We respect your privacy and aim to be transparent about what we collect, why we collect it, who we share it with, and what choices you have. By using our services, you acknowledge this policy. If you do not agree, please do not use our website or submit personal information to us.

This policy applies to personal information processed in South Africa in connection with our online store, customer support, and related communications.

You provide directly

• Identity and contact details: name, email address, phone number.
• Delivery and billing details: shipping address, billing address where applicable, delivery preferences, and special instructions for couriers or collection points (for example Paxi or similar services you choose at checkout).
• Account information: login credentials and profile details when you register.
• Order information: items purchased, order history, and messages you send us (including support requests).
• Payment-related information: payment is handled by payment service providers. We do not store full card numbers on our servers; we may receive limited payment metadata (such as transaction status or references) needed to complete and reconcile your order.

Collected automatically

• Technical and usage data: IP address, device and browser type, general location derived from IP, pages viewed, and approximate timestamps.
• Cookies and similar technologies: we use these to operate the site, keep you signed in where applicable, remember cart or preferences, and understand how the store is used. You can control cookies through your browser settings; blocking some cookies may affect functionality.

We use personal information for purposes that include:

• Orders and delivery: processing purchases, arranging shipping or collection, communicating about your order, and handling returns or disputes where relevant.
• Payments: facilitating payment through our payment partners and preventing fraud where permitted by law.
• Customer support: responding to enquiries and support tickets.
• Account and security: authenticating users, protecting our systems, and enforcing our terms.
• Marketing: sending promotional communications only where we have your consent or another lawful basis under POPIA. You may unsubscribe from marketing at any time using the link in our emails or by contacting us.
• Legal and compliance:complying with applicable laws (including tax, accounting, and record-keeping), responding to lawful requests from authorities, and meeting obligations that may arise under laws such as the Financial Intelligence Centre Act ("FICA") where they apply to our activities.
• Improvement: analysing aggregated or de-identified usage to improve our website and services.

We process personal information only where we have a lawful basis under POPIA, such as performance of a contract, consent, legitimate interest (balanced against your rights), or legal obligation.

We may share personal information with categories of recipients where necessary to run our business and deliver your order:

• Service providers who assist us under contract (for example payment processors, delivery and courier partners, IT hosting, email delivery, and customer support tools). They may only use your information for the purposes we specify.
• Professional advisers where required (for example auditors or lawyers).
• Authorities when we are required or permitted by law to disclose information.

We do not sell your personal information. We do not allow service providers to sell your personal information either.

Some providers may process data outside South Africa. Where that happens, we take steps required by POPIA (such as ensuring an adequate level of protection or appropriate safeguards and agreements).

We implement reasonable technical and organisational measures to protect personal information against unauthorised access, loss, or misuse. These include secure connections where appropriate, access controls, and working with reputable infrastructure providers.

No method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security but will notify you and the regulator where we are required to do so in the event of a qualifying data breach under POPIA.

We retain personal information only for as long as needed for the purposes described in this policy, including to satisfy legal, tax, and accounting retention requirements, resolve disputes, and enforce our agreements. When retention periods end, we delete or de-identify information where possible.

Under POPIA you have rights that may include the following, subject to limitations in law:

• Access: request confirmation of whether we hold personal information about you and request a copy or description of that information.
• Correction: request correction of inaccurate, incomplete, or outdated information.
• Deletion or restriction: in appropriate circumstances, request deletion or restriction of processing of your personal information.
• Objection: object to processing based on legitimate interests or direct marketing (including withdrawing consent for marketing).
• Complaint: lodge a complaint with the Information Regulator of South Africa if you believe we have interfered with your privacy.

To exercise these rights, contact us using the details below. We may need to verify your identity before responding. We will respond within the timeframes required by POPIA where applicable.

For privacy questions, to exercise your rights, or to update your preferences, contact us:

• Email: dispatch@therunners.co.za (please use subject line: Privacy / POPIA enquiry)
• Web: Contact page