Privacy Policy

Last updated: 01/09/2026

PINBOX (PTY) LTD (“PINBOX”, “we”, “us” or “our”) respects your privacy.

This Privacy Policy explains how we collect, use, store, protect and, where necessary, share personal information when you visit our website, create an account, place an order, contact us, join The Prepared Club, read The Prep, or otherwise interact with PINBOX online.

PINBOX is a South African business and this Privacy Policy is intended to explain our approach to personal information in accordance with applicable South African privacy laws, including the Protection of Personal Information Act 4 of 2013 (POPIA).

We believe privacy should be straightforward.

So here’s what we collect, why we need it, and what you can do about it.

1. Who we are

PINBOX (PTY) LTD is a South African company.

Company registration: 2026/682231/07

Registered address: 68 Joseph Str, Lynnwood Ridge, Pretoria, 0081

Privacy contact: es@pinbox.co.za

For general enquiries, you can also contact us through our Contact page.

In terms of POPIA, PINBOX is responsible for determining how and why personal information is processed in connection with our website and services.

2. What information we collect

We only collect information that we reasonably need for a specific purpose.

Depending on how you interact with PINBOX, this may include:

Information you provide directly

When you place an order, contact us, create an account or subscribe to communications, we may collect:

  • your name;
  • email address;
  • telephone number;
  • billing address;
  • delivery/shipping address;
  • account login information;
  • order and transaction information;
  • information you provide when contacting customer support;
  • information you voluntarily provide through forms, surveys, competitions or other communications.

Order information

If you purchase from PINBOX, we may collect information necessary to process and fulfil your order, including the products purchased, order value, delivery information, billing information and order history.

WooCommerce may retain information associated with orders, including customer contact and billing/shipping information, as part of operating the online store.

Payment information

Payments made through our website are processed using our selected payment service provider, which is intended to be Peach Payments.

PINBOX does not need to receive or store your full payment card details in order to process your purchase.

Payment information may be processed directly by the payment provider in accordance with its own privacy and security practices.

You should also review the privacy policy and applicable terms of the payment provider.

Technical information

When you visit our website, certain technical information may be collected automatically. This may include:

  • IP address;
  • browser type and version;
  • device type;
  • operating system;
  • approximate location derived from technical information;
  • pages visited;
  • referring pages;
  • time spent on pages;
  • website interactions;
  • error and diagnostic information;
  • information relating to cookies and similar technologies.

We use this information primarily to operate, secure and improve the website.

3. How we use your information

We may use personal information to:

  • process and fulfil orders;
  • deliver products;
  • communicate with you about your orders;
  • provide customer support;
  • manage customer accounts;
  • respond to enquiries;
  • process payments;
  • prevent fraud and misuse;
  • maintain the security of our website and systems;
  • operate and improve our website;
  • understand how visitors use our website;
  • improve our products, services and customer experience;
  • send newsletters and other communications where permitted;
  • manage The Prepared Club;
  • provide content through The Prep;
  • administer competitions, promotions or campaigns;
  • comply with legal and regulatory obligations;
  • establish, exercise or defend legal rights; and
  • carry out other activities reasonably necessary to operate PINBOX.

We aim to collect and use personal information only where there is a legitimate reason to do so.

4. Marketing communications

If you choose to join The Prepared Club or otherwise subscribe to PINBOX marketing communications, we may use your email address to send you:

  • PINBOX news;
  • product updates;
  • launches;
  • useful ideas;
  • information from The Prep;
  • Prepared Club communications;
  • promotions or special offers; and
  • other communications relating to PINBOX.

You can unsubscribe from marketing communications at any time by using the unsubscribe option included in the relevant communication or by contacting us.

Unsubscribing from marketing communications does not necessarily stop essential service communications, such as order confirmations, delivery updates, account notifications or other messages necessary to provide a service you have requested.

5. When we share personal information

We do not sell your personal information.

We may share personal information with carefully selected service providers where doing so is necessary to operate PINBOX.

These may include:

Website and hosting providers

Our website and associated information may be hosted or supported by third-party technology providers.

WooCommerce and WordPress

Our online store operates using WordPress and WooCommerce. Information necessary to operate the website, customer accounts, orders and related functions may be processed or stored within these systems.

Payment providers

We use third-party payment providers to process payments.

For online payments, this may include Peach Payments.

Information required to process or support a payment may be shared with the payment provider, including relevant customer, billing and transaction information.

Peach Payments has its own privacy and security practices and may process information in accordance with its legal and regulatory obligations.

Delivery and logistics providers

Where necessary to fulfil an order, we may share relevant delivery information with courier, logistics or fulfilment providers.

This may include your name, delivery address, telephone number and information required to identify and deliver your order.

Email and communications providers

Where we use third-party email or communications services, relevant information may be processed by those providers to deliver communications you have requested.

Analytics and website tools

We may use third-party tools to understand website performance, traffic and usage.

Where such tools are enabled, information such as technical identifiers, device information, website interactions and usage data may be processed by those providers.

Legal and regulatory requirements

We may disclose personal information where required or permitted by law, including where necessary to:

  • comply with a legal obligation;
  • respond to a lawful request;
  • prevent fraud or unlawful activity;
  • protect the rights, property or safety of PINBOX, our customers or others; or
  • establish, exercise or defend legal claims.

We require service providers that process personal information on our behalf to handle that information appropriately and confidentially, subject to applicable legal requirements.

6. International processing

Some of the technology and service providers we use may process or store information outside South Africa.

Where personal information is transferred outside South Africa, we will take reasonable steps to ensure that the transfer and processing are handled in accordance with applicable privacy laws and appropriate safeguards.

Different countries may have different data protection laws.

7. Cookies and similar technologies

Our website may use cookies and similar technologies.

Cookies are small files stored on your device that can help a website remember information, maintain functionality, improve performance and understand how visitors use the website.

We may use cookies for purposes including:

  • essential website functionality;
  • shopping cart and checkout functionality;
  • account functionality;
  • security;
  • remembering preferences;
  • website analytics;
  • improving website performance; and
  • other functionality provided by third-party services.

Some cookies may be placed by third-party services used by the website.

You can control or restrict cookies through your browser settings. Blocking certain cookies may affect how parts of the website function.

As our website develops, additional services may be introduced. Where this changes the way personal information or cookies are used, we will update this Privacy Policy where appropriate.

8. Customer accounts

You may be able to create a customer account on the PINBOX website.

If you create an account, we may process information such as your name, email address, account details, order history and saved addresses.

You are responsible for keeping your account credentials secure.

Please do not share your password with anyone.

You may contact us if you need assistance with your account or wish to exercise applicable privacy rights relating to your personal information.

9. Guest checkout

Where guest checkout is available, you may purchase products without creating a customer account.

We will still need to collect information necessary to process and fulfil your order, such as your name, contact information, billing information and delivery information.

WooCommerce provides functionality for customer accounts, guest checkout and personal-data management within the online store.

10. How long we keep information

We keep personal information only for as long as reasonably necessary for the purpose for which it was collected, or for as long as required by applicable law.

Different types of information may therefore be retained for different periods.

For example, information relating to purchases may need to be retained for accounting, tax, legal, fraud-prevention or record-keeping purposes.

When information is no longer reasonably required, we will take reasonable steps to delete, destroy or anonymise it, subject to applicable legal requirements.

11. How we protect your information

We take reasonable technical and organisational measures to protect personal information against:

  • loss;
  • damage;
  • unauthorised access;
  • unlawful processing;
  • unauthorised disclosure; and
  • unauthorised destruction.

These measures may include access controls, authentication, security updates, backups, secure hosting, restricted administrative access and other appropriate safeguards.

No online system can be guaranteed to be completely secure.

For that reason, while we take security seriously, we cannot guarantee absolute security of information transmitted over the internet.

POPIA requires responsible parties to implement reasonable technical and organisational measures to protect personal information and to continually review those safeguards.

12. What happens if there is a security compromise

If we become aware of a security compromise involving personal information and applicable law requires notification, we will take appropriate steps to investigate, contain and address the incident.

Where required, we will notify the relevant regulatory authority and affected data subjects in accordance with applicable law.

POPIA contains specific requirements relating to notification of security compromises.

13. Your privacy rights

Subject to applicable law, you may have rights relating to your personal information, including the right to:

  • request access to personal information we hold about you;
  • request correction of inaccurate or incomplete information;
  • request deletion of information where there is no lawful reason for us to retain it;
  • object to certain processing;
  • object to direct marketing in accordance with applicable law;
  • withdraw consent where processing is based on consent;
  • request information about how your personal information is processed; and
  • lodge a complaint where you believe your privacy rights have not been respected.

Some requests may be subject to legal limitations.

For example, we may need to retain certain information to comply with tax, accounting, legal, fraud-prevention or other obligations.

The South African Information Regulator provides mechanisms for data subjects to exercise rights and lodge POPIA complaints.

14. How to make a privacy request

If you want to:

  • access your personal information;
  • correct your information;
  • request deletion;
  • object to processing;
  • withdraw consent; or
  • ask a privacy-related question,

contact us at:

es@pinbox.co.za

Please provide enough information for us to identify the information or request concerned.

We may need to verify your identity before processing certain requests. This is to protect personal information from being disclosed to someone who is not authorised to receive it.

15. Children

Our website and products are not directed specifically at children.

We do not knowingly collect personal information from children in circumstances where doing so would be unlawful.

If you believe that a child has provided us with personal information unlawfully, please contact us so that we can investigate and take appropriate action.

16. Links to other websites

Our website may contain links to websites or services operated by third parties.

PINBOX is not responsible for the privacy practices, content or security of external websites.

We recommend reviewing the privacy policy of any third-party website before providing personal information to it.

17. Social media

PINBOX may maintain profiles or pages on third-party social media platforms.

If you interact with PINBOX through those platforms, the relevant platform may collect and process personal information in accordance with its own privacy policy and terms.

Your interactions with those platforms are governed by the privacy practices of the relevant platform.

18. Changes to this Privacy Policy

We may update this Privacy Policy from time to time.

This may happen when:

  • our website changes;
  • we introduce new products or services;
  • we add or remove third-party providers;
  • our use of personal information changes;
  • applicable laws change; or
  • we identify a better way to explain our privacy practices.

The latest version will be published on this page.

The “Last updated” date at the top of this Privacy Policy will indicate when the policy was most recently updated.

19. Contact us

If you have a question about this Privacy Policy or how PINBOX handles personal information, please contact us:

PINBOX (PTY) LTD

Email: es@pinbox.co.za

Website: www.pinbox.co.za

Registered address: 68 Joseph str, Lynnwood Ridge, Pretoria, 0081

We would rather you ask.

Privacy should not require a degree in legalese.

20. Complaints

If you have raised a privacy concern with us and believe that it has not been adequately addressed, you may have the right to lodge a complaint with the Information Regulator of South Africa.

The Information Regulator is responsible for monitoring and enforcing compliance with POPIA and provides processes for privacy complaints and related matters.

Information Regulator of South Africa:

Website: https://inforegulator.org.za/

Email: enquiries@inforegulator.org.za

Telephone: 010 023 5200

PINBOX (PTY) LTD

Preparation powers performance.

STORE. PROTECT. PERFORM.