Privacy Policy

1. Introduction

This Privacy Policy applies to your use of our website, social media pages, newsletters, and any other digital platforms operated by The Biltong Bandit ("we", "us" or "our").

The purpose of this Privacy Policy is to outline how, why, and when we collect, use, disclose, and protect your personal information in compliance with the Protection of Personal Information Act 4 of 2013 ("POPIA").

Please read this Privacy Policy together with any other terms and conditions or notices we provide when collecting or processing your personal information.

This Privacy Policy explains how we process your personal information when you interact with our Platforms. Where consent is required by law for a particular processing activity, we will request that consent separately and appropriately.

2. Who This Policy Applies To

This Privacy Policy applies to all users, including unregistered visitors and subscribers. It is especially relevant if you:

• Subscribe to our newsletters or marketing materials
• Contact us through our forms or email
• Interact with us via our social media or website
• Receive promotional offers and content from us

If you are under the age of 18, you must obtain permission from a parent or guardian before using our Platforms or submitting any personal information. We may verify such consent and suspend access if proper permission is not provided.

3. Definitions

"Personal Information" means information that identifies or relates specifically to you, as defined in POPIA.
“Processing” refers to any operation involving your personal information, including collecting, storing, modifying, using, or sharing.
“You” or “your” refers to any user or visitor to our Platforms.

4. Responsible Party and Information Officer

Responsible Party

The Biltong Bandit is the responsible party that determines the purpose of and means for processing personal information collected via our Platforms.

Information Officer

In accordance with POPIA, our appointed Information Officer is:

• Name: Dominic Duncan Gray Hutchison
• Email: dom@thebiltongbandit.co.za

The Information Officer is responsible for monitoring POPIA compliance, managing data subject requests, and liaising with the Information Regulator.

For general queries and operational contact, you can also write to: hello@thebiltongbandit.co.za.


5. What Personal Information We Collect

We collect personal information that is reasonable, relevant, and non-excessive for our business purposes. This may include:

• Name and surname

• Email address

• Contact number (optional)

• Marketing preferences

• IP address and device/browser type (automatically collected)

• Location information (if enabled)

• Correspondence or communication with us

• Website and newsletter interactions (e.g. opens, clicks)
  
  

You are responsible for ensuring that the personal information you provide is accurate and kept reasonably up to date.

Special personal information: We do not collect special personal information (such as religious beliefs, health information, biometric data, political opinions, or sexual orientation) unless we explicitly state otherwise and have a lawful basis for doing so.

6. Lawful Processing of Personal Information

We process personal information only where permitted under POPIA. Depending on the circumstances, this may include where:

• Consent: where you have given clear, informed consent for a specific purpose, such as subscribing to our newsletter.

• Performance of a contract: where processing is necessary to perform a contract with you (e.g., fulfil an order, respond to an enquiry).

• Legitimate interests: where processing is necessary for our legitimate business interests (e.g., website analytics, fraud prevention), provided those interests are not overridden by your rights and freedoms.

• Legal obligation: where processing is necessary to comply with a legal duty.

We will always aim to use the least intrusive lawful basis and limit processing to the minimum necessary.

7. Why We Process Your Personal Information

We process your personal information in order to:

• Subscribe you to our newsletter or marketing campaigns

• Send you special offers, promotions, and brand updates

• Respond to inquiries and communicate with you

• Improve our website and marketing activities

• Comply with legal obligations

• Keep internal records for business and compliance purposes

• Analyse user engagement for better service delivery
  
  

8. Use of Cookies and User Tracking

When you visit or use our Platforms, we may use cookies and similar technologies to:

• Enhance your browsing experience

• Track usage patterns and analytics

• Serve personalised marketing or advertising content

• Prevent repetitive content
  
  

Cookies do not store your personal details directly, but may link to sessions or IP addresses.

We may use third-party services including (but not limited to) Google Analytics, Google Ads, and Meta (Facebook/Instagram) pixels for analytics and advertising purposes. These third-party providers may place cookies on your device when you interact with our content or adverts.

Where required, we will request your consent before placing non-essential cookies on your device. You can manage or disable cookies through your browser settings at any time.

Website Analytics

We use website analytics tools to better understand how visitors use our website. These tools collect information such as pages visited, time spent on the site, browser type, device type and general location. This information is aggregated where possible and helps us improve our website and customer experience.

9. Direct Marketing and Opt-Out Rights

We may send you electronic marketing communications where you have consented to receive them or where otherwise permitted by applicable law. Every electronic marketing communication will provide an appropriate means for you to opt out of receiving further marketing.

• Click the “unsubscribe” link in our emails, or

• Contact us at hello@thebiltongbandit.co.za
  

You have the right to opt out of direct marketing at any time.

10. Disclosure of Your Personal Information

We will not sell or rent your personal information to third parties. We may disclose your personal information to:

• Shopify and our ecommerce service providers
• Payment gateways
• Delivery partners (including Pargo and couriers)
• Email marketing providers
• Analytics providers
• Law enforcement where required by law

Where third parties process personal information on our behalf, we take reasonable steps to ensure that appropriate confidentiality, security and data protection measures are in place.

11. Transferring Information Outside of South Africa

Some of our service providers and cloud-based systems may process or store personal information outside South Africa. Where personal information is transferred outside South Africa, we will take reasonable steps to ensure that the transfer complies with POPIA and that appropriate safeguards or other lawful grounds for the transfer are in place.

12. Retention of Personal Information

We will retain your personal information:

• For as long as necessary to fulfil the purposes outlined in this Policy

• As required by law

• Until you withdraw your consent (where applicable)
  
  

Once the retention period ends, we will securely delete or anonymise your personal information.

13. Security Measures

We take reasonable measures to protect your personal information from:

• Unauthorised access

• Loss or theft

• Misuse or damage

• Unlawful processing
  
  

These measures include encryption, secure servers, access controls, and signed agreements with service providers.

14. Your Rights Under POPIA

You have the right to:

• Access your personal information

• Correct or update your details

• Request deletion or restriction of processing

• Object to direct marketing

• Withdraw your consent

• Lodge a complaint with the Information Regulator
  
  

To exercise these rights, contact us at hello@thebiltongbandit.co.za. Proof of identity may be required.

15. Lodging Complaints

If you believe we have violated your POPIA rights, you may lodge a complaint with the Information Regulator:

Information Regulator (South Africa)
Website: Information Regulator official website
Email: enquiries@inforegulator.org.za
Telephone: 010 023 5200

16. Children’s Information

We do not knowingly collect personal information from children under 18 without obtaining consent from a competent person (a parent or guardian). If we discover we have inadvertently collected information from a child without appropriate consent, we will take steps to delete that information as soon as reasonably possible.

17. E-commerce and Payment Information

Payment information is processed securely by our third-party payment providers. The Biltong Bandit does not store your full payment card details.

Order Fulfilment

To process and deliver your order, we may share the personal information necessary to fulfil your purchase with trusted service providers, including payment processors, courier companies, and collection partners such as Pargo. These providers only receive the information required to perform their services.

18. Links to Third-Party Sites

Our Platforms may contain links to third-party websites. We are not responsible for the privacy practices or content of those sites, and this Policy does not apply to them. We encourage you to review the privacy policies of any external sites you visit.

19. Automated Decision-Making and Profiling

We do not use your personal information for automated decision-making or profiling that may have legal or significant effects on you.

20. POPIA Minimisation Notice

In accordance with POPIA, we will only collect and process the minimum personal information necessary for the purposes stated in this Policy.

21. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The latest version will always be available on our website. By continuing to use our Platforms, you accept any changes made.

22. Contact Us

For any queries or requests regarding this Privacy Policy, please contact us:

Information Officer
Dominic Duncan Gray Hutchison 
dom@thebiltongbandit.co.za

General enquiries 
hello@thebiltongbandit.co.za

Last updated: 5 August 2026