Introduction

CartGoza (“we”, “us”, or “our”) is committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, store, and share your information when you use our website at cartgoza.com (the “Site”).

This policy is governed by the Protection of Personal Information Act (POPIA) of South Africa and other applicable data protection laws.

Information We Collect

We collect information that you provide directly to us, including:

• Account information – name, email address, phone number, and password when you register an account.
• Order information – billing and shipping addresses, payment details, and purchase history when you place an order.
• Communication data – any information you provide when you contact our support team or submit a form on our Site.
• Technical data – IP address, browser type, device information, and browsing behaviour collected automatically through cookies and similar technologies.

How We Use Your Information

We use the information we collect to:

• Process and fulfil your orders, including delivery and payment processing
• Create and manage your account
• Communicate with you about your orders, account, or support queries
• Improve our website, products, and services
• Detect and prevent fraud or unauthorised activity
• Comply with legal obligations
• Send marketing communications (only with your consent)

Payment Processing

Payments on CartGoza are processed through PayFast, a PCI-DSS compliant payment gateway based in South Africa. We do not store your full credit card details on our servers. PayFast handles all sensitive payment information in accordance with their own privacy and security policies.

How We Share Your Information

We may share your personal information with:

• Courier and delivery partners – to fulfil and deliver your orders.
• Payment processors – to process your transactions securely.
• Service providers – who help us operate our business (e.g., hosting, analytics, customer support tools).
• Legal authorities – when required by law or to protect our legal rights.

We do not sell your personal information to third parties.

Data Security

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, loss, or misuse. These include encryption of data in transit (SSL/TLS), secure server infrastructure, and access controls.

Cookies

Our Site uses cookies to improve your browsing experience, remember your preferences, and analyse site traffic. You can control cookie settings through your browser. Disabling cookies may affect some features of the Site.

Your Rights Under POPIA

As a South African resident, you have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate or incomplete information
• Request deletion of your personal information
• Object to the processing of your personal information
• Withdraw consent for marketing communications at any time
• Lodge a complaint with the Information Regulator of South Africa

Data Retention

We retain your personal information for as long as necessary to provide our services, fulfil legal obligations, resolve disputes, and enforce our agreements. Order records are retained for a minimum of five years as required by South African tax and commercial law.

Children’s Privacy

Our Site is not intended for use by children under the age of 18. We do not knowingly collect personal information from minors. If we become aware that we have collected data from a child, we will take steps to delete that information promptly.

Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.

Contact Us

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us:

• Email: support@cartgoza.com
• Contact form: cartgoza.com/page-contact