ZAR

Privacy Policy

Introduction

Stocknow acknowledges and upholds consumer rights and the importance of privacy. We are deeply committed to our customers' privacy and trust. We guarantee that we will collect and manage personal information transparently and lawfully, following the Protection of Personal Information Act, 2013 (POPIA). Before sharing any information with Stocknow, please take the time to carefully review this statement:

When you provide information to Stocknow, you are granting consent for us to process your personal information according to this statement.

This statement is bound by non-negotiable provisions of relevant laws.

If you do not agree with any part of this statement, we kindly request that you refrain from submitting any information to Stocknow, as it may impact our ability to provide our products and services to you.

Our commitment to your privacy includes:

  • Implementing reasonable safeguards, both in terms of computer and physical security measures, to protect the confidentiality and security of the information we gather.
  • Collecting only the minimum necessary information to improve our services, products, and meet our objectives.
  • Allowing access to information only to properly trained and authorized employees.
  • Not disclosing your information to external parties unless required or allowed by law and authorized by our Information Officer. Your privacy is of utmost importance to us.

Purpose 

Stocknow offers a broad array of products and services, digital offerings, a loyalty program, and value-added services. This statement outlines how we utilize the information we collect when you use our products and services. By utilizing our products, services, or providing us with information, you consent to the processing of your information as described in this statement. Furthermore, this statement:

  • Details the types of information we collect.
  • Clarifies how and why we collect and use your information.
  • Describes with whom we may share your information.
  • Explains your rights and options regarding your information.
  • Provides guidance on how to contact us or the relevant authorities.

Certain segments of our operations may require the collection and utilization of personal information to provide their products and services. In most cases, they will also reference this statement, but it's essential to review their specific terms and conditions as well. Stocknow websites or mobile apps may include links to websites run by other organizations with their own privacy policies. Please carefully read the terms, conditions, and privacy policies of these external websites before sharing any personal information, as we do not assume responsibility or liability for other organizations. We offer these links for your convenience, but we lack control over, do not review, and are not responsible for third-party sites, their content, or any products or services available through them.

Scope

In this statement, the terms "Stocknow," "us," "our," or "we" pertain to one or multiple entities within the Stocknow Group that conduct business in South Africa. 

Legislation and regulations

This Statement is governed by the laws of the Republic of South Africa, specifically POPIA and the Consumer Protection Act, 2008 (CPA), along with other pertinent data protection regulations. Any disputes that may arise will initially seek resolution through internal channels, and if that proves unfeasible, the matter will be referred to arbitration in Cape Town at a location determined by us, following the Uniform Rules of the High Court of South Africa, to the extent allowed by law.

Roles and Responsibilities

According to POPIA, the following key roles are pertinent to this Statement:

Information Regulator: The Information Regulator Office is responsible for tasks such as educating, monitoring, enforcing compliance, managing complaints, and facilitating international cooperation in the enforcement of privacy laws. In the context of this Statement, this office refers to individuals appointed by the President of South Africa under POPIA.

Information Officer: This is the individual who serves as the head or CEO of Stocknow and is registered with the Information Regulator in accordance with the PAIA and POPIA. They are responsible for ensuring Stocknow's compliance with these Acts.

Deputy Information Officer(s): These individual(s) are registered with the Information Regulator under the PAIA and POPIA and have been delegated specific responsibilities to carry out activities on behalf of the Information Officer. In the context of this statement, they comprise the members of the Privacy and Security Committee.

Data Subject: This refers to any natural or legal person who can be identified through an identifier such as a name, location data, or specific factors related to their physical, physiological, genetic, mental, economic, cultural, or social identity. In this Statement, the data subject is the person (also known as a consumer or customer) whose information is being processed by Stocknow.

Responsible Party: The Responsible Party is the entity that determines the purpose and methods for processing personal information and is responsible for safeguarding the data subject's information. In the context of this Statement, the Responsible Party can be either Stocknow or a business partner, depending on the situation.

Operator or Processing Party: The Operator or Processing Party is the entity that processes (collects, receives, records, collates, stores, anonymizes, retrieves, alters, uses, distributes, erases, or deletes) information on behalf of a Responsible Party, as defined by a contractual agreement or mandate. In this Statement, the Operator or Processing Party can be either Stocknow or a business partner.

Information Collection

To register for or utilize Stocknow's programs and services, such as our loyalty program and Online Shopping, you must furnish us with your personal information, including, but not limited to, your South African ID number or passport number (for non-South African citizens), name, surname, contact details, and other personal particulars. You can provide this personal information either directly or indirectly (through a representative), by completing application forms for our products and services or requesting additional information via various means such as in writing, through our website, over the phone, or other communication methods.

We only gather information that is reasonably necessary for our business operations and related purposes. The specific information we collect and retain depends on the intended purpose. Whenever possible, we will clarify the mandatory information you must provide and what is optional. Typically, the information we process is used to facilitate your purchases, handle orders and refunds, manage and enhance our daily activities, improve our loyalty program, websites, and mobile platforms to enhance your overall customer experience.

Additionally, we may obtain your personal information from representatives acting on your behalf, regulatory authorities, or other third parties that possess such information. By agreeing to this, you commit to supplying accurate and up-to-date information to Stocknow, and you also agree to keep this information current as needed. In order to enhance the accuracy of our data and gain a better understanding of our customers, we may enrich it using information from third-party sources, including credit bureaus.

Services in Collaboration with business partners

Stocknow has formed several partnerships and offers a variety of goods and services. In order to provide these goods and services, we need to process different levels of information, including information obtained from or shared with relevant external business partners, whether they are local or international. This information is used to verify or facilitate the goods and services offered by these business partners. When you agree to the terms and conditions of Stocknow and/or its business partners, you grant us permission to share the necessary information to enable the delivery of the product or service to you.

Please be aware that certain products may require you to directly provide additional information to one of our business partners. In such cases, Stocknow processes this information on behalf of the business partner, and therefore, the respective business partner is responsible for safeguarding this information, not Stocknow. When you sign up with one of our business partners, it's important to understand that you are establishing a direct and legally binding relationship with that partner under their own terms, conditions, and privacy policies. They are considered the responsible party under POPIA for handling your information in that context.

‎   Persons under 18 years‎

Stocknow will not intentionally gather information from individuals (minors) below the age of 18. Our website, mobile apps, products, and services are intended for use by individuals who are 18 years old or older.

If you are under 18, you should not share any information with Stocknow unless you have obtained consent from your parent or guardian. If you become aware that a "child" has shared their personal information with us without parental consent, please contact us promptly. In such a case, if we discover that a child has provided us with personal information without parental consent, we will take measures to delete the data and deactivate the child's account.

Your Account

When registering for specific Stocknow services, you will need to create a user account. By doing so, you agree to provide accurate information and ensure its ongoing accuracy. You also commit to not fabricating a false identity or setting up an account on behalf of anyone other than yourself. It's your responsibility to safeguard your username and password. This includes using a strong password and refraining from sharing it intentionally or accidentally with anyone else. If someone else gains access to your username and password and makes changes to your profile or conducts transactions on your behalf, you will be held accountable for those changes and their outcomes.

If you suspect any misuse or compromise of your username and password, it's crucial to report it promptly to our Customer Care Line at +2711 839 6425 or through the provided web form.

Cookies

A cookie is a small piece of data that your web browser stores on your computer's hard drive when you interact with our web server. Most web browsers automatically accept cookies, but you can adjust your settings to block them if you prefer. This data can pertain to your preferences, device, or other information and is primarily used to ensure that the website functions as you expect it to. While this information typically doesn't directly identify you, it can enhance your web experience by personalizing it. If you choose not to accept cookies, certain features of our website may not function correctly. Additionally, our website utilizes push notifications. For more details, please refer to our Cookies Policy.

Embedded Scripts

An embedded script is a segment of computer code created to gather data about how you engage with the Stocknow website. This code is temporarily loaded onto your device from either our web server or a third-party service provider. It remains active only while you are connected to our website and is deactivated or removed afterward.





Mobile Device Identifiers

Certain mobile service providers uniquely identify mobile devices. Stocknow ‎or our third-party service providers may receive such device information if you ‎access our website or mobile applications through your mobile device when ‎allowing cookies or push notifications. For further information, please see ‎our Mobile Application Policy and Cookies Policy.‎

Purpose and Use of Information

Stocknow utilizes the information collected from you or other sources for specific purposes, which are detailed below (though not exhaustive), and linked to the respective purpose:

  • ID number/passport number: This is used to identify you as a unique individual in our database, allowing us to validate your identity when updating profile details 
  • Biometric information: Collected for self-RICA processes.
  • Unique Identifiers: account, or other numbers, these are used for data matching when legally permitted. User IDs and passwords may also be collected.
  • Contact information: This facilitates essential support, communication, and customization of our services, such as OTPs, invoices, deliveries, direct marketing, promotions, and targeted advertising. It's also used for contact related to competition wins, feedback requests, and customer careline feedback.
  • Employment applications: Information related to job applications and correspondence.
  • Additional information: Any other data you provide directly or indirectly through various channels.
  • About your computer: Statistical data, including IP address, operating system, and browser type, is collected for effective content presentation and segmentation analysis based on transaction history.
  • Sharing with 3rd parties: Information may be shared with third parties for communication or facilitation of subscribed services.



In addition to these purposes, information may be used for complying with statutory and regulatory requirements, customer service, fraud detection, law enforcement, providing requested services, account management, operational, marketing, auditing, and legal requirements, monitoring communications for accuracy and security, market research, direct marketing, and more. Disclosure to third parties may occur for reasons outlined in this Statement, always ensuring the confidentiality of your Personal Information. Monitoring and recording of correspondence and communications may also take place, and data may be used to evaluate Stocknow’s business effectiveness, conduct internal investigations, and contribute to disease prevention and control.

Direct Marketing and Opting Out

If you're an existing customer, we'll reach out to you based on your chosen preferences regarding the products or services you've subscribed to. This could involve communication through various channels like phone, email, SMS, social media, and others, regarding products or services that might interest you.

For individuals who aren't existing customers, we will seek your consent to opt into our direct marketing communications.

If you ever wish to stop receiving promotional information or direct marketing messages from Stocknow, you can opt out at no cost. You can do this by unsubscribing from the specific communications you receive (by replying to an email or via SMS), accessing the online preferences portal, or by contacting our Customer Care Line at 011 839 6425.

‎ Retention and Destruction of Information

Stocknow ensures that the information it collects is stored in a manner that allows for your identification only for as long as it's necessary to honour your preferences and fulfil the specific purposes for which it was collected and processed. This retention period is also subject to the relevant applicable laws unless we have obtained your consent for indefinite processing.

In cases where you have closed your account, Stocknow may retain your information beyond that point if it's reasonably necessary to meet legal obligations, regulatory requirements, resolve disputes, maintain security, prevent fraud and misuse, enforce our agreements, or fulfil your request to unsubscribe from further communications from us.

We may also retain de-identified, anonymized, or pseudonymized information in a way that prevents your re-identification after your account has been closed. If none of the scenarios apply, Stocknow will permanently delete electronic data or shred paper records once the purpose of collecting the information has concluded.

Information Preservation and Protection

Stocknow is committed to taking reasonable measures to safeguard the information we collect, store, and process to prevent its misuse, loss, and unauthorized access, alteration, or disclosure. We store information both on our premises and with the assistance of our service providers.

Our approach to information security is guided by the principles of Confidentiality, Integrity, Availability, and Privacy (CIAP), as outlined in our Information Security Policy. This policy defines Stocknow's objectives and overall strategy for ensuring the security of our business information and protecting any personally identifiable information under our custody. We aim to achieve the following five key objectives related to Information Security:

  • Culture: Foster a security-conscious culture through continuous education and awareness.
  • Risk-based Protection: Implement a focused, risk-based approach to protect assets and information.
  • Compliance: Ensure compliance with legal and regulatory requirements, both locally and internationally.
  • Detect and Respond: Maintain a balance between the need for protection and effective detection and response.
  • Integration: Integrate security considerations into business decisions through ownership and leadership.

While we make every effort to protect your information and maintain its accuracy, it's important to note that no data transmission over the internet is entirely secure, and no IT system, whether physical or electronic, is completely immune to breaches. Despite this, we take all reasonable steps within our control to safeguard your information and ensure its integrity. Information quality is crucial to us, as it ensures that the data we use is suitable, complete, and reliable, ultimately allowing us to provide better services.

Information Disclosure

Despite anything stated to the contrary in this Statement, Stocknow retains the right to disclose any information pertaining to you in situations where it is legally mandated, and when we have a belief that such action is essential to:



(a) Fulfil a governmental request.

(b) Comply with legal obligations or legal proceedings.

(c) Safeguard and uphold our legal rights, property, website, or the rights of other users.

(d) Respond to emergency situations aimed at protecting the health and safety of our website's users or the general public.

Certain authorized Stocknow employees or agents may have access to some or all of your information. Additionally, we may share your information within our group of affiliated companies. Such data sharing adheres to our CIAP information security principles and related practices.

We engage service providers to deliver our services and maintain our systems, encompassing tasks such as maintenance, security, analysis, auditing, payments, customer service, marketing, and system development. These service providers may access your information to the extent reasonably required to carry out their responsibilities on our behalf, following role-based access principles. When entering into contracts with service providers, we endeavour, wherever possible, to impose contractual obligations that ensure your information is managed and protected in accordance with applicable laws and industry best practices.

It's worth noting that some of our service providers may be located in countries with varying levels of information protection compared to South Africa. When feasible, we seek to engage service providers in countries with similar or more rigorous information protection standards. Alternatively, we stipulate that service providers in less strictly regulated countries must commit to safeguarding customer information to the same standard as we do.

We want to assure you that, unless you have expressly consented otherwise, we will never engage in the sale of your personal information.

Your Right to Access Information

Depending on the specific product or service you have signed up for as the Data Subject, you can make updates to certain portions of your information through our digital platforms. Alternatively, you can make updates by reaching out to our Customer Care Line.



You have the following rights:

  • You have the right to confirm with us, free of charge, whether we possess any information about you.
  • You can request the record of information held by us.
  • You are entitled to request a description of the information we hold, including details about the identity of any third parties or categories of third parties who have had access to the information.
  • You can update and rectify any outdated or inaccurate information that we hold about you.
  • You may request the destruction or deletion of information about you that we are no longer authorized to retain.
  • You have the right to modify your communication preferences and/or opt-out of communications we may send you.

Before granting access to your information, we may ask for proof of identity. We might need up to 21 (twenty-one) days to respond to requests for information. In accordance with PAIA, we may refuse to disclose certain information.

If you wish for Stocknow to delete all the information we have about you, please contact our Customer Care Line. Keep in mind that you may need to terminate all agreements you have with us, including but not limited to Online Shopping, as we cannot maintain our relationship with you without at least some of your information. Additionally, we may refuse to delete certain information if required by law or if it is necessary to protect our rights.

Information Breach Notification

A security incident or data breach can be defined as a potential threat to the Confidentiality, Integrity, Availability, or Privacy of IT systems and/or information. Stocknow has established the Security Incident Response process to effectively address such incidents, ensuring a swift and efficient response. A crucial aspect of this process is keeping all affected parties informed and updated.

In cases where there are reasonable grounds to suspect that your information has been accessed, altered, deleted, or obtained by an unauthorized individual, we will adhere to the Stocknow Security Incident Response process. This includes notifying both the Information Regulator and, when possible, you as the affected party. Such notifications will be carried out in accordance with the provisions of POPIA and will occur as promptly as reasonably possible after the discovery of the breach. This timing will take into consideration the legitimate needs of law enforcement and any necessary measures to determine the extent of the breach and restore the integrity of our systems.



Amendment of this Statement

We may make changes to this Statement periodically for various reasons, including but not limited to the following:

  • Introducing new systems, operational methods, services, products, property offerings, or facilities.
  • Complying with alterations in legal or regulatory requirements.
  • Enhancing the clarity and favourability of this Statement for your benefit.
  • Rectifying any identified errors or mistakes.
  • Any other reasonable or necessary purposes determined by StockNow in its sole discretion.

Any such modifications will become effective and form part of your agreement with Stocknow when we provide notice of the changes by publishing them on our website. It is your responsibility to regularly check the website for updates.

Contact Us

If you have inquiries regarding this Privacy Statement or want to exercise your rights concerning access, correction, or deletion of your information, please reach out to us through our Customer Care Line at 011 839 6425. Our dedicated team will make every effort to address your concerns promptly.

In case your query cannot be resolved through our Customer Care Line, and depending on the nature of your situation, our Customer Care Line will guide you on the appropriate steps to take and may refer your query to our in-house subject matter experts.

You can also contact our Information Officer or Deputy Information Officer using the following contact details:

Address: 29 Mineral Crescent, Crown Mines, Johannesburg

Telephone: +27 (11) 839 6425

Email: Contact@Stocknow.co.za