Last updated: [date] — this is placeholder text, not reviewed legal copy. Have this reviewed by a POPIA-specialist lawyer before launch (see docs/ARCHITECTURE.md §7).
[Company legal name] ("we", "us", "our") is committed to protecting your personal information in accordance with the Protection of Personal Information Act (POPIA).
For the supplement storefront: your name, email, phone number, delivery address, and order history. [Placeholder — expand once the Gamfit app introduces biometric/clinical/genetic data; see docs/ARCHITECTURE.md §3 `consents` model for the categories that will require separate, granular consent at that point.]
[Placeholder — order processing and fulfilment, payment processing via PayFast, order confirmation and shipping notifications, and (with consent) marketing communications.]
Payments are processed by PayFast (Pty) Ltd. We do not store your card details on our servers.
[Placeholder — describe SA-region hosting for personal data, per docs/ARCHITECTURE.md §2.7.]
Under POPIA, you have the right to access, correct, or request deletion of your personal information. To exercise these rights, contact us at [contact email].
[Placeholder — name and contact details of the registered Information Officer, once registration with the Information Regulator is complete; see docs/ARCHITECTURE.md §5.]
Questions about this policy can be sent via our contact page or to [contact email].
