Privacy Policy
Last updated: 2026-07-05
KDBS ("we", "us") is the Responsible Party under the Protection of Personal Information Act 4 of 2013 ("POPIA") for personal information collected through https://velacommerce.co.za/s/kdbs.
1. Information we collect
- Account & order data: name, delivery address, email, phone, order history.
- Payment data: processed by our payment provider; we do not store card numbers.
- Delivery data: pickup-point selection and tracking references shared with our courier (Pargo, Bob Go, PUDO, Paxi, or the courier you select at checkout).
- Technical data: IP address, device, browser, and pages viewed (for security and analytics).
2. Lawful basis for processing (POPIA s.11)
We process your information to (a) perform the sale contract, (b) comply with tax and consumer law, and (c) pursue our legitimate interests in operating and securing the store. Marketing communications are sent only with your consent and you can opt out at any time.
3. Sharing with operators
We share personal information with Operators (POPIA s.1) who process it on our written instruction: - VelaCommerce — hosting, storage, and platform operations (data resident in South Africa). - Payment processor — to authorise and settle transactions. - Courier / pickup-point network — to deliver your order. - Email provider — to send order, shipping, and account emails.
A current Sub-Processor list and our Data Processing Agreement (DPA) skeleton are available on request from alan@kdbs.co.za.
4. Cross-border transfers
We host customer data in South Africa. Where an operator processes data outside South Africa, we rely on POPIA s.72 safeguards (binding agreements that provide an adequate level of protection).
5. Retention
We keep order records for 5 years to meet our obligations under the Tax Administration Act and the Consumer Protection Act. Marketing preferences are kept until you withdraw consent.
6. Your rights (POPIA s.5, 23, 24)
You may: - request a copy of the personal information we hold about you, - correct or delete information that is inaccurate or no longer needed, - object to processing (including direct marketing under s.69), - lodge a complaint with the Information Regulator (South Africa) at inforegulator.org.za.
To exercise these rights, email alan@kdbs.co.za. We will respond within a reasonable period and free of charge for the first request in any 12 months.
7. Security
We use TLS in transit, encryption at rest, and per-tenant access controls on the VelaCommerce platform. We will notify you and the Information Regulator of any compromise that affects your personal information, as required by POPIA s.22.
8. Cookies
We use strictly-necessary cookies for the cart and session. Analytics cookies are only set with your consent.
9. Contact / Information Officer
Information Officer: KDBS Email: alan@kdbs.co.za