Privacy Policy

1. Who we are

Our website address is: https://www.bactraban.com.

Bactraban (Pty) Ltd is the Responsible Party for the personal information collected on this website, in terms of the Protection of Personal Information Act (POPIA), No 4 of 2013. We are committed to protecting your privacy and ensuring your personal data is handled securely and responsibly.

For any privacy-related questions or requests, please contact our Privacy Officer at: enquiries@bactraban.com

2. Data We Collect and Why

We collect and process your personal information to provide you with the services you request, fulfill orders, and enhance your overall browsing experience. We are committed to processing only the data necessary for these purposes.

Data Collected:

• Order and Transactional Data: When you purchase the On & Gone Mould Stain Remover or any other product, we collect your Name, Delivery Address, Phone Number, and Email Address.

  • Purpose: This data is essential for processing and fulfilling your order, communicating shipping updates, and meeting mandatory financial and tax record-keeping requirements. We retain this information for as long as legally required for tax and business records (typically 5–7 years).

• User Account Data: If you register an account on our website, we collect your Name, Email, and a secure, hashed version of your password.

  • Purpose: This data allows you to manage your account, track your order history, and facilitates faster checkout for future purchases. This information is retained for as long as your account remains active.

• Comments Data: When you leave comments on the site, we collect the data shown in the comments form, along with your IP address and browser user agent string.

  • Purpose: This helps us detect and prevent spam. Your comment and its metadata are retained indefinitely so we can automatically recognize and approve any follow-up comments, improving the user experience.

• Contact Form and Enquiry Data: When you use our contact form, we collect your Name, Email, and the content of your message.

  • Purpose: We use this data solely to respond to your direct inquiries, provide customer support, and keep a record of communication. We retain this data for 12 months for internal record-keeping.

3. Cookies and Tracking Technologies

• Comment Cookies: If you leave a comment, you may opt-in to save your name, email, and website in cookies for convenience. These cookies last for one year.

• Login Cookies: If you visit our login page, a temporary cookie is set to check if your browser accepts cookies. When you log in, we set up several cookies to save your login information (lasts two days) and screen display choices (lasts one year).

• Embedded Content: Articles on this site may include embedded content (e.g., videos, images, articles) from other websites. This content behaves as if you visited the other website directly, and those sites may collect data about you, use cookies, and track your interaction.

4. How and Why We Share Your Data

We will only share your personal data when necessary to run our business or comply with the law. We are committed to only sharing the minimal amount of data required.

• Shipping & Logistics: We share your Name, Delivery Address, and Phone Number with our accredited courier partners (e.g., The Courier Guy, Dawn Wing, etc.) solely for the purpose of fulfilling and delivering your order.

• Payment Processing: All credit card and payment processing is handled by secure, third-party payment gateways (e.g., PayFast, Peach Payments). We do not store your credit card details on our servers. Please refer to the privacy policy of the respective payment gateway for details on their data handling.

• Legal Compliance: We may disclose your data if required to do so by South African law or in response to valid requests by public authorities (e.g., a court order).

5. Media & Location Data

If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS) included. Visitors can download and extract this location data from images on the website.

6. Security Measures

We take reasonable and appropriate technical and organizational measures to ensure the integrity and confidentiality of your personal information, including using SSL encryption on our website and securing our database behind firewalls. We strive to prevent loss, misuse, or unauthorized access to the data under our control.

7. Your Rights Over Your Data (in terms of POPIA)

As a data subject under POPIA, you have the right to:

• Access Your Data: Request an exported file of the personal data we hold about you.

• Correct Your Data: Request that we correct any inaccurate or incomplete personal data.

• Erase Your Data (“Right to be Forgotten”): Request that we erase any personal data we hold about you. This right does not apply to data we are legally obliged to keep for administrative, legal, or security purposes (such as transactional records).

• Object to Processing: Object to the processing of your personal information, provided that this does not impact the lawfulness of processing before the withdrawal of consent.

To exercise any of these rights, please contact our designated Privacy Officer using the email address provided in Section 1.

8. Where Your Data is Sent

Visitor comments and data are checked through an automated spam detection service. If you request a password reset, your IP address will be included in the reset email.