This policy explains what personal information Boltage collects, why we collect it, and what you can do about it. It is written to meet our obligations under the Protection of Personal Information Act 4 of 2013 (POPIA).
Who is responsible for your information
Shelfless (Pty) Ltd, trading as Boltage, is the responsible party for the personal information described here.
Our Information Officer is Jane Bays. Any question about how we handle your personal information can be directed to them at hello@boltage.co.za.
You can reach us about anything in this policy at hello@boltage.co.za.
What we collect
- To process an order: your name, email address, phone number and delivery address.
- Order history: what you bought, when, and the amount paid.
- If you create an account: your login details and saved addresses.
- Website usage: pages visited and general location, gathered through analytics cookies.
- Anything you send us by email, including the contents of your message.
What we never see
We do not collect, process or store your card number. Card payments are handled entirely by our payment provider on their own systems. Your full card details never touch this website or our servers.
Why we process it, and on what basis
- To perform our contract with you: taking payment, packing your order, getting it delivered, and handling returns.
- To meet legal obligations: tax invoices and financial records we are required to keep.
- For our legitimate interests: preventing fraud, securing the website, and answering your questions.
- With your consent: marketing emails, which you may withdraw at any time.
Marketing
We will only send you marketing about products similar to what you have bought from us, or where you have asked us to. Every message includes a way to opt out, and we act on it. You can also object at any time by emailing us, free of charge.
Who we share it with
We share only what is needed to run the shop:
- Our courier, which needs your name, address and phone number to deliver your parcel
- Our payment provider, which processes your payment
- Our website host and email provider, which store the data on our behalf
- Analytics providers, which receive usage data about this site
We do not sell your personal information. We never have and we do not intend to.
Information sent outside South Africa
Some of the services above store data on servers outside South Africa. Where that happens, we take reasonable steps to satisfy ourselves that the recipient is subject to laws or agreements giving your information a comparable level of protection, as POPIA requires.
How long we keep it
Order and invoice records are kept for at least 5 years, because tax law requires it. Account details are kept until you ask us to close your account. Marketing consent is kept until you withdraw it. After that we delete or de-identify what we hold.
Your rights
Under POPIA you have the right to:
- Be told what personal information we hold about you, and ask for a copy
- Ask us to correct anything that is wrong, or delete anything we are no longer entitled to keep
- Object to how we are processing your information, at any time and free of charge
- Object to direct marketing
- Not be subject to a decision made purely by automated means
- Be told if your information has been accessed by someone who should not have seen it
- Complain to the Information Regulator
Email hello@boltage.co.za to exercise any of these. We will not charge you, and we will respond as quickly as we reasonably can.
Complaining to the Regulator
If you are not satisfied with how we have handled your information, you may complain directly to the Information Regulator of South Africa. Complaints go through their eServices portal, and their email address for POPIA complaints is POPIAComplaints@inforegulator.org.za.
Cookies
This site uses cookies to keep your cart working, to remember you if you log in, and to understand how the site is used. You can block or delete cookies in your browser settings, though the cart and checkout will not work properly without the essential ones.
Keeping your information safe
We use an encrypted connection across the whole site, restrict who can see order data, and keep our systems updated. No website can promise perfect security, but if a breach ever affected your personal information we would notify you and the Information Regulator as POPIA requires.
Changes
If we change this policy we will update this page and the date below. Material changes will be brought to your attention rather than slipped in quietly.