Privacy Policy

GizmoCart (Pty) Ltd ("GizmoCart", "we", "us") is committed to protecting your personal information in accordance with the Protection of Personal Information Act 4 of 2013 ("POPIA"). This policy explains what we collect, why, and how you can control it.

1. Information we collect

• Contact details: name, email address, phone number, delivery address
• Order information: items purchased, order value, order history
• Payment information: processed directly by Paystack — we do not store card numbers
• Birthday Club data: a child's first name and birth date, submitted voluntarily by a parent/guardian
• Technical data: IP address, browser type, and site usage via cookies/analytics

2. Why we collect it

• To process and deliver your order, including forwarding delivery details to our fulfilment partners
• To send order confirmations, shipping updates, and respond to support queries
• To send Birthday Club reminders you have explicitly opted into
• To improve the site and detect fraud or abuse

3. Sharing your information

We share the minimum information necessary with:

• Payment processor (Paystack) — to process your payment securely.
• Fulfilment partners — for dropshipped items, we share only your delivery name, address, and phone number with the relevant supplier so they can ship your order directly to you. They do not receive your email or payment details.
• Email/communication providers — to send order and Birthday Club emails.

We do not sell your personal information to third parties.

4. Your rights under POPIA

You have the right to:

• Request access to the personal information we hold about you
• Request correction or deletion of your personal information
• Object to processing, or withdraw consent (e.g. unsubscribe from Birthday Club)
• Lodge a complaint with the Information Regulator of South Africa (inforegulator.org.za)

To exercise any of these rights, email privacy@gizmocart.co.za. We will respond within a reasonable time and in any event within the periods prescribed by POPIA.

5. Data retention

We retain order records for as long as required for tax and accounting purposes (currently 5 years under South African tax law) and delete Birthday Club and marketing data on request or after 3 years of inactivity.

6. Security

We use industry-standard encryption (HTTPS/TLS) for all data in transit and rely on reputable, POPIA-aware infrastructure providers (Supabase, Vercel, Paystack) for data storage and payment processing.

7. Cookies

We use essential cookies to run the shopping cart and, where enabled, analytics cookies to understand site usage. You can disable non-essential cookies in your browser settings.

8. Contact us

GizmoCart (Pty) Ltd, Midrand, Gauteng, South Africa
Email: privacy@gizmocart.co.za