1.2 What Personal Information We Collect

We may collect and process the following categories of information:

• Identity and Contact Details: Name, email address, phone number, and delivery address.
• Order Information: Products purchased, quantities, prices, and transaction invoices.
• Payment Metadata: Payment confirmations and fraud checks. (Note: We do not store full credit card details).
• Support Communications: Records of emails, messages, and call notes regarding your inquiries.
• Website Usage: IP addresses, device/browser data, and pages visited via cookies and analytics tools.

1.3 Why We Process Personal Information

We process your data for the following lawful purposes:

• To create and manage your customer account.
• To process orders, facilitate payments, and manage deliveries or returns.
• To provide customer support and respond to technical queries.
• To prevent fraud and maintain the security of our website systems.
• To comply with South African tax (SARS) and legal obligations.
• To send service-related messages (e.g., order updates). Marketing messages are only sent with consent, and you may opt out at any time.

1.4 Sharing and Disclosures

We may share personal information with trusted third parties, including:

• Service Providers: Payment processors, banks, and courier/fulfillment partners.
• Technical Support: IT and hosting providers who secure and maintain our digital infrastructure.
• Professional Advisers: Accountants and legal counsel where necessary, under strict confidentiality.
• Legal Authorities: Where required by law or to protect our legal rights and safety.

1.5 Cross-Border Processing

Some of our service providers (such as cloud hosting, analytics, or email systems) may process data outside of South Africa. Where cross-border transfers occur, we take reasonable steps to ensure the recipient is subject to laws or agreements that provide an adequate level of protection similar to POPIA.

1.7 Retention

We retain personal information only for as long as necessary to fulfill the purposes set out in this policy, or to meet legal, tax, and operational requirements. When no longer required, data is securely deleted or anonymized.

1.8 Your Rights

Under POPIA, you have the right to:

• Request access to the personal information we hold about you.
• Request the correction or deletion of inaccurate or outdated information.
• Object to the processing of your information in certain circumstances.
• Withdraw consent where processing is based on your prior agreement.

To exercise these rights, please email wikus@h2oguru.co.za. You also have the right to lodge a complaint with the South African Information Regulator.

1.9 Marketing Preferences

You can opt out of marketing emails at any time by clicking the "unsubscribe" link in our emails or by contacting us directly. Please note that transactional messages (order confirmations, invoices) are necessary for our service and are not considered marketing.