our designated Information Officer:

Information Officer: Andrew Michael Evans
Company: SUP SUP (Pty) Ltd
Email: hello@supsuphealth.com
Address: 2 Panorama, 26 Woodford Avenue, Camps Bay 8040, South Africa
Telephone: 060-342-6411