Privacy and Data Protection Policy (POPIA)

1. Introduction

1.1 ZakaHealth is committed to protecting the privacy and personal information of its customers, partners, and website users.

1.2 This Privacy and Data Protection Policy is implemented in accordance with the Protection of Personal Information Act, 4 of 2013 (POPIA).

1.3 By using the ZakaHealth website or services, users consent to the collection and processing of personal information as outlined in this policy.

2. Personal Information Collected

2.1 ZakaHealth may collect the following personal information:

- Full name

- Contact details including email address and telephone number

- Delivery and billing addresses

- Payment-related information (processed securely via third-party payment gateways)

- Order history and transaction details

- Website usage data where applicable

2.2 ZakaHealth does not store customer card or banking details.

3. Purpose of Collection

3.1 Personal information is collected for the following purposes:

- Processing and fulfilling orders

- Payment processing

- Delivery and logistics coordination

- Customer communication and support

- Legal and regulatory compliance

- Fraud prevention and risk management

4. Processing and Storage of Information

4.1 Personal information is processed lawfully and in a reasonable manner that does not infringe on the privacy of the data subject.

4.2 Reasonable technical and organisational measures are implemented to safeguard personal information against loss, misuse, unauthorised access, or disclosure.

4.3 Personal information is retained only for as long as necessary to fulfil the purposes for which it was collected or as required by law.

5. Sharing of Personal Information

5.1 ZakaHealth does not sell or trade personal information.

5.2 Personal information may be shared with:

- Payment processors

- Courier and logistics partners

- Service providers required to fulfil orders or maintain systems

- Regulatory or legal authorities where required by law

5.3 All third parties are required to maintain appropriate confidentiality and security standards.

6. Data Subject Rights

6.1 Data subjects have the right to:

- Access their personal information

- Request correction or deletion of personal information

- Object to the processing of personal information

- Withdraw consent where processing is based on consent

6.2 Requests may be submitted using the official contact details provided on the ZakaHealth website.

7. Cookies and Website Usage

7.1 The ZakaHealth website may use cookies or similar technologies to improve user experience and website functionality.

7.2 Users may manage or disable cookies through their browser settings.

8. Cross-Border Data Transfers

8.1 Where personal information is processed or stored outside South Africa, ZakaHealth ensures that appropriate data protection safeguards are in place in accordance with POPIA requirements.

9. Data Breach Management

9.1 In the event of a data breach, ZakaHealth will take immediate steps to mitigate risk and comply with legal notification requirements where applicable.

10. Policy Updates

10.1 ZakaHealth reserves the right to amend this Privacy and Data Protection Policy at any time.

10.2 Updated versions will be published on the website and take effect upon publication.

11. Contact

11.1 For privacy-related queries or requests, data subjects may contact ZakaHealth through the official contact details provided on the website.