Privacy Policy

PRIVACY POLICY
Glowa Organic ("we", "us", "our") respects your privacy and is committed to protecting your personal information in accordance with the Protection of Personal Information Act 4 of 2013 ("POPIA"). This policy explains what personal information we collect, why we collect it, and what rights you have.

1. INFORMATION WE COLLECT

We collect information you provide directly, including: your name, email address, phone number, physical/delivery address, banking details (for withdrawals), password (stored securely, never in plain text), and information about your purchases, orders, and referral/downline relationships. We also automatically collect limited technical information such as IP address and browser information for security and fraud-prevention purposes.

2. WHY WE COLLECT IT

We process your personal information to: create and manage your account; process orders, payments, and withdrawals; calculate and pay commissions; communicate with you about your account, orders, or support queries; verify your identity and prevent fraud; and comply with our legal and regulatory obligations.

3. HOW WE SHARE YOUR INFORMATION

We do not sell your personal information. We may share it with: payment processors (such as Yoco and PayFast) solely to process payments; delivery/courier partners to fulfil orders; your upline/downline where reasonably necessary for the operation of the compensation structure (for example, your sponsor may see your name and purchase status); and law enforcement or regulators where required by law.

4. PAYMENT INFORMATION

We do not store your full card details. Card payments are processed directly by our payment partners (PayFast and/or Yoco), who maintain their own security and privacy standards. Where you upload proof of payment (for EFT or payment link orders), that image is stored securely and used only to verify your payment.

5. DATA SECURITY

We take reasonable technical and organisational measures to protect your personal information against loss, unauthorised access, and disclosure, including password hashing, access controls on our admin systems, and restricted staff access on a need-to-know basis. No system can be guaranteed 100% secure, and we encourage you to use a strong, unique password.

6. DATA RETENTION

We retain your personal information for as long as your account is active, and thereafter for as long as necessary to comply with our legal, tax, and regulatory obligations (which in South Africa can be several years for financial records) or to resolve disputes.

7. YOUR RIGHTS UNDER POPIA

Subject to applicable law, you have the right to: request access to the personal information we hold about you; request correction of inaccurate or outdated information; request deletion of your information, subject to our legal retention obligations; object to certain processing of your information; and lodge a complaint with the Information Regulator of South Africa if you believe your rights have been infringed. To exercise any of these rights, please contact us using the details on our Contact page.

8. COOKIES

Our website may use cookies and similar technologies to keep you logged in, remember your cart contents, and understand basic site usage. You can control cookies through your browser settings, though disabling them may affect some site functionality.

9. CHILDREN'S PRIVACY

Our services are intended for people aged 18 and older. We do not knowingly collect personal information from children.

10. CHANGES TO THIS POLICY

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page reflects the most recent version.

11. CONTACT US / INFORMATION OFFICER

For any privacy-related questions, or to exercise your rights under POPIA, please contact us using the details on our Contact page.