Privacy Notice
How Gloobi Group CC collects, processes, and protects your personal information under POPIA.
1. Introduction
In this document, references to "we", "us", or "the Group" are to the following entities:
Gloobi Group CC
We recognise our accountability in terms of the Protection of Personal Information Act (hereinafter referred to as POPIA), to all our clients, suppliers, service providers and other third parties when processing their personal information.
To maintain a trust relationship with our Stakeholders, we are committed to complying with both the spirit and the letter of POPIA, other privacy protection legislation, and to always act with due skill, care, and diligence when dealing with personal information.
We will only process your personal information for purposes set out below and we will therefore only request information that is relevant and necessary for such processing. Your failure/refusal to provide this information could prevent or cause a delay in the fulfillment of our obligations to you.
2. What is Personal Information
Personal Information according to POPIA, means information relating to an identifiable, living, natural person, and where it is applicable, an identifiable, existing juristic person, including, but not limited to:
- Information relating to the race, gender, sex, pregnancy, marital status, national, ethnic or social origin, colour, sexual orientation, age, physical or mental health, well-being, disability, religion, conscience, belief, culture, language, and birth of the person;
- Information relating to the education or the medical, financial, criminal, or employment history of the person;
- Any identifying number, symbol, e-mail address, telephone number, location information, online identifier, or other particular assignment to the person;
- The biometric information of the person;
- The personal opinions, views, or preferences of the person;
- Correspondence sent by the person that would reveal the contents of the original correspondence;
- The views or opinions of another individual about the person; and
- The name of the person if it appears with other personal information relating to the person or if the disclosure of the name itself would reveal information about the person.
3. Where and When Do We Collect Personal Information
Information you provide to us:
Clients
- Directly from you
- Online Enquiries
Suppliers
- Invoices
- Contracts
- Service Level Agreements
4. When Will We Process Your Personal Information
We will only process your personal information for lawful purposes relating to our business if the following circumstances apply:
- You have consented thereto;
- A person legally authorised by you, or a court, has consented thereto;
- It is necessary to conclude or perform under a contract we have with you;
- The law requires or permits it;
- It is required to protect or pursue your, our, or a third party's legitimate interest; and/or
- You are a child, and a competent person (such as a parent or guardian) has consented thereto on your behalf.
5. When Will We Process Your Special Personal Information
Special personal information refers to the following categories of information:
- Religious and philosophical beliefs
- Race
- Ethnic origin
- Trade union membership
- Political beliefs
- Health including physical or mental health, disability, and medical history
- Biometric information
- Criminal behaviour where it relates to the alleged commission of any offence or the proceedings relating to that offence
We will process special personal information in the following instances:
- You have consented to the processing (in circumstances where we are legally obliged to obtain your consent); or
- It is necessary to exercise or defend a right or obligation in law; or
- It is necessary to comply with an international legal obligation of public interest; or
- It is for certain historical, research, or statistical purposes that would not adversely affect your privacy; or
- You have deliberately made your personal information public.
6. What Information Do We Collect, and How Do We Use Your Information
Kindly note that the following list is not comprehensive. It sets out the main purposes and data elements collected by Gloobi Group CC.
Clients / Customers
| Purpose | Data Elements |
|---|---|
|
|
Service Providers / Suppliers
| Purpose | Data Elements |
|---|---|
|
|
8. Your Rights and Obligations
Data Retention:
We keep most of your personal information while we still have a purpose, we need to provide you with services or where we are legally obligated to do so. We will also keep your information where you have agreed for us to do so, or have given your consent that we are allowed to do so.
We keep some of your information even after our business relationship has terminated, if it is reasonably necessary to comply with our legal obligations, meet regulatory requirements, resolve disputes, maintain security, prevent fraud and abuse, enforce our other user agreements, or fulfil your request to object to our processing of your information.
In practice:
- If you have not ordered (yourself or through your account) or signed in for five years, we erase your personal details. We email our team a week before, so anyone with an open matter can be kept.
- Orders, invoices and payment records are kept for five years, as South African tax law requires. When we erase you, they stay without your name, email, phone or address.
- Browsing history on the site (products viewed, searches) is kept for 13 months, email delivery records for one year, and technical debug logs from connected services for 30 days.
- Security and audit records are kept to protect accounts and investigate incidents.
You have rights in connection with your personal information. You have many choices about how your information is collected, used, and shared. In certain circumstances, by law, you have the right to:
Request access to your information
If you have an online account, sign in and use Account → Settings → Download my data: you get a file with your profile, addresses, orders, quotes, notification settings and marketing choices straight away, free of charge. For anything else we hold, ask what information we have about you and for a copy of it by emailing info@gloobigroup.co.za. There are some exemptions, which means you may not always receive all the information we process. When we can give you a copy it might be done at a certain fee, which will also be communicated to you at the time of your query.
Change or correct information
You have the right to ask us to rectify information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.
Delete information
You can ask us to delete or remove personal information under certain circumstances. If you have an online account, sign in and use Account → Settings → Delete my account. We email you a link to confirm, then wait 7 days so you can change your mind before we erase your name, email, phone, addresses and saved details and close your sign-in. Orders and invoices stay, without your personal details, because tax law requires us to keep them for five years. If an order is still on its way or your account buys on credit, our team checks it with you first.
Object to processing
You can do this where we are relying on your legitimate interest, public interest, or our legitimate interest (or those of a third party) and there is something about your particular situation which makes you want to object to processing on this ground. You also have the right to object where we are processing your data for direct marketing purposes or where you have given your consent for the specific processing and you want to retract your consent. Retracting your consent does not invalidate the information we lawfully processed while we had your consent to do so.
Request the restriction of processing
You can ask us to suspend the processing of personal data about you, for example, if you want us to establish its accuracy or the reason for processing it.
9. Changes to Our Privacy Notice
Changes to the privacy notice apply to your use of our services. We may modify this privacy notice from time to time, as required by changes in legislation. When material changes are made, we will provide notice through our services, or by other means, to provide you the opportunity to review the changes before they become effective.
You acknowledge that your continued use of our services after we publish our changes to this privacy notice means that the collection, use, and sharing of your personal information is subject to the updated privacy notice.
10. Other Important Information
Security:
We have put in place appropriate security measures to prevent your data from being accidentally lost, used, or accessed in an unauthorised way, altered, or disclosed. In addition, we limit access to your personal information on a business need-to-know basis, and subject to a duty of confidentiality.
If your personal information is accessed or acquired by someone not authorised to, we will tell the Information Regulator and you as soon as reasonably possible, as POPIA section 22 requires.
Transborder Information Transfers:
Some of the service providers we use to run the store are outside South Africa: our database and file hosting (Supabase, on Amazon Web Services), email delivery (Resend), website analytics (Google Analytics), AI features that read order emails (Anthropic) and WhatsApp messaging (Meta). We send them only what their service needs, and only to providers bound by law or contract to protect it to a standard at least as high as POPIA requires (section 72). Card payments are handled by Yoco in South Africa; we never see or store your full card number.
11. Contact Information
Our Information Officer
info@gloobigroup.co.zaThe Information Regulator
You have the right to lodge a complaint with the South African Information Regulator.