PRIVACY POLICY FOR IMBALI BOTANICALS

Last Updated: October 2026

This Privacy Policy describes how Imbali Botanicals ("we", "us", or "our") collects, uses, stores, and protects your personal information when you visit or make a purchase from our online store. This policy is compiled in accordance with the Protection of Personal Information Act (Act 4 of 2013) of South Africa ("POPIA").

1. THE PERSONAL INFORMATION WE COLLECT

We collect and process various types of personal information to provide you with our services. This includes:

• Identity and Contact Data: Your full name, email address, telephone number, and billing/delivery addresses.

• Transaction Data: Details about products you purchase from us. Payment details are processed securely through our chosen third-party gateway (Stitch) and are not stored on our servers.

• Technical and Usage Data: Your IP address, browser type, time zone settings, and browsing behavior on our website collected via cookies.

2. PURPOSE OF DATA COLLECTION

We use your personal information strictly for legitimate business purposes, including:

• Fulfilling, processing, and dispatching your orders.

• Communicating with you regarding your purchases, updates, or customer support queries.

• Sending you marketing communications, provided you have given explicit opt-in consent to receive them.

• Improving our store offerings, website performance, and user experience.

3. THIRD-PARTY DISCLOSURES

We do not sell, rent, or trade your personal information. To fulfill our contractual obligations to you, we share your data with trusted service providers strictly for operational purposes:

• Payment Processing: All online payments are securely processed by Stitch. Your financial information is handled directly by them subject to their strict security protocols.

• Order Delivery: Your delivery address and contact details are shared with The Courier Guy to ensure safe and timely transit of your botanical goods.

4. DATA SECURITY

We implement robust technical and organizational security measures to protect your personal information against unauthorized access, loss, or destruction. Our website utilizes secure layer encryption (SSL), and access to backend administrative tools is strictly restricted.

5. YOUR POPIA RIGHTS

Under POPIA, you hold the following rights regarding your data:

• The right to request access to the personal information we hold about you.

• The right to request the correction or updating of inaccurate or outdated information.

• The right to request that your data be deleted or destroyed.

• The right to object to processing or withdraw marketing consent at any time.

To exercise any of these rights, please contact our Information Officer at the details below.

6. CONTACT DETAILS & INFORMATION OFFICER

For any questions, requests, or concerns regarding your privacy, please reach out to us:

Business Name: Imbali Botanicals

Information Officer Email: info@imbalibotanicals.co.za

Physical Address: Sonheuwel, Mbombela, South Africa

Should you feel we have not resolved your concern adequately, you have the right to lodge a complaint with the Information Regulator of South Africa (enquiries@inforegulator.org.za).