Privacy Policy
Privacy Policy – Get It Tumi
Effective Date: [Insert Date]
Last Updated: 4 April 2025
1. Introduction
At Get It Tumi, we are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and protect your personal data in accordance with:
- The Protection of Personal Information Act (POPIA) of South Africa
- The General Data Protection Regulation (GDPR) of the European Union
By using our website or services, you agree to the practices described below.
2. What Personal Information We Collect
Depending on how you interact with us, we may collect the following:
A. Customers
- Full name
- Email address
- Phone number
- Delivery address
- Order and transaction details
B. Vendors
- Business name
- Company registration number
- Store URLs
- Product data
- Payout and banking details
C. Technical Data
- IP address
- Device type and browser
- Cookies and usage analytics
3. Legal Basis for Processing (GDPR)
We process personal data only when there is a legal basis to do so:
- Contractual obligation – to fulfill orders or manage vendor relationships
- Legal obligation – for tax and regulatory compliance
- Consent – for newsletters or marketing
- Legitimate interest – to improve user experience and website functionality
4. Purpose of Collecting Data
We use your data to:
- Process and fulfill customer orders
- Onboard and verify vendors
- Enable secure payment processing (via PayFast)
- Coordinate delivery through our local delivery partners
- Send service communications (order updates, alerts)
- Improve our platform and analyze trends
5. Sharing of Personal Information
We do not sell your data. We only share information with:
- Verified vendors (when you purchase from them)
- Delivery partners (e.g., Fastway) to fulfill your order
- Third-party processors (e.g., PayFast, analytics tools)
- Legal or regulatory authorities when required by law
6. International Transfers
If your data is transferred outside of South Africa, we ensure appropriate safeguards are in place to protect your information, in line with POPIA and GDPR.
7. Data Retention
We retain your personal information only for as long as necessary:
- To fulfill the purpose for which it was collected
- To comply with financial and legal obligations
- To resolve disputes and enforce agreements
8. Your Rights
As a data subject under POPIA and GDPR, you have the right to:
| Right | Description |
|---|---|
| Access | Request what personal information we hold about you |
| Correction | Request changes to incorrect or outdated information |
| Erasure | Request deletion of your data where appropriate |
| Object | Object to the processing of your data for specific purposes |
| Withdraw Consent | Withdraw consent for marketing at any time |
| Lodge a Complaint | Contact the Information Regulator (South Africa) or your local DPA |
To exercise your rights, email us at privacy@getittumi.com.
9. Security of Your Information
We implement industry-standard measures to protect your data:
- HTTPS encryption
- Secure hosting servers
- Access control and user authentication
- Regular system updates and monitoring
10. Cookies & Tracking Technologies
We use cookies and similar technologies to:
- Keep you logged in
- Save cart preferences
- Track traffic for analytics
You can manage cookie preferences in your browser settings.
11. Children’s Privacy
Our services are not directed to individuals under the age of 16. We do not knowingly collect information from minors.
12. Updates to This Policy
We may update this Privacy Policy to reflect changes in the law or our operations. When we do, we’ll update the “Last Updated” date above. Continued use of our services implies acceptance of the new terms.
13. Contact Us
For any privacy-related inquiries or data access requests, contact:
📧 privacy@getittumi.com
📞 TBC