1. Introduction
This Privacy Policy outlines how Dis-Chem Pharmacies (Pty) Ltd (“Dis-Chem,” “we,” “us,” or “our”), as the operator of the Dis-Chem Living Fit website (www.dischemlivingfit.co.za), collects, processes, protects, and shares your personal information. This applies to anyone who accesses our website, places online orders, or interacts with us (“you” or “your”). All online orders are fulfilled by Dis-Chem Pharmacies (Pty) Ltd, and this policy governs those activities.
We are committed to protecting your privacy under the Protection of Personal Information Act, 4 of 2013 (“POPIA”), and other South African laws. By using this website or providing your personal information, you:
- Agree to this Privacy Policy and authorize us to process your personal information as described herein.
- Consent to Dis-Chem, our service providers, and necessary third parties processing your personal information for the purposes outlined below.
This policy may change without prior notice. Updates will be posted at www.dischemlivingfit.co.za/terms/privacy-policy, and continued use implies acceptance. Please review it regularly.
2. Collection of Personal Information
We collect personal information (as defined by POPIA as information relating to an identifiable person) in various ways:
- Directly: When you register an account, place an order, sign up for newsletters, or contact us (e.g., via support@dischemlivingfit.co.za).
- During Our Relationship: Through order processing, customer support, or account management.
- Automatically: Via cookies, web beacons, or analytics tools tracking website usage.
- Third Parties: From Dis-Chem Pharmacies (as fulfiller), couriers, payment gateways, or partners.
- Public Sources: Where legally permissible.
- CCTV: If you visit Dis-Chem facilities linked to order fulfillment.
Types of Information Collected:
- Identity: Name, ID number (if required).
- Contact: Email, phone number, delivery address.
- Financial: Payment details (processed via third-party gateways, not stored).
- Transaction: Order details, history, Dis-Chem order reference numbers.
- Technical: IP address, browser type, device info.
- Usage: Pages visited, preferences.
- Location: Delivery address or inferred from IP.
- Marketing: Communication preferences, survey responses.
- Health-Related: Voluntary data (e.g., fitness goals) tied to product use.
3. Legal Basis for Processing
We process your personal information based on:
- Consent: Where you explicitly agree (e.g., marketing opt-in).
- Contract: To fulfill orders or manage your account.
- Legitimate Interests: For fraud prevention, website improvement, or operational efficiency.
- Legal Obligation: To comply with tax laws, POPIA, or regulatory requests.
4. Purposes of Processing
We use your personal information primarily for the purpose it was collected, and for compatible secondary purposes, including:
- Order Fulfillment: Processing, delivering, and tracking orders.
- Customer Service: Responding to inquiries (e.g., via 0860 347 243).
- Marketing: Sending newsletters or promotions (opt-in required unless you’re an existing customer; see “Direct Marketing”).
- Website Management: Improving functionality, analyzing usage, personalizing content.
- Fraud Prevention: Verifying payments and account activity.
- Compliance: Meeting legal or regulatory requirements.
- Security: Protecting our systems and rights.
We may process aggregated, anonymized data for research or statistical purposes.
5. Sharing of Personal Information
We share your personal information only as necessary:
- Dis-Chem Pharmacies (Pty) Ltd: For order fulfillment, returns, and customer support.
- Service Providers: Couriers (e.g., for shipping), third-party payment gateways (e.g., for transactions), IT providers (e.g., hosting), and analytics firms (e.g., Google Analytics). These parties are bound by contracts ensuring POPIA-compliant protection.
- Partners: Limited data with entities like Informed Choice/Informed Sport for supplement certification, anonymized where possible.
- Legal Authorities: If required by law, court order, or to protect Dis-Chem’s rights, property, or safety.
We do not sell your personal information. Third-party operators must use reasonable security measures equivalent to ours.
6. International Transfer of Personal Information
We primarily process data within South Africa. If transferred outside (e.g., to cloud providers), we ensure recipients are subject to laws or agreements providing POPIA-equivalent protection.
7. Data Security
We use appropriate technical and organizational measures to protect your personal information against loss, alteration, or unauthorized access, including:
- SSL encryption (https://) for data transmission.
- PCI-DSS compliant payment pages hosted in a secure DMZ, with 3D Secure authentication where applicable.
- Restricted access to data within Dis-Chem Systems.
No credit card data is stored by us; it’s handled securely by third-party gateways. While we strive to protect your data, no system is immune to breaches beyond our control.
8. Data Retention
We retain your personal information only as long as necessary:
- Order Data: 5 years post-purchase for tax/consumer law compliance, unless deletion is requested (subject to legal exceptions).
- Account Data: Until account deletion or 2 years of inactivity.
- Marketing Data: Until you opt out.
- Longer retention applies if required by law or with your consent.
Data is then deleted or anonymized.
9. Data Accuracy and Minimization
Accuracy: You’re responsible for providing accurate, up-to-date information and notifying us of changes (e.g., via support@dischemlivingfit.co.za).
Minimization: We limit processing to data sufficient for its purpose.
10. Your Rights
Under POPIA, you have the right to:
- Be Notified: If we collect your data or if it’s breached (e.g., hacked).
- Access: Request what data we hold about you.
- Correct: Update inaccurate information.
- Delete: Request removal (where no legal basis for retention exists).
- Object: Challenge processing (e.g., for marketing).
- Avoid Automation: Not be subject to solely automated decisions affecting you.
- Complain: Contact the Information Regulator if your rights are violated.
To exercise these rights, email support@dischemlivingfit.co.za or call 0860 347 243 (Monday–Friday, 08:00–16:30). We’ll respond within 30 days after verification.
11. Direct Marketing
We may send marketing communications if:
- You opt in explicitly (e.g., newsletter signup).
- You’re an existing customer, and it’s relevant to prior purchases.
Unsubscribe anytime via email links or by contacting us. Administrative messages (e.g., order updates) will continue as needed.
12. Children’s Privacy
This website is for users 18+. We do not knowingly collect data from children without guardian consent. Contact us if you suspect otherwise.
13. Cookies and Tracking
We use cookies and similar technologies to:
- Essential: Enable core functions (e.g., checkout).
- Functional: Remember preferences (e.g., login).
- Performance: Analyze site usage (e.g., page visits).
- Targeting: Deliver relevant ads (via third parties).
Cookies may be first-party (ours) or third-party (e.g., advertisers). Manage them via browser settings, though disabling may limit functionality. See the table below for examples:
Type | Purpose | Duration |
---|---|---|
Essential Cookies
|
Enable site functions (e.g., cart)
|
Session
|
Functional Cookies
|
Save preferences (e.g., login)
|
Persistent (until deleted)
|
Performance Cookies
|
Track visits (anonymous)
|
Varies (e.g., 1 year)
|
Targeting Cookies
|
Personalize ads
|
Varies (e.g., 6 months)
|
14. Contact Details
- Dis-Chem Contact: support@dischemlivingfit.co.za or 0860 347 243 (Monday–Friday, 08:00–16:30). Alternative: careline@dischem.co.za.
- Information Officer: popia@dischem.co.za.
- Information Regulator:
- Tel: 012 406 4818,
- Email: inforeg@justice.gov.za,
- Website: https://www.justice.gov.za/inforeg/.
15. Governing Law
This Privacy Policy is governed by South African law, with disputes under SA court jurisdiction.