Customer privacy notice

Thank you for choosing to be part of our community at Zuco (PTY) Ltd. At Zuco we are committed to protecting your privacy and to ensure that your personal information is collected and used properly, lawfully, and transparently.

The following disclaimer explains how Zuco obtains uses, and discloses your personal information, in accordance with the requirements of the Protection of Personal Information Act (POPIA).

The information we collect

Zuco collects and processes users’ personal information, obtained directly from the user when they register on our website. Where possible, the company will inform users directly regarding the provision of required information, as well as what information is optional.

Website usage information may be collected using “cookies” which allows Zuco to collect standard usage statistics.

Such information may include:

• Publicly Available Personal Information. We collect first name, maiden name, last name, nickname, phone numbers, business email, business phone number, current and former address, and other similar data.
• Personal information provided by user. We collect purchase history and other similar data.
• Credentials. We collect passwords (these are not disclosed to any third parties), password hints, and similar security information used for authentication and account access.
• Payment data. We collect the data necessary to process payments when purchases are made, such as user payment instrument number (credit card number), and the security code associated with user’s payment instrument. All payment data is securely stored and protected by multiple encryptions.
• All personal information provided by the user must be true, complete, and accurate, the user is responsible for notifying Zuco of any changes to such personal information.
• Information automatically collected. We automatically collect certain information when users visit, use, or navigate our website. This information is anonymous and does not reveal users’ identity (name, contact information, etc.) but may include device and usage information, such as IP address, browser and device characteristics, operating system, language preferences, referring URLs, device name, country, location, information on how and when our services are used, and other technical information. This information is primarily needed to maintain the security and operation of our services, and for our internal analytics and reporting purposes.

Like many businesses, Zuco also collects information through cookies and similar technologies.

• Online identifiers. We collect devices, tools, and protocols, such as IP (Internet Protocol) addresses, cookie identifiers, or other such as the ones used for analytics and marketing, device’s geolocation, and other similar data.

Use of user information

We may use collected personal information strictly for the purposes disclosed to and agreed upon with users. Additionally, exceptions may be made if users’ personal information is required for legal or research purposes.

Purposes of collected user personal information:

• To facilitate account creation and login process. If the user chooses to link an account with us to a third-party account (such as their Google or Facebook account), we use the information we are permitted to collect from those third-parties to facilitate account creation and the login processes for the performance of the contract.
• To send marketing and promotional communications. We and /or our third-party marketing partners may use the personal information to communicate marketing and promotional opportunities in accordance with the marketing preferences of the user. Users may unsubscribe from our marketing emails at any time (see the “What are user privacy rights” section below).
• To notify users of administration information. We may access personal information to send users product, service, and new feature information and/or information about changes to our terms, conditions, and policies.
• Fulfil and manage orders. We may use user information to fulfil and manage orders, payments, returns, and exchanges made through the our website.
• Request feedback. We may use personal information to request feedback and to contact users regarding use of our website and services.
• To protect our services. We may access personal information as part of our efforts to keep our services safe and secure (for example: for fraud monitoring and prevention).
• To enforce our terms, conditions, and policies for Business purposes, Legal- and Contractual reasons.
• To respond to legal requests and prevent harm. If we receive a subpoena or other legal request, we may inspect the data we hold to determine how to respond.
• To manage user accounts. We may use personal information for the purposes of managing user accounts and account functionality.
• To deliver services to the user. We may use personal information to provide users with requested services.
• To respond to user inquiries/provide user support. We may access user information to respond to inquiries and attend to any potential issues users may experience with use of our services.
• For other Business purposes. We may use personal information for other Business processes, such as data analysis, identifying usage trends, determining the effectiveness of our promotional campaigns and to evaluate and improve our services, products, marketing, and user experience. We may use and store this information in aggregated and anonymised form so that it is not associated with individual end users and does not include personal information. We will not use identifiable personal information without user consent.

Disclosure of information

We may disclose users’ personal information to our service providers who are involved in the delivery of products or services. We have agreements in place to ensure that these service providers comply with the privacy requirements as outlined by the Protection of Personal Information Act.

We may process personal information under the following guidelines:

• Consent: We may process user data if the company has specific consent from the user to access personal information with a specific purpose.
• Legitimate interests: We may process user data when reasonably necessary to achieve our legitimate business interests.
• Performance of a contract: Where we have entered a contract with the user, we may process personal information to fulfil the terms of our contract.
• Legal obligations: We may disclose personal information where we are legally required to do so to comply with applicable law, governmental request, a judicial proceeding, court order, or legal process such as in response to a court order or subpoena (including in response to public authorities to meet national security or law enforcement requirements).
• Vital interests: We may disclose users personal information where we believe it is necessary to investigate, prevent, or act regarding potential violations of our policies, suspected fraud, situations involving potential threats to the safety of any person and illegal activities, or as evidence in litigation in which we are involved.

More specifically, we may need to process user data or share personal information under the following circumstances:

• Vendors, consultants and other third-party service providers. We may share user data with third- party service providers, vendors, contractors or agents who perform services on our behalf and require access to such information. Examples include payment processing, data analysis, email delivery, hosting services, customer services and marketing efforts. We may allow selected third parties to use tracking technologies on services, which will enable them to collect data about how users interact with services over time. This information may be used to, among other things, analyse and track data, determine the popularity of certain content and better understand online activity. Unless described in this policy, we do not share, sell, rent, or trade any personal user information with third parties for their promotional purposes.
• Business transfers. We may share or transfer users’ personal information in connection with on-going negotiations of any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company.
• Third-party advertisers. We may use third- party advertising companies to serve ads when users visit our website. These companies may use information about user visits to our website and other websites that are contained in web cookies and other tracking technologies to provide advertisements about services and goods that may interest users.
• Third-party advertisements. We may disclose personal information where we are legally required to do so to comply with applicable law, governmental requests, a judicial proceeding, court order, or legal process, such as in response to a court order or a subpoena (including in response to public authorities to meet national security or law enforcement requirements).

Information security

Zuco is legally obligated to provide adequate protection for the personal information we hold and to stop and/or report unauthorised access to personal information. We will regularly and continuously review our security controls and related processes to ensure that your personal information remains secured.

Cookies

Our website uses Google Maps APIs. Google Maps APIs Terms of Service can be viewed via this link cloud.google.com/maps-platform/terms/. To better understand Google’s privacy policy, please refer to policies.google.com/privacy, also refer to our Cookies. Policy.

Retention of information

We will only keep users personal information for as long as it is necessary for the purposes outlined in this privacy policy, unless a longer retention period is required or permitted by law (such as tax, accounting, or other legal requirements). No purpose in this policy will require that Zuco, keeps users’ personal information for longer than necessary to comply with any financial, company, or similar legislative requirements of the user’s account.

When the company has no on-going legitimate business need to process users personal information, we will either delete, or anonymise it, or, if this is not possible (for example, in a case where users’ personal information has been stored in backup archives), we will securely store said personal information.

Data security

Zuco has implemented appropriate technical and organisational security measures designed to protect the security of any personal information we process. However, please note that the company cannot guarantee that the internet itself is 100% secure. Although we do our due diligence to protect users’ personal information, the transmission of personal information to and from our services is at users’ own risk. Users should only access the services within a secure environment and trustworthy network connection.

Information relating to user rights

Zuco has implemented appropriate technical and organisational security measures designed to protect the security of any personal information we process. However, please note that the company cannot guarantee that the internet itself is 100% secure. Although we do our due diligence to protect users’ personal information, the transmission of personal information to and from our services is at users’ own risk. Users should only access the services within a secure environment and trustworthy network connection.

User rights: Access to information

Users have a right to request a copy of the personal information we hold. To do so, users may contact us via the number/ email addresses provided on our website and specify the information they require.

Users that are residents of the European Economic Area and that may believe we are unlawfully processing their personal information, also have the right to complain to the local data supervisory authority.

Account information

If a user would like to review or change the information in their account at any time, or terminate account, users may contact us by:

• Using the contact information on our website (www.zucosales.co.za).
• Communicating with us via the Live Chat resource on our website (available from 09h00 to 16h00 on business days).

Upon user request to terminate account, we will deactivate or remove the account and personal information from our active databases. However, some information may be retained in our files to prevent fraud, troubleshoot problems, assist with any investigations, enforce our Terms of Use and /or comply with legal requirements.

Cookies and similar technologies: Most Web browsers are set up to accept cookies by default. Users can normally set browsers to remove cookies and reject cookies. If users choose to remove or reject cookies, this could affect certain features and services of our website. To opt-out of interest-based advertising by our advertisers on our website, users can visit http: //www.aboutads.info/choices/.

Opting out of email marketing: Users can unsubscribe from our email marketing list at any time by clicking Unsubscribe in the emails we send or by contacting us using the details provided below. Users will then be removed from the marketing email list – however, we are still required to communicate service-related that are necessary for the administration and use of accounts.

Correction of your information

Users have the right to request that Zuco updates, corrects or deletes personal information. The company will require a copy of the user’s ID document to verify their identity before making changes to personal information we may hold. Users are responsible for ensuring that personal information is accurate and up to date.

Definition of personal information

According to the Protection of Personal Information Act, “personal information” is defined as information relating to an identifiable, living, natural person, and where applicable, an identifiable, existing juristic person. Further to the POPI Act, Zuco also includes the following items as personal information:

• All addresses, including residential, postal, email, and IP addresses.
• Change of name – for which we require copies of the marriage certificate or official charge of name document issued by the state/Department of Home Affairs/government.

Contact us

Users with inquiries about our Privacy Policy or require further information about our privacy practices; wish to withdraw consent; exercise preferences or access; or correct personal information, contact us via the numbers /email addresses provided on our website.

Compliance to the Protection of Personal Information Act (POPIA), also known as the POPI Act, is mandatory for most organisations in South Africa. As the Information Regulator monitors and amends the POPI Regulations further, so will Zuco.

The information published to our website, is provided for general compliance purposes only and does not constitute legal advice. We make every effort to ensure that the content is accurate and up to date.