Privacy policy

Privacy Policy

This Privacy Policy explains how PrimePilot collects, uses, stores, and protects your personal information when you visit the Site, create an account, or purchase a Digital Product, in compliance with the Protection of Personal Information Act 4 of 2013 ("POPIA"). 

Who Is Responsible for Your Information 

PrimePilot, is the "responsible party" under POPIA for the personal information described in this policy.

Personal Information We Collect 

  • Contact and account details: name, email address, billing address, and phone number, collected when you create an account or place an order through Shopify's checkout. 

  • Order and transaction information: products purchased, order value, order date, and download/access history. 

  • Payment information: your payment card or payment method details are captured and processed directly by our payment processor, Payfast; PrimePilot does not itself store your full card details. 

  • Technical and usage information: IP address, browser type, device type, and pages visited on the Site, collected automatically via cookies and similar technologies, as described in clause 4.6 below. 

  • Marketing communication preferences: whether you have opted in to receive marketing emails or messages from us, and your engagement with those communications (e.g. opens, clicks). 

  • Any information you provide directly, such as in a support email, a review, or other correspondence with us. 

Why We Process Your Information 

Purpose 

Lawful basis under POPIA 

Processing and fulfilling your order, delivering Digital Products, and providing customer support 

Necessary for the performance of a contract with you 

Sending order confirmations, receipts, and essential service communications 

Necessary for the performance of a contract with you 

Sending marketing emails or promotional messages about new Digital Products 

Your consent (see clause 4.7 on direct marketing) 

Maintaining accounting and tax records 

Necessary to comply with a legal obligation 

Analysing Site usage to improve our products and the Site itself 

Our legitimate interest, balanced against your privacy rights 

Preventing fraud and protecting the security of the Site 

Our legitimate interest and/or legal obligation 

 

Who We Share Your Information With 

We do not sell your personal information. We share it only with the following categories of third party, each acting either as an independent responsible party or as our operator under POPIA: 

  • Shopify (the e-commerce platform that hosts the Site, processes orders, and stores customer account and order data on our behalf). 

  • Our payment processor(s), Payfast, to process your payment securely. 

  • Email/marketing platform(s) we use, such as Shopify Email and Klaviyo , to send order communications and, where you've consented, marketing emails. 

  • Analytics tools, such as Google Analytics, to help us understand how visitors use the Site. See clause 4.6 on cookies. 

  • Professional advisors (such as our accountant or attorney) where necessary, and any authority where required by law. 

Cross-Border Transfer of Information 

Some of the third parties listed in clause 4.4, including Shopify and certain analytics or email providers, may process or store your information on servers located outside South Africa. Where this occurs, we take reasonable steps to ensure the receiving party is subject to a data protection law, binding agreement, or certification scheme that provides an adequate level of protection substantially similar to POPIA, in line with section 72 of POPIA, or that another basis for the transfer (such as your consent, or performance of the contract with you) applies. 

Cookies and Similar Technologies 

The Site uses cookies and similar technologies, primarily through Shopify's own platform infrastructure and any analytics or advertising tools we've enabled Google analytics, for purposes including keeping your cart contents, remembering your login, understanding how visitors use the Site, and, where applicable, measuring the performance of our marketing. You can control or disable cookies through your browser settings, though some parts of the Site, such as checkout, may not function correctly without essential cookies enabled. 

Direct Marketing 

We will only send you direct marketing communications (such as promotional emails about new Digital Products) if you have opted in to receive them, or where you are an existing customer and we are marketing similar products to you under the conditions permitted by section 69(3) of POPIA. Every marketing email will clearly identify PrimePilot as the sender and include a simple way to unsubscribe. If you unsubscribe or otherwise object, we will stop sending you marketing communications and keep a record of your opt-out. This mirrors the POPIA direct marketing framework explained in PrimePilot's own Digital Marketing course, Module 6.4. 

Data Retention 

We retain your personal information for as long as necessary to fulfil the purposes described in this policy, including for the period required to meet our accounting and tax record-keeping obligations under South African law (generally five years from the relevant transaction), after which it is securely deleted or anonymised, unless a longer retention period is required by law or necessary to resolve a dispute. 

Security Measures 

We take reasonable technical and organisational measures to protect your personal information against loss, unauthorised access, alteration, or disclosure, including transmitting Site data over HTTPS/TLS encryption, relying on Shopify's own PCI-DSS compliant infrastructure for payment handling, and limiting access to customer information to those who need it to operate the Site. 

Your Rights 

Under POPIA, you have the right to: 

  • Be informed that your personal information is being collected, and why (as set out in this policy); 

  • Access the personal information we hold about you; 

  • Request correction of inaccurate, incomplete, or outdated personal information; 

  • Request that we delete or destroy personal information we no longer have a lawful basis to hold; 

  • Object to the processing of your personal information for direct marketing purposes at any time; 

  • Withdraw consent you've previously given, where our processing relies on consent, without affecting the lawfulness of processing carried out before withdrawal; 

  • Lodge a complaint with the Information Regulator if you believe your rights under POPIA have been infringed (contact details in clause 4.12). 

To exercise any of these rights, contact our Information Officer using the details in clause We will respond within a reasonable time and in line with POPIA's requirements. 

Children's Information 

The Site and our Digital Products are intended for business owners and adults, and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us so we can delete it. 

Complaints to the Information Regulator 

If you are not satisfied with how we have handled your personal information, you have the right to lodge a complaint with South Africa's Information Regulator: 

Channel 

Detail 

Website 

inforegulator.org.za 

POPIA complaints email 

POPIAComplaints@inforegulator.org.za 

Physical address 

21 Loveday Street, Marshalltown, Johannesburg, 2001 

 

Changes to This Policy 

We may update this Privacy Policy from time to time to reflect changes in our practices, our third-party providers, or the law. The "Last updated" date at the top of this section will change accordingly. We encourage you to review this policy periodically. 

Contact Us 

For any question about this Privacy Policy or how we handle your personal information, contact us at support@primepilot.co.za.