Privacy policy (POPIA)

Who is responsible

The responsible party is PawPack. Our Information Officer can be reached at support@paw-pack.co.za.

What we collect

• Your name, email, cellphone number and delivery address.
• Your dog's name, size, chew style, allergies and birthday.
• Your order, payment and delivery history, and your reason if you cancel.
• Messages you send us.
• Basic device and browsing information through cookies (see our Cookie policy).

We do not collect or store your card details. Stitch or Payfast, our payment providers, process them.

Why we use it

• To take payment, pack and deliver your boxes, and send order, delivery and billing messages.
• To keep allergens out of your dog's box and send a free birthday box.
• To answer your questions and handle cancellations and complaints.
• To send you box reveals and dog tips if you agreed. You can unsubscribe in any email.
• To prevent fraud and meet our legal obligations.

Who we share it with

Only with service providers who help us run PawPack, under agreements to keep it safe: Shopify (our store), Stitch and Payfast (payments), Aramex or The Courier Guy (delivery), our email provider, and our hosting and database providers. We do not sell your personal information.

Information stored outside South Africa

Some of these providers store information on servers outside South Africa. We only use providers that are bound by laws or agreements giving protection similar to POPIA, as section 72 requires.

How long we keep it

For as long as you are a customer and afterwards only as long as we need it for tax, accounting and legal reasons, usually 5 years.

Your rights

You may ask what information we hold about you, ask us to correct or delete it, object to us using it, and unsubscribe from marketing at any time. Email support@paw-pack.co.za. If you are unhappy with how we handle your information, you may complain to the Information Regulator at inforegulator.org.za.

Security

We protect your information with access controls, encryption in transit and by limiting who can see it. If we ever have a breach that affects you, we tell you and the Information Regulator as POPIA requires.