Privacy Policy

Introduction

At Tjoef Tjom, we are committed to protecting your privacy and ensuring that your personal information is handled in accordance with the Protection of Personal Information Act (POPI Act) of South Africa. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our services.

Information We Collect

We may collect the following types of information:

• Personal Information: Name, email address, phone number, business name, and other contact details you provide when filling out forms on our website.
• Business Information: Details about your business premises, foot traffic, and other information relevant to vending machine placement.
• Visual Information: Photos of your business premises and proposed installation locations that you upload through our application form.
• Technical Information: IP address, browser type, device information, and cookies when you browse our website.

How We Use Your Information

We use the information we collect for the following purposes:

• To evaluate your application for a vape vending machine
• To communicate with you about our services
• To provide customer support
• To improve our website and services
• To comply with legal obligations
• To protect our rights and prevent fraud

POPI Act Compliance

In accordance with the Protection of Personal Information Act (POPI Act) of South Africa, we adhere to the following principles:

• Accountability: We take responsibility for ensuring that the POPI Act principles are complied with.
• Processing Limitation: We process your information in a lawful and reasonable manner that does not infringe upon your privacy.
• Purpose Specification: We collect your information for specific, explicitly defined purposes and do not process it further in a way incompatible with those purposes.
• Further Processing Limitation: Any further processing of your information is compatible with the original purpose of collection.
• Information Quality: We take reasonable steps to ensure that your information is complete, accurate, not misleading, and updated when necessary.
• Openness: We maintain documentation of our processing activities and notify you when we collect your information.
• Security Safeguards: We secure the integrity and confidentiality of your information by taking appropriate technical and organizational measures.
• Data Subject Participation: You have the right to access, correct, or request deletion of your personal information.

Your Rights Under the POPI Act

As a data subject under the POPI Act, you have the right to:

• Request access to your personal information
• Request correction of your personal information
• Request deletion of your personal information
• Object to the processing of your personal information
• Submit a complaint to the Information Regulator
• Institute civil proceedings regarding alleged interference with your personal information

Information Sharing and Disclosure

We do not sell, trade, or otherwise transfer your personal information to outside parties without your consent, except in the following circumstances:

• To trusted third parties who assist us in operating our website, conducting our business, or servicing you, provided they agree to keep this information confidential
• To comply with legal requirements, such as responding to a subpoena or court order
• To protect our rights, property, or safety, or the rights, property, or safety of others
• In connection with a business transfer, such as a merger, acquisition, or sale of assets

Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, accidental loss, destruction, or damage. However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements. When determining the appropriate retention period, we consider the amount, nature, and sensitivity of the personal information, the potential risk of harm from unauthorized use or disclosure, and the purposes for which we process the information.

Children's Privacy

Our website and services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If you are a parent or guardian and believe that your child has provided us with personal information, please contact us.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The updated version will be indicated by an updated "Last Updated" date, and the updated version will be effective as soon as it is accessible. We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information.

Contact Information

If you have any questions or concerns about this Privacy Policy or our data practices, please contact our Information Officer:

Last Updated: 2025/03/24