1. Who we are
Randburg Runner (“we”, “us”, “our”) is an online & physical retailer of running shoes, registered in South Africa. We are the Responsible Party in terms of POPIA, meaning we determine the purpose and means of processing your personal information.
Contact details of the Responsible Party:
- Business Name: Randburg Runner
- Registration No: [Your Company Reg No]
- Address:5th Street &, 4th Ave, Linden, Randburg, 2104
- Email: [email protected]
- Phone: +27 (0)83 252 7551
2. Personal Info We Collect
We collect only the personal information necessary to provide our services. This may include:
Account & Identity Information
- Full name
- Email address
- Password (encrypted)
- Date of birth (if provided)
Contact & Delivery Information
- Physical delivery address
- Billing address
- Phone number
Transaction Information
- Order history and details
- Payment method type (we do not store full card numbers)
- Invoice and receipt records
Browsing & Technical Information
- IP address
- Browser type and device information
- Pages visited and time spent on our website
- Cookies and similar tracking data (see Section 8)
Communications
- Emails, chat messages, or queries you send us
- Customer service correspondence
We do not collect special personal information (such as race, health data, religious beliefs, or biometric data) unless you voluntarily provide it and consent to its processing.
3. How we Collect your Information
We collect personal information in the following ways:
- From marketing platforms if you sign up for our newsletter or promotions
- Directly from you when you create an account, place an order, or contact us
- Automatically when you browse our website (via cookies and analytics tools)
- From third-party payment processors when you complete a transaction
- From courier or logistics partners in relation to your delivery
4. Why we Colelct and use your Information
In terms of POPIA, we may only process your personal information for specific, lawful purposes. We use your information to:
| Purpose | Legal Basis |
|---|---|
| Process and fulfil your orders | Performance of a contract |
| Send order confirmations and delivery updates | Performance of a contract |
| Manage your account and login | Performance of a contract |
| Process payments securely | Performance of a contract / Legal obligation |
| Respond to your queries and complaints | Legitimate interest / Legal obligation |
| Send marketing emails and promotions | Consent (you may opt out at any time) |
| Improve our website and user experience | Legitimate interest |
| Comply with legal and tax obligations | Legal obligation |
| Prevent fraud and ensure security | Legitimate interest / Legal obligation |
We will not use your personal information for any purpose other than those listed above without your consent.
5. WHO WE SHARE YOUR INFORMATION WITH
We do not sell, rent, or trade your personal information. We may share it only with trusted third parties where necessary:
Service Providers (Operators under POPIA)
- Payment gateways (e.g. PayFast, Peach Payments, Ozow) — to process transactions
- Courier and logistics companies — to deliver your orders
- Email and SMS platforms — to send order and account notifications
- Website hosting and cloud services — to operate our platform
- Analytics providers (e.g. Google Analytics) — to understand website usage
Legal & Regulatory Authorities We may disclose your information to law enforcement, regulators, or courts if required by law, a court order, or to protect our legal rights.
Business Transfers In the event of a merger, acquisition, or sale of our business, your personal information may be transferred to the new entity, subject to the same protections under this policy.
All third-party service providers are required to handle your information in accordance with POPIA and are bound by confidentiality agreements.
6. Who we share your data with
We retain your personal information only for as long as necessary for the purposes it was collected, or as required by law:
| Information Type | Retention Period |
|---|---|
| Account information | Duration of your account + 3 years after closure |
| Order and transaction records | 5 years (as required by tax law) |
| Customer service correspondence | 3 years |
| Marketing preferences | Until you unsubscribe or withdraw consent |
| Website analytics data | 26 months (standard Google Analytics) |
After the applicable retention period, your information will be securely deleted or anonymised.
7. Your rights under popia
As a data subject under POPIA, you have the following rights:
- Right to access — You may request a copy of the personal information we hold about you.
- Right to correction — You may request that we correct inaccurate or incomplete information.
- Right to deletion — You may request that we delete your personal information, subject to legal retention obligations.
- Right to object — You may object to the processing of your personal information, including for direct marketing purposes.
- Right to withdraw consent — Where processing is based on consent, you may withdraw it at any time without penalty.
- Right to lodge a complaint — You have the right to lodge a complaint with the Information Regulator of South Africa.
To exercise any of these rights, contact us.
We will respond to all requests within 30 days as required by POPIA.
8. Cookies
Our website uses cookies and similar tracking technologies to improve your browsing experience.
Types of cookies we use:
- Essential cookies — Required for the website to function (e.g. your shopping cart, login session). These cannot be disabled.
- Analytics cookies — Help us understand how visitors use our website (e.g. Google Analytics). These are anonymous and aggregated.
- Marketing cookies — Used to show you relevant advertising on other platforms (e.g. Facebook Pixel, Google Ads). These are only activated with your consent.
You can manage or disable non-essential cookies at any time via the cookie settings banner on our website, or through your browser settings. Disabling certain cookies may affect website functionality.
9. Direct MArketing
We may send you promotional emails, SMS messages, or notifications about new products, sales, and offers — but only if you have given us consent to do so.
We will never sell your contact details to third-party marketers.
You may opt out of marketing communications at any time by clicking “Unsubscribe” in any email, or by contacting us at marketing@[yourstore].co.za.
Opting out of marketing will not affect transactional communications related to your orders.
10. Security of your information
We take reasonable and appropriate technical and organisational measures to protect your personal information against loss, theft, unauthorised access, disclosure, or misuse. These include:
- SSL/TLS encryption on all web transactions
- Encrypted storage of passwords
- Restricted staff access to personal data on a need-to-know basis
- Regular security assessments of our systems
- Secure third-party payment processing (we do not store card details)
Despite these measures, no system is completely secure. In the event of a data breach that poses a risk to your rights, we will notify you and the Information Regulator as required by POPIA.
11. Cross-Border Transfers
Some of our service providers (such as cloud hosting or analytics platforms) may be based outside South Africa. Where we transfer your personal information to a third country, we take steps to ensure it receives adequate protection, including through contractual obligations equivalent to those required by POPIA.
12. Changes to this policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. When we do, we will update the “Last Updated” date at the top of this page and, where the changes are significant, notify you by email or a prominent notice on our website.
We encourage you to review this policy periodically. Your continued use of our website after any changes constitutes acceptance of the updated policy.
This Privacy Policy was drafted in accordance with the Protection of Personal Information Act 4 of 2013 (POPIA). We are committed to handling your personal information responsibly, transparently, and lawfully.