Last updated: 21 July 2026. This policy is written for the Protection of Personal Information Act 4 of 2013 ("POPIA").
1. Responsible party
Infuzed, contactable at sales@infuzed.online, is the responsible party for personal information processed through infuzed.online.
2. What we collect and why
- Order information — name, email, phone, delivery address: to conclude and deliver your order (contractual necessity).
- Account information — the above plus your password (stored only as a one-way hash): to operate your account.
- Age confirmation — your confirmation that you are 18+: legal obligation for age-restricted goods.
- Marketing consent — only if you opt in; every email includes an opt-out and we keep a record of consent.
- Reviews and enquiries — what you submit, to display (reviews, after moderation) or respond (enquiries).
- Security data — IP address and request logs for fraud prevention, rate-limiting and audit (legitimate interest).
3. Sharing
We share only what is necessary, only with: Paystack (payment processing — we never see your card number), the courier delivering your parcel (name, address, phone), and our hosting infrastructure. We do not sell or rent personal information, and we do not use third-party advertising trackers.
4. Retention
Order and payment records are retained as required for tax and accounting law; enquiry records for up to 24 months; security logs for up to 12 months; marketing data until you opt out. Your cart is stored against a random token in your browser.
5. Security
HTTPS everywhere; passwords hashed with bcrypt; payment pages hosted by Paystack (PCI-DSS); role-restricted administrative access with audit logging; secrets stored outside the web root.
6. Your rights
You may request access to, correction of, or deletion of your personal information, or object to processing, by emailing sales@infuzed.online from your account address. We respond within a reasonable time and in any event as POPIA requires. You may also lodge a complaint with the Information Regulator (South Africa) — inforegulator.org.za.
7. Cookies
See our Cookie Policy: we use only strictly necessary cookies (session, cart, and your saved preferences). No advertising cookies.