Privacy Policy

This Privacy Policy describes how AquaNési ("we", "us") collects, uses and protects your personal information when you visit our website or place an order. We are committed to protecting your privacy in accordance with the Protection of Personal Information Act, 2013 (POPIA) and applicable South African data protection regulations.

1. Data controller

2. What data we collect

• Identification and contact data: first name, surname, phone number, e-mail address.
• Delivery data: street address, city, postal code, province.
• Order data: products, quantity, payment method, delivery notes.
• Technical data: IP address, browser type and basic usage statistics (via cookies).

3. Purposes and legal bases for processing

• Order fulfilment (performance of contract) — processing, shipping and customer support.
• Communication (legitimate interest) — order confirmation and customer service.
• Legal obligations — maintaining tax and accounting records.
• Website improvement (consent) — traffic analysis using cookies.

4. Data retention period

We retain your data only for as long as necessary to fulfil the purposes above or as required by law (e.g. accounting records for up to 5 years). Thereafter, data is securely deleted or anonymised.

5. Sharing data with third parties

We share data only with trusted partners essential to our business operations: courier companies, payment processors and hosting providers. All are contractually bound to protect data. We never sell your personal information.

6. Your rights

Under POPIA, you have the right to: access, correction, deletion, restriction of processing, data portability, objection and withdrawal of consent at any time. To exercise your rights, contact us at [email protected].

You also have the right to lodge a complaint with the Information Regulator (inforegulator.org.za).

7. Cookies

This website uses essential cookies for basic functionality and, with your consent, analytical cookies. You can manage your preferences in your browser settings.

8. Security

We apply appropriate technical and organisational measures (SSL encryption, restricted access) to protect your data against unauthorised access, loss or misuse.

9. Changes to this policy

We may update this policy from time to time. The current version is always published on this page with the updated date.