InDIGInis Privacy Policy — Protection of Personal Information Act (POPIA)

Last updated: July 2026

InDIGInis (“we”, “us”, or “our”) operates the website www.indiginis.co.za. We are committed to protecting your privacy and processing your personal information in accordance with the Protection of Personal Information Act (POPIA) of South Africa. This policy explains how we collect, use, and safeguard your personal information when you make a purchase on our website.

1. Information we collect

We only collect personal information that is absolutely necessary to process your transactions and deliver your orders. We do not run email subscription lists or newsletters. The only personal information we collect is gathered during the checkout and purchase process, which includes:

• Identity Data: Full name, surname.
• Contact Data: Email address, phone number.
• Delivery Data: Physical shipping address.
• Financial Data: Payment details (processed securely via our third-party payment gateway).

2. How we use your information

We use your personal data strictly for the following purposes:

• Processing and fulfilling your e-commerce orders. Sellers receive Buyer information only to fulfil specific orders. Sellers are legally prohibited from using this data for independent marketing.
• Communicating with you regarding your order status, delivery, or returns.
• Complying with South African statutory tax and accounting obligations.

3. Sharing your information (Operators)

We will never sell or rent your personal information to third parties. We only share your data with essential third-party service providers (known as “Operators” under POPIA) to complete your order:

• Courier & delivery services: to drop off your packages.
• Secure payment gateways: to process your credit card or EFT payments securely. We do not store your raw financial or card data on our servers.

4. Data security

We take the security of your personal information seriously. We implement appropriate technical and organizational measures (such as SSL encryption on our website) to secure your data and prevent unauthorized access, loss, or theft.

5. Data retention

We retain your transaction records only for as long as required by South African law (e.g. SARS requirements for tax record-keeping, which is typically 5 years).

6. Your legal rights

Under POPIA, you have the right to:

• Request access to the personal information we hold about you.
• Request the correction or update of any inaccurate or outdated data.
• Request that we delete your data (subject to legal retention requirements).

7. Contact us

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact our designated Information Officer at: info@indiginis.co.za