This Privacy Policy explains how POTATOTECH may process personal information when you browse the website, create an account, place an order, contact support or use related services. It should be read with the website Cookie notice and applicable terms.
Who is responsible
Responsible entity: [COMPANY NAME]. Information Officer: [INFORMATION OFFICER]. Privacy contact: [PRIVACY EMAIL]. These details will be updated after the business owner confirms the legal entity and responsible contact.
What we may process
- Identity and contact information such as name, email, phone number and delivery details.
- Account, order, basket, payment-status, invoice and customer-service information.
- Product, compatibility, return, warranty and complaint information supplied by the customer.
- Technical information such as IP address, browser, device, log, security and diagnostic data.
- Cookie, consent, analytics and marketing-preference information where the relevant tools are enabled.
Why we process it
- To operate the website, basket, checkout, account and order process.
- To communicate about stock, payment, delivery, returns, warranty and support requests.
- To prevent fraud, misuse, unauthorised access and security incidents.
- To meet legal, accounting, consumer-protection and record-keeping obligations.
- To understand website performance and send optional marketing only where the applicable consent or lawful basis exists.
Lawful basis and consent
Depending on the activity, processing may be based on contract performance, legal obligation, legitimate interests such as security and service operation, or consent for optional activity. Browsing the website is not blanket consent to every optional activity. You may withdraw consent where applicable, but this does not affect processing already carried out lawfully.
Providers and sharing
WordPress, WooCommerce, hosting, security, email, analytics, cookie, anti-spam, courier and payment providers may process information only where enabled and relevant to the service. Active provider list: [PROVIDER LIST PENDING CONFIRMATION]. We do not request full card numbers or CVV codes through email, WhatsApp or website forms.
International transfers
Some service providers may process information outside South Africa. Transfer safeguards and active provider locations: [INTERNATIONAL TRANSFER DETAILS PENDING CONFIRMATION].
Retention and deletion
Information is retained only for as long as reasonably necessary for the purpose collected, legal obligations, dispute handling, security and record keeping. Retention schedule: [RETENTION PERIOD PENDING CONFIRMATION]. Deletion may be limited where information must be retained by law or is needed to establish, exercise or defend a legal claim.
Cookies and similar technologies
Essential cookies may support sessions, basket, checkout, login and security. Optional analytics, advertising or personalisation cookies require the applicable notice or consent where required. Current cookie tool and categories: [COOKIE CONFIGURATION PENDING CONFIRMATION].
Your rights and requests
Subject to applicable law, you may request access, correction, deletion, objection, restriction or information about processing. Send requests to [PRIVACY EMAIL] and provide enough information for the request to be assessed. We may need to verify identity before releasing or changing information.
Complaints
Contact [PRIVACY EMAIL] first so the issue can be reviewed. Information Regulator or external complaint details: [EXTERNAL COMPLAINT ROUTE PENDING CONFIRMATION].
Updates to this policy
This policy may be updated when the website, providers, legal requirements or business processes change. The effective date and latest review date will be published after confirmation: [EFFECTIVE DATE].