ZURIOrganics
Legal

Privacy policy 

POPIA and GDPR aligned · Last updated 2026

01 · Who we are

Zuri Organics, based in Cape Town, South Africa, is the responsible party (data controller) for the personal information described here. Contact us at info@zuriorganics.co.za.

02 · What we collect

Account details (name, email, password), order details (delivery address, items, payment confirmation — we never store full card numbers), communications you send us, routine-builder answers, and partner details such as payout information where applicable.

03 · Usage and device data

We collect standard technical data such as IP address, browser type, pages viewed and referral source to keep the site secure, understand what's useful and attribute partner referrals correctly.

04 · Why we use it

To fulfil and deliver your orders, provide support, run subscriptions, operate the partner programme and calculate commission, improve the store, and — only with your consent — send marketing.

05 · Legal bases

Performance of a contract (orders and partner agreements), legitimate interests (security, fraud prevention, improving our products), consent (marketing and non-essential cookies) and legal obligations (tax and accounting records).

06 · Cookies and affiliate tracking

Essential cookies keep your bag and preferences working. Referral cookies record which partner link brought you to us, for the attribution window stated in our terms. Analytics cookies are used only where permitted.

07 · Sharing

We share data only with processors who help us operate: payment providers, couriers, email and hosting providers, and analytics tools. They act on our instructions and may not use your data for their own purposes.

08 · International transfers

Some providers operate outside South Africa or the EEA. Where that happens, we rely on appropriate safeguards such as standard contractual clauses or adequacy decisions.

09 · Retention

Order and tax records are kept for the period required by law. Account and marketing data is kept until you close your account or withdraw consent, after which it is deleted or anonymised.

10 · Your rights

You may request access, correction, deletion, restriction or portability of your data, object to processing, and withdraw consent at any time. Email us and we'll respond within the statutory timeframe. You may also complain to the South African Information Regulator or your local supervisory authority.

11 · Security

Data is transmitted over encrypted connections and stored with access controls. No system is perfect; if a breach affects you, we will notify you and the relevant regulator as required.

12 · Children

Our store is intended for adults. We do not knowingly collect personal information from children under 18 without parental consent.

Questions about your data? Contact us.