Privacy Policy
Your Privacy is our Promise
The Sceletium Source Africa (Pty) Ltd (“The Sceletium Source”, “we”, “our”, “us”) is committed to protecting your privacy and handling your personal information lawfully, fairly, and transparently. This Privacy Policy explains how we collect, use, store, share, and protect your personal information in line with the Protection of Personal Information Act, 4 of 2013 (POPIA), and, where applicable, the General Data Protection Regulation (GDPR) for our European Union (EU) customers.
1. Information We Collect
We may collect and process the following types of information:
- Contact details (name, email, phone, billing/shipping address)
- Account registration details (username, password)
- Payment and transaction details (via our secure payment provider)
- Website usage information (IP address, browser type, cookies, pages visited)
- Communications with us (emails, enquiries, feedback)
2. Purpose of Processing
We use your personal information to:
- Provide and deliver our products and services
- Process payments securely
- Communicate with you (including newsletters, if you opt-in)
- Improve our website, services, and customer experience
- Meet legal and regulatory obligations
- Detect and prevent fraud or misuse of our services
3. Lawful Basis for Processing (GDPR)
Where GDPR applies, we rely on the following lawful bases:
- Contract: to perform our obligations and deliver your order
- Consent: for newsletters or optional services (you may withdraw consent at any time)
- Legal obligation: to comply with tax, financial, and consumer laws
- Legitimate interests: to maintain and improve our services and security
4. Cookies and Tracking
We use cookies and similar technologies to enhance your experience, remember login details, and analyse website traffic. You may disable cookies in your browser, but some features may not function properly.
5. Sharing of Information
We do not sell or rent your personal information. However, we may share your data with trusted third parties where necessary, including:
- Website hosting providers and IT service providers
- Payment processors (e.g., DPO PayGate, banks)
- Couriers and logistics providers to deliver your orders
- Regulatory or legal authorities if required by law
Where personal data is transferred outside South Africa or the EU, we ensure that adequate protections are in place, consistent with POPIA and GDPR requirements.
6. Security
We use appropriate technical and organisational measures to protect your personal information against unauthorised access, loss, or misuse. Payment transactions are processed using secure encryption (SSL), and card details are not stored by us.
7. Retention
We retain your personal information only for as long as necessary to fulfil the purposes outlined in this policy, or as required by law (e.g., financial records).
8. Your Rights
Under POPIA (South Africa), you have the right to:
- Access your personal information
- Request correction or deletion
- Object to the processing of your data
- Lodge a complaint with the Information Regulator
Under GDPR (EU), you additionally have the right to:
- Request data portability
- Restrict processing in certain circumstances
- Withdraw consent at any time
9. Cross-Border Customers
If you are located outside South Africa (including the EU), your information may be processed in South Africa and/or the EU. We will take all reasonable steps to ensure that your personal data receives adequate protection in line with applicable laws.
10. Contact Us
If you have any questions or wish to exercise your rights, please contact our Information Officer at:
The Sceletium Source Africa (Pty) Ltd
Email: Jean-Pierre Le Roux / jp@sceletium.com
Information Regulator (South Africa): https://inforegulator.org.za
EU Customers: You may also lodge a complaint with your local supervisory authority.