Privacy policy
POPIA and GDPR aligned · Last updated 2026
01 · Who we are
Zuri Organics, based in Cape Town, South Africa, is the responsible party (data controller) for the personal information described here. Contact us at info@zuriorganics.co.za.
02 · What we collect
Account details (name, email, password), order details (delivery address, items, payment confirmation — we never store full card numbers), communications you send us, routine-builder answers, and partner details such as payout information where applicable.
03 · Usage and device data
We collect standard technical data such as IP address, browser type, pages viewed and referral source to keep the site secure, understand what's useful and attribute partner referrals correctly.
04 · Why we use it
To fulfil and deliver your orders, provide support, run subscriptions, operate the partner programme and calculate commission, improve the store, and — only with your consent — send marketing.
05 · Legal bases
Performance of a contract (orders and partner agreements), legitimate interests (security, fraud prevention, improving our products), consent (marketing and non-essential cookies) and legal obligations (tax and accounting records).
06 · Cookies and affiliate tracking
Essential cookies keep your bag and preferences working. Referral cookies record which partner link brought you to us, for the attribution window stated in our terms. Analytics cookies are used only where permitted.
07 · Sharing
We share data only with processors who help us operate: payment providers, couriers, email and hosting providers, and analytics tools. They act on our instructions and may not use your data for their own purposes.
08 · International transfers
Some providers operate outside South Africa or the EEA. Where that happens, we rely on appropriate safeguards such as standard contractual clauses or adequacy decisions.
09 · Retention
Order and tax records are kept for the period required by law. Account and marketing data is kept until you close your account or withdraw consent, after which it is deleted or anonymised.
10 · Your rights
You may request access, correction, deletion, restriction or portability of your data, object to processing, and withdraw consent at any time. Email us and we'll respond within the statutory timeframe. You may also complain to the South African Information Regulator or your local supervisory authority.
11 · Security
Data is transmitted over encrypted connections and stored with access controls. No system is perfect; if a breach affects you, we will notify you and the relevant regulator as required.
12 · Children
Our store is intended for adults. We do not knowingly collect personal information from children under 18 without parental consent.
Questions about your data? Contact us.