Privacy and Personal Information Policy
Infintec CC (reg: 2006/090252/23) (“Infintec”) adheres to the highest standards of protecting your personal information when we process it by virtue of your use of our Services, your use of our website www.infintec.co.za or any of its related blogs, websites, applications or platforms (collectively, “the Website”), or by providing us with your personal information in any other way. As such, we have created this specific and detailed Privacy Policy for you to read and appreciate exactly how we safeguard your personal information and respect your privacy (“Policy”).
Please note that Infintec is a private company duly registered and operating in accordance with the laws of South Africa.
For more information regarding your personal information lawfully stored or used by Infintec, please contact info@infintec.co.za who will gladly assist.
Please ensure that you read all the provisions below, and our other Infintec rules and policies which may apply from time to time, to understand all of your, and our, rights and duties.
1. Important information and who we are
1.1. Purpose of this Privacy Policy 1.1.1. This Privacy Policy aims to give you information on how Infintec collects and processes your personal data through any form of your engagement with Infintec such as your engagement with us when contracting or corresponding with us, when using our Services, accessing or using the Website, or providing us with your personal information in any other way. 1.1.2. This Privacy Policy complies with the South African Protection of Personal Information Act, No. 4 of 2013 (“POPI”). 1.1.3. It is important that you read this Privacy Policy together with our main Website Terms & Conditions. 1.1.4. We do not knowingly process the data of minors. Do not provide us with any such personal data.
1.2. Responsible Party 1.2.1. Infintec is the “Responsible Party” and is responsible for your personal data. 1.2.2. We have appointed a data representative at Infintec who is responsible for overseeing questions in relation to this Privacy Policy. If you have any questions, please contact the representative using the details set out below.
1.3. Our Contact Details 1.3.1. Our full details are:
Full name of legal entity: Infintec CC
Name or title of data representative: Hendry Freeman
Email address: info@infintec.co.za
Postal address: 3 Hereford Crescent, Durbanville, 7550
Telephone number: 021 975 2747 1.3.2. You have the right to make a complaint at any time to the South African regulator’s office (Information Regulator’s Office of South Africa). We would, however, appreciate the chance to deal with your concerns before you approach any such regulator, so please contact us in the first instance.
1.4. Changes to the Privacy Policy 1.4.1. This Privacy Policy version was last updated on 15 November 2025. 1.4.2. It is important that the personal data we hold about you is accurate and current. Please keep us informed if your personal data changes during your relationship with us.
1.5. Third-Party Links 1.5.1. The Website may include links to third-party websites, plug-ins and applications. Clicking on those links may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements.
2. The data we collect about you
2.1. Personal data means any information about an individual from which that person can be identified.
2.2. We may collect, use, store and transfer different kinds of personal data about you:
Identity Data including first name, last name, username, or company details.
Contact Data including email address, physical/registered addresses, and telephone numbers.
Financial Data including bank account details and payment card details (which we do not store but only provide to our authorised third-party payment service provider, Payfast).
Transaction Data including details about payments to and from you, and other details of products and services you have obtained from us.
Technical Data including internet protocol (IP) address, your login data, browser type and version, time zone setting and location, and other technology on the devices you use to access the Website.
Profile Data including your Website username and password, preferences, feedback, and survey responses.
Usage Data including information about how you use our Website and Services.
Marketing and Communications Data including your preferences in receiving marketing from us.
2.3. We also collect Aggregated Data (such as statistical or demographic data) for any purpose.
2.4. Where we need to collect personal data by law, or under the terms of a contract we have with you, and you fail to provide that data, we may not be able to perform the contract (e.g., to provide you with goods or services).
3. How is your personal data collected?
3.1. We use different methods to collect data from and about you, including:
Direct interactions: You may give us your Identity, Contact, and Financial Data by filling in forms or by corresponding with us by post, phone, email or otherwise. This includes when you:
Purchase our Products;
Create an account on our Website;
Subscribe to our newsletters;
Request marketing to be sent to you; or
Give us feedback.
Automated technologies: As you interact with our Website, we may automatically collect Technical, Profile, and Usage Data by using cookies, server logs and other similar technologies.
Third parties: We may receive personal data about you from various third parties:
Technical Data from analytics providers like Google.
Contact, Financial and Transaction Data from providers of technical and/or payment services like Payfast (based in South Africa).
4. How we use your personal data
4.1. We will only use your personal data when the law allows us to. Most commonly, we will use your personal data where:
We need to perform the contract we are about to enter into or have entered into with you (e.g., to process and deliver your order).
It is necessary for our legitimate interests (or those of a third party) and your interests do not override those interests.
We need to comply with a legal or regulatory obligation.
We have your express consent to do so.
4.2. Purposes for which we will use your personal data:
To register you as a new customer.
To process and deliver your order (this includes managing payments, fees, and charges).
To manage our relationship with you (e.g., sending you notifications, asking for reviews).
To administer and protect our business and this Website (including troubleshooting, data analysis, testing, system maintenance, support, reporting and hosting of data).
To deliver relevant website content and marketing to you.
To use data analytics to improve our Website, products, marketing, and customer experience.
4.3. Marketing & Opting-Out 4.3.1. You will receive marketing communications from us if you have requested information from us or purchased goods from us and have not opted out of receiving that marketing. 4.3.2. You can ask us to stop sending you marketing messages at any time by following the “unsubscribe” links on any marketing message sent to you or by contacting us.
4.4. Change of Purpose 4.4.1. We will only use your personal data for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason compatible with the original purpose.
5. Disclosures of your personal data
5.1. We may have to share your personal data with the parties set out below:
Internal Third Parties: Other entities or parties in the Infintec group acting as joint controllers or processors.
External Third Parties:
Our primary distribution and logistics partners, such as Syntech Distribution (Pty) Ltd., for the explicit purpose of fulfilling and delivering your order.
Authorised payment service providers (like Payfast) to process payments.
Service providers who provide IT and system administration services.
Professional advisers including lawyers, bankers, auditors and insurers.
The South African Revenue Service (SARS) and other authorities.
Third parties to whom we may choose to sell, transfer, or merge parts of our business.
5.2. We require all third parties to respect the security of your personal data and to treat it in accordance with the law.
6. Cookies 6.1. Our Website uses “cookies” to automatically collect information. Cookies are small text files a website can use to recognise repeat users and allow a website to track usage behaviour. 6.2. If you do not want information collected through cookies, there is an option on the Website to deny or modify the cookies collected. Please note that cookies may be necessary to provide you with certain features (like a persistent shopping cart).
7. International transfers 7.1. Some of our external third parties may be based outside of South Africa, so their processing of your personal data will involve a transfer of data. 7.2. Whenever we transfer your personal data, we ensure a similar degree of protection is afforded to it by ensuring at least one of the safeguards as required by POPI is implemented.
8. Data security 8.1. We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. 8.2. We limit access to your personal data to those employees, agents, contractors and other third parties who have a legitimate need to know.
9. Data retention 9.1. We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.
10. Your legal rights 10.1. Under POPI, you have rights in relation to your personal data:
Request access to your personal data.
Request correction of your personal data.
Request erasure of your personal data.
Object to processing of your personal data.
Request restriction of processing your personal data.
Request transfer of your personal data.
Right to withdraw consent.
10.2. You will not have to pay a fee to access your personal data (or to exercise any of the other rights). However, we may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive.
10.3. We may need to request specific information from you to help us confirm your identity. We try to respond to all legitimate requests within a reasonable timeframe.
11. Glossary
Legitimate Interest: The interest of our business in conducting and managing our business to enable us to give you the best service/product and the best and most secure experience.
Performance of Contract: Processing your data where it is necessary for the performance of a contract to which you are a party.
Comply with a legal or regulatory obligation: Processing your personal data where it is necessary for compliance with a legal or regulatory obligation.
