Vula

Privacy Policy

Privacy Policy (POPIA & GDPR Compliant)


Bedoon Essm South Africa (Trademark Reg: 2024/29462) respects your privacy and is committed to protecting your personal data. This privacy policy complies with the South African Protection of Personal Information Act (POPIA) and the EU General Data Protection Regulation (GDPR), outlining how we collect, use, store, and protect your information.


1. Information We Collect

When you interact with our platform, we may collect the following data:


  • Identity & Contact Data: Name, email address, phone number, and billing/delivery addresses.

  • Financial Data: Payment details (processed securely via encrypted third-party payment gateways; we do not store your raw credit card data).

  • Technical & Usage Data: IP address, browser type, operating system, and how you navigate and interact with our Next.js web application (as outlined in our Cookie Policy).

2. How We Use Your Data

We process your personal information strictly for the following purposes:


  • To process and fulfill your orders, including processing payments and arranging delivery.

  • To communicate with you regarding order updates, customer support, and administrative notices.

  • To improve our website’s functionality, accessibility, and overall user experience.

  • To deliver targeted marketing and promotional offers (only where you have explicitly opted-in/consented).

3. Data Sharing and Third Parties

We do not sell your personal data. We only share your information with trusted third parties necessary to operate our business, including:


  • Logistics Partners: Such as The Courier Guy, strictly for delivering your orders.

  • Service Providers: Payment gateways, cloud hosting infrastructure, and analytics providers.

  • Legal Authorities: If required by law to comply with a legal obligation or protect our rights.

4. Data Security and Retention

We implement robust technical and organizational security measures within our architecture to prevent unauthorized access, loss, or alteration of your personal data. We retain your data only for as long as necessary to fulfill the purposes for which it was collected, including satisfying any legal, accounting, or reporting requirements.


5. Your Legal Rights (POPIA & GDPR)

Under POPIA and GDPR, you possess specific rights regarding your personal data:


  • Right to Access: Request a copy of the personal data we hold about you.

  • Right to Rectification: Request correction of incomplete or inaccurate data.

  • Right to Erasure (Right to be Forgotten): Request the deletion of your personal data where there is no lawful reason for its continued processing.

  • Right to Object & Restrict: Object to our processing of your data for direct marketing, or request that we suspend processing.

  • Right to Data Portability: Request the transfer of your automated personal data to yourself or a third party.

6. Contact Us

If you have any questions about this Privacy Policy, wish to exercise your rights, or want to contact our Information Officer / Data Protection Officer, please reach out to our support team at legal@bedoonessm.co.za.