Privacy Policy

1. Our Commitment to Your Privacy

Green Marvel (Pty) Ltd ("we", "us", "our") is committed to protecting your personal information in accordance with the Protection of Personal Information Act 4 of 2013 (POPIA) and other applicable South African data protection laws.

This Privacy Policy describes how we collect, use, store, and protect your personal information when you visit greenmarvel.co.za, create an account, or purchase our Products.

We are the Responsible Party for the processing of your personal information.

2. Information We Collect

We collect the following categories of personal information:

2.1 Information You Provide Directly

• Account information: Username, email address, password (encrypted)
• Profile information: Full name, billing address, shipping address, phone number
• Order information: Products purchased, order history, delivery preferences
• Communications: Messages you send us via email, contact forms, or SMS

3.2 Information Collected Automatically

• Usage data: Pages visited, time spent, links clicked, products viewed
• Device information: Browser type, operating system, device type, screen size
• IP address and approximate location
• Cookies and similar technologies (see our Cookie Policy)

3.3 Information From Third Parties

• Payfast: Payment confirmation status (we do not receive your card details)
• The Courier Guy: Delivery tracking information
• Google Analytics: Aggregated, anonymized usage statistics

3. How We Use Your Information

We use your personal information for the following purposes:

3.1 To Fulfill Your Orders

• Process payments through Payfast
• Arrange delivery via The Courier Guy
• Send order confirmation and shipping notifications via SMS
• Manage returns and refunds

3.2 To Manage Your Account

• Authenticate you when you log in
• Send password reset emails
• Display your order history
• Pre-fill checkout forms with saved information

3.3 To Improve Our Service

• Analyze website usage to improve user experience
• Identify popular Products and optimize our offering
• Fix technical issues and bugs

3.4 To Communicate With You

• Respond to your inquiries and support requests
• Send marketing communications (only if you opt in)
• Notify you of important changes to our service

3.5 Legal and Compliance

• Comply with legal obligations under South African law
• Protect against fraud, abuse, and security threats
• Enforce our Terms of Service

4. Information Sharing

We do not sell your personal information. We share information only with the following parties, and only as necessary:

We may also disclose information if required by law, court order, or to protect our rights or the safety of others.

5. Data Security

We take reasonable steps to protect your personal information from loss, misuse, unauthorized access, alteration, or destruction. Our security measures include:

• HTTPS encryption on all pages, including login and checkout
• Encrypted password storage — we never see your plaintext password
• Secure payment processing via Payfast (PCI-DSS compliant)
• Limited access — only authorized staff can access customer data
• Regular security updates to our software and systems

While we strive to protect your information, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security.

6. Data Retention

We retain your personal information only for as long as necessary to:

• Fulfill the purposes outlined in this Privacy Policy
• Comply with legal obligations (e.g., SARS requires invoices to be kept for 5 years)
• Resolve disputes and enforce our agreements

When information is no longer required, we will securely delete or anonymize it.

7. Your Rights Under POPIA

Under POPIA, you have the following rights:

To exercise any of these rights, email us at [email protected]. We will respond within 30 days.

8. Cookies and Tracking

We use cookies and similar technologies to improve your browsing experience. For details about what cookies we use and how to manage them, please see our Cookie Policy.

9. Third-Party Links

Our website may contain links to third-party websites (e.g., social media, partner sites). We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies before providing any personal information.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The "Last updated" date at the top of this page indicates the most recent revision.

For material changes, we will notify you by email or via a notice on our website before the changes take effect.

11. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us: