The Sessions Pro Shop (“we”, “us”, “our”) is committed to protecting your personal information. This Privacy Policy explains what personal information we collect, how we use it, and your rights, in accordance with the Protection of Personal Information Act, 2013 (“POPIA”).
1. Who We Are
The Sessions Pro Shop is the responsible party for the processing of your personal information in connection with this website.
In accordance with POPIA, we have appointed an Information Officer responsible for compliance with this Act. You may contact our Information Officer with any questions or requests relating to your personal information:
Information Officer: [Insert name of appointed Information Officer]
Depending on how you interact with us, we may collect:
Account and order information: name, delivery and billing address, email address, phone number, order history.
Payment information: processed securely by our payment provider, Stripe. We do not store your full card number, CVV or expiry date on our own servers.
Communications: messages you send us via our contact form, email or phone, including any details you choose to share.
Marketing preferences: if you subscribe to our newsletter (via Mailchimp), your name and email address and your engagement with our emails.
Technical and usage information: IP address, browser and device type, pages viewed and referring pages, collected automatically via cookies and analytics tools (Google Analytics, via Google Site Kit).
4. How We Use Your Information
We process your personal information for the following purposes:
To process and fulfil your orders, including payment, delivery and customer support;
To create and manage your account on the Website;
To communicate with you about your orders, queries or account;
To send you marketing communications, where you have opted in, and which you may unsubscribe from at any time;
To improve our Website, products and customer experience, including through analytics;
To detect and prevent fraud, abuse or security incidents;
To comply with our legal and regulatory obligations, including tax and consumer protection law.
5. Legal Basis for Processing
We process your personal information on one or more of the following grounds recognised under POPIA: performance of a contract with you (e.g. fulfilling an order), your consent (e.g. marketing emails), our legitimate business interests (e.g. fraud prevention, improving our service), and compliance with a legal obligation (e.g. tax and financial recordkeeping).
6. Cookies and Tracking Technologies
Our Website uses cookies and similar technologies to keep your shopping cart working, remember your preferences, and understand how visitors use our Website (via Google Analytics). You can control or disable cookies through your browser settings; please note that some parts of the Website, such as checkout, may not function correctly if cookies are disabled.
7. Sharing Your Information
We do not sell your personal information. We share it only where necessary, with:
Payment processors (Stripe) to process your payment securely;
Delivery and courier partners to fulfil and deliver your order;
Email and marketing service providers (Mailchimp) if you have subscribed to our newsletter;
Analytics providers (Google Analytics/Site Kit) to help us understand Website usage;
Professional advisors and authorities, where required by law or to protect our legal rights.
Each of these third parties is only given the information necessary to perform their function and is required to handle it securely and in accordance with applicable data protection law.
8. Data Security
We take reasonable technical and organisational measures to protect your personal information against loss, unauthorised access, alteration or disclosure, including secure (HTTPS) connections and restricted access to customer data. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.
9. Data Retention
We retain your personal information only for as long as necessary to fulfil the purposes described in this Policy, including any legal, accounting or reporting requirements (for example, financial records are typically retained for five years in line with South African tax law). Where information is no longer needed, we securely delete or anonymise it.
10. Your Rights Under POPIA
You have the right to:
Request confirmation of whether we hold personal information about you, and access to that information;
Request correction or updating of inaccurate, incomplete or outdated information;
Request deletion or destruction of personal information we no longer have a lawful basis to retain;
Object to the processing of your personal information for direct marketing purposes at any time, free of charge;
Withdraw any consent you have given, at any time (this will not affect processing carried out before withdrawal);
Lodge a complaint with the Information Regulator (South Africa) if you believe we have processed your information unlawfully.
To exercise any of these rights, please contact us using the details in Section 2 or Section 12. The Information Regulator can be contacted via www.inforegulator.org.za.
11. Children’s Privacy
Our Website is not directed at children, and we do not knowingly collect personal information from children without the consent of a parent or guardian, as required by POPIA. If you believe a child has provided us with personal information without appropriate consent, please contact us so we can remove it.
12. Contact Us
If you have any questions about this Privacy Policy or how we handle your personal information, please contact us at info@sessionsbc.co.za or 071 614 0958.
13. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We encourage you to review this page periodically. Material changes will be indicated by an updated “last updated” date below.
