Privacy Policy

1. Purpose of this policy

This Privacy Policy explains how AHA Group (Pty) Ltd, trading as Deals & More, collects, uses, stores, shares and protects personal information when you use our website, purchase products, create an account, request support or otherwise interact with us.

We process personal information in accordance with applicable South African privacy legislation, including the Protection of Personal Information Act, 4 of 2013 (POPIA).

2. Information we may collect

Depending on how you use Deals & More, we may collect and process the following categories of personal information:

• Identity and contact information such as your name, email address and telephone number.
• Delivery and address information provided during checkout or stored in your customer account.
• Pargo pickup-point information selected for the fulfilment of an order.
• Customer account information, including authentication and account profile information.
• Order information, including products purchased, quantities, order values and order status.
• Payment-related information such as payment status, transaction references, payment provider references and payment amounts.
• Return, refund and support information, including messages, ticket details and information linked to an order.
• Communication and marketing preferences that you choose to provide.
• Technical and security information such as session data, device or browser information, IP information and system logs where necessary to operate and protect the website.

Deals & More does not ask customers to send full payment card details to us by email or telephone. Card payment details entered during payment are handled by the relevant payment service provider through its secure payment environment.

3. How we collect information

We may collect personal information directly from you when you:

• create or update a customer account;
• add products to your cart;
• complete checkout;
• select a delivery or pickup option;
• make a payment;
• submit a return or refund request;
• contact customer support;
• manage your marketing preferences; or
• communicate with us by email, telephone or online.

We may also receive limited information from service providers involved in processing a transaction, such as payment status, payment references, delivery information or authentication events.

4. Why we process personal information

We process personal information only where there is an appropriate purpose and lawful basis for doing so. These purposes may include:

• creating and managing customer accounts;
• processing and fulfilling orders;
• confirming payments and preventing payment fraud;
• arranging delivery or collection of purchased goods;
• sending transactional order and service communications;
• managing returns, refunds and customer queries;
• providing customer support;
• maintaining accurate accounting and transaction records;
• detecting misuse, fraud and security threats;
• maintaining, troubleshooting and improving the website and related systems;
• complying with legal and regulatory obligations; and
• sending marketing communications where permitted by law and where the appropriate consent or customer relationship exists.

5. Information required to place an order

Certain personal information is required for us to conclude and fulfil an ecommerce transaction. This may include your contact details, order details, delivery or pickup information and the information required to confirm payment.

If required information is not provided, we may be unable to process the order, arrange delivery or collection, provide customer support or complete another service you have requested.

6. Payment information

Electronic payments are processed using third-party payment service providers.

Our systems may receive and retain information necessary to identify and reconcile a payment, including payment status, payment amount, transaction identifiers, merchant references and timestamps.

Full card details used to complete a card payment are handled by the payment provider's payment environment and are not required to be stored by Deals & More for ordinary order processing.

7. Service providers and sharing

We do not sell customer personal information.

We may share personal information with trusted service providers where this is reasonably necessary to operate Deals & More, complete a transaction or provide a requested service.

These service providers may include:

• payment processing providers such as Yoco;
• delivery and collection providers such as Pargo;
• database and authentication service providers;
• website hosting and security service providers;
• transactional email service providers;
• technical service providers supporting the operation and security of the website; and
• professional advisers, regulators, law-enforcement agencies or other parties where disclosure is required or permitted by law.

Service providers are expected to process personal information only for the authorised purpose and to apply appropriate confidentiality and security measures.

8. International processing

Some technology or service providers used to operate Deals & More may process or store information using infrastructure located outside South Africa.

Where personal information is transferred outside South Africa, we take reasonable steps to ensure that the transfer is permitted under POPIA and that appropriate protection applies to the information.

9. Cookies and similar technologies

Deals & More may use cookies, browser storage and similar technologies that are necessary to operate website functions such as authentication, customer sessions, cart functionality, security and checkout.

Your browser may allow you to control or delete cookies. Disabling technologies that are required for essential website functions may prevent parts of the website, account or checkout from working correctly.

If optional advertising, analytics or marketing technologies requiring additional notice or consent are introduced, the relevant customer choices and privacy information will be updated as required.

10. Direct marketing

Where required, we will obtain the appropriate consent before sending electronic direct marketing.

Where the law permits marketing to an existing customer, the communication will relate to applicable products or services and will provide a reasonable way to object or unsubscribe.

You may withdraw from marketing communications using the unsubscribe option provided in the communication or by contacting us.

Transactional messages relating to orders, payments, account security, returns, refunds or customer support are service communications and may still be sent when necessary to provide the requested service.

11. How we protect information

We take reasonable technical and organisational measures to protect personal information against loss, unauthorised access, misuse, alteration or unlawful disclosure.

These measures may include access controls, authentication, secure communications, restricted administrative access, security monitoring and controls applied by our technology service providers.

No internet-based system can guarantee absolute security, but we review and maintain safeguards appropriate to the nature of the information and the risks associated with its processing.

12. Security incidents

If we have reasonable grounds to believe that personal information has been accessed or acquired by an unauthorised person, we will investigate the incident and take the steps required by applicable law, including notification where required.

13. How long we keep information

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected, or for longer where retention is required or permitted by law.

Retention periods may differ depending on whether the information relates to an order, payment, customer account, return, refund, support request, fraud-prevention record or legal and accounting requirement.

When information is no longer required, it may be deleted, destroyed or de-identified in accordance with applicable requirements.

14. Your privacy rights

Subject to POPIA and other applicable laws, you may have the right to:

• ask whether we hold personal information about you;
• request access to personal information that we hold about you;
• ask us to correct or update inaccurate or incomplete information;
• request deletion or destruction of information where the law permits this;
• object to certain processing of your personal information;
• withdraw consent where processing depends on consent; and
• lodge a complaint with the Information Regulator of South Africa.

We may need to verify your identity before granting access to, changing or deleting personal information in order to protect your information from unauthorised requests.

15. Customer accounts

Registered customers can access and manage certain personal information through their Deals & More account, including available profile, address, order, return and support information.

Please keep your account credentials secure and contact us if you believe that your account has been accessed without authorisation.

16. Children's information

Deals & More is a general ecommerce store and is not designed specifically to collect personal information from children.

Where the processing of a child's personal information requires the involvement or authorisation of a competent person under applicable law, the required protection will be applied.

17. Privacy requests

To make a privacy-related request or ask a question about how your personal information is handled, contact:

18. Complaints

If you have a privacy concern, please contact us first so that we can investigate and attempt to resolve it.

You also have the right to lodge a complaint with the Information Regulator of South Africa in accordance with POPIA.

19. Changes to this policy

We may update this Privacy Policy when our systems, business processes, service providers or legal obligations change.

The latest version will be published on this page and the "Last updated" date will be changed accordingly.