Phytocare SA privacy policy

Effective date: 01/01/2025

This privacy policy explains how we collect, use, share and protect your personal information when you visit or make a purchase from https://phytocare.co.za (the “site”) or otherwise interact with Phytocare SA (“we”, “us”, “our”).

Personal information we collect

Information you provide to us

account and order details such as your name, email address, phone number, billing address and shipping address
communication you send to us (for example, emails, chat messages, reviews and product Q&A)
marketing preferences and survey responses

Payment information (for example, card numbers) is processed by our payment gateway Payfast. We do not store or collect full card details on our site.

Information we collect automatically

When you browse the site, we automatically collect certain device information, including your web browser, IP address, time zone, cookie identifiers, and information about the pages or products you view and how you interact with the site.

We collect this device information using:

cookies (small files stored on your device; see “cookies and similar technologies” below)
log files that record actions on the site (IP address, browser type, ISP, referring/exit pages, date/time stamps)
web beacons, tags and pixels used to measure usage and the performance of our marketing

Information from third parties

We may receive information from service providers that help us process payments, deliver orders, send emails, prevent fraud, run analytics, or show product reviews.

How we use your personal information

We use your information to:

process and fulfil orders, including payment processing, shipping and order confirmations
provide customer service and respond to your requests
operate, secure, troubleshoot and improve the site and our products
personalise your experience and measure the effectiveness of our marketing
screen for and prevent fraud or misuse
send marketing communications where permitted (you can opt out at any time)
comply with legal obligations

Legal bases for processing (GDPR, where applicable)

Where the GDPR applies, we process personal information on the following legal bases:

contract (to fulfil an order or provide requested services)
legitimate interests (to run and improve our business, secure our services and prevent fraud)
consent (for certain marketing, cookies and similar technologies)
legal obligation (to keep records required by law)

Cookies and similar technologies

We use cookies and similar technologies to operate the site, remember your preferences, analyse traffic and improve performance. You can manage or disable cookies in your browser settings. Please note that disabling cookies may affect site functionality. For more information about cookies, visit allaboutcookies.org.

Sharing your personal information

We share personal information with trusted service providers who help us run our business, for example:

payment processing (e.g., Payfast)
ecommerce, hosting and security providers
email, marketing and analytics platforms (e.g., Google Analytics)
fulfilment partners and couriers
customer support and review tools

These providers are only allowed to use your information to perform services for us and must protect it appropriately. We may also share information to comply with laws, respond to lawful requests, protect our rights, or as part of a business transaction (for example, a merger or acquisition).

International transfers

Your information may be transferred to and processed in countries outside of South Africa and the country where you live. When we transfer information internationally, we take appropriate safeguards to protect it in accordance with this policy and applicable laws.

Data retention

We keep personal information for as long as necessary to provide our services and for legitimate business or legal purposes (for example, tax and accounting). This usually means keeping order records for a period required by law (often 5–7 years) unless you request deletion sooner and we are legally able to comply.

Your rights

You may have the right, under POPIA and, where applicable, GDPR, to:

access the personal information we hold about you
request correction or deletion of your information
object to or restrict certain processing
withdraw consent where we rely on consent
opt out of marketing at any time (use the unsubscribe link in our emails)
lodge a complaint with the Information Regulator (South Africa) or your local supervisory authority

To exercise your rights, please contact us using the details below.

Do not track

Some browsers send a “Do Not Track” signal. We currently do not respond to these signals. You can control cookies through your browser settings.

Keeping your information secure

We use administrative, technical and organisational measures designed to protect personal information. No online service can be guaranteed to be 100% secure, but we work to protect your information and review our safeguards regularly.

Children’s privacy

Our site is not directed to children, and we do not knowingly collect personal information from anyone under the age of 18. If you believe a child has provided us with personal information, please contact us so we can delete it.

Changes to this policy

We may update this policy from time to time to reflect changes to our practices or for legal, regulatory or operational reasons. The “effective date” above shows when it was last updated.

Contact us

If you have questions, requests or complaints about this policy or our privacy practices, please contact us:

Phytocare SA
Email: [email protected]
Location: Umhlanga, KZN, 4319
Reg: K2013/084718/07
VAT: 4070306842