Privacy Policy

This policy explains how GreenGene Pharma (PTY) LTD. ("GreenGene Pharma", "we") collects, uses, shares and protects your personal information when you visit www.greengenepharma.co.za, create an account or buy from us, in line with the Protection of Personal Information Act, 2013 (POPIA).

1. Who is responsible for your information

Responsible party	GreenGene Pharma (PTY) LTD.
Address	Durban, 3629, South Africa
Information Officer	info@greengenepharma.co.za, +27 69722 5475

2. What we collect

• Contact and delivery details — your name, email address, phone number and delivery address, when you order, create an account or contact us.
• Order information — what you bought, prices, discounts, delivery details, any order notes, and the payment status and reference from the payment provider. We never receive or store your card details; payments are processed by the payment gateway.
• Account information — if you create an account: your saved details, and, if you choose to add them, your birthday (day and month) and newsletter preference. We do not use passwords: you sign in with a one-time code sent to your email, which we keep only in scrambled form for 10 minutes.
• Rewards information — rewards you have earned and claimed, your reward codes, your referral code, and whether an order was placed through someone's referral link or code.
• Reviews and messages — the name, email, rating and text of reviews you submit, and messages you send us.
• Technical information — the essential cookies listed in section 7, and standard server logs (such as IP address and browser type) kept by our hosting provider for security.

We do not use advertising trackers, social-media pixels or third-party analytics on this website.

3. Why we use it

• To process and deliver your orders, send order and delivery emails, and handle returns — necessary to perform our contract with you.
• To run your account and the rewards programme, including milestones, review and referral rewards, and your birthday reward — at your request when you use these features.
• To send our newsletter — only if you have opted in. You can unsubscribe at any time using the link in every newsletter email or in your account.
• To keep our store secure and prevent fraud and abuse — our legitimate interest.
• To meet legal obligations, such as keeping tax and accounting records.

We do not sell your personal information. Where we would like to use your information for a new purpose, we will ask for your consent first where the law requires it.

4. Who we share it with

We share only what is needed, with service providers ("operators") who must keep it confidential and secure:

• Payment gateways (such as Yoco, Bob Pay and Paystack) — to take your payment.
• Couriers and our fulfilment platform (Bob Go and its courier partners) — your name, phone number and delivery address, to deliver your order.
• Email delivery provider (Brevo) — your email address and the content of our emails to you.
• Hosting provider (Railway) — which hosts our website and database.
• Authorities — where the law requires it.

If you were referred by a friend, the friend who referred you only sees how many people they referred who placed an order — not your name or any other details. If you refer someone, they see only your first name.

5. Information stored outside South Africa

Some of our service providers, including our hosting and email providers, store information on servers outside South Africa (for example in the United States and the European Union). We use providers that are bound by data-protection laws, agreements or binding rules that give your information a level of protection substantially similar to POPIA, as required by section 72 of POPIA.

6. How long we keep it

• Order and invoice records: for at least five years, as required by tax law.
• Account, rewards and newsletter information: for as long as your account is active, or until you ask us to delete it.
• Sign-in codes: 10 minutes. Reviews: while they are published.

7. Cookies and browser storage

We only use cookies and storage that make the website work. They do not track you across other websites.

Name	Purpose	How long
gg_customer	Keeps you signed in to your account	30 days, or until you sign out
gg_ref	Remembers which friend's referral link you used	30 days
gg_ref_banner_hidden	Remembers that you closed the referral welcome banner	Until you close your browser
greengene-cart (browser storage)	Remembers the contents of your cart	Until you clear it or check out
greengene-customer (browser storage)	Saves your checkout details on your device, only if you tick "Save my details"	Until you untick it or clear your browser

You can block or delete cookies in your browser settings, but parts of the website (such as signing in) will not work without them.

8. Your rights

Under POPIA you have the right to:

• ask what personal information we hold about you, and get a copy of it — signed-in customers can download their data from My account → My details;
• ask us to correct or update it — most details can be edited in your account;
• ask us to delete it, or object to how we use it — you can request deletion from your account, or email us (we may need to keep some records, such as invoices, where the law requires);
• withdraw your consent to marketing at any time; and
• complain to the Information Regulator.

To exercise these rights, contact our Information Officer at info@greengenepharma.co.za. We may need to confirm your identity first.

9. Security

We protect your information with measures such as encrypted connections (HTTPS), signed sign-in sessions, scrambled sign-in codes, access controls and reputable service providers. No system is completely secure, but if a breach affects your information we will notify you and the Information Regulator as POPIA requires.

10. Children

Our website and products are intended for adults. We do not knowingly collect personal information from anyone under 18.

11. Complaints

If you are unhappy with how we handle your information, please contact us first. You may also lodge a complaint with the Information Regulator (South Africa): inforegulator.org.za · POPIAComplaints@inforegulator.org.za.

12. Changes to this policy

We may update this policy from time to time. The latest version will always be on this page, with the date it was last updated.