Privacy Policy

Last updated: June 2026

Who we are

Our website address is https://www.diygeek.co.za. DIY Geek is operated by DIY Geek (Pty) Ltd (Registration No. 2020/433770/07), with our registered address at [Your Physical Address], South Africa. You can contact us at info@diygeek.co.za or 011 824 2708.

Our commitment to your privacy

We are committed to protecting your personal information in accordance with the Protection of Personal Information Act, 4 of 2013 (POPIA). This policy explains what personal information we collect, why we collect it, how we use it, and what your rights are as a data subject.

What personal information we collect

When you visit our website, we may automatically collect device and usage information including your IP address, browser type, pages visited, and time spent on the site. This is collected via cookies and analytics tools (Google Analytics, Facebook Pixel).

When you place an order or create an account, we collect your name, email address, phone number, billing and shipping address, and payment information. Payment card details are processed securely by our payment gateway and are not stored on our servers.

When you contact us via email, phone, or our ticket system, we retain records of that correspondence.

Why we collect your information (lawful basis under POPIA)

We process your personal information for the following purposes:

  • To fulfil orders and deliver products to you
  • To send transactional communications (order confirmations, shipping updates)
  • To manage your customer account
  • To comply with legal obligations (tax records, consumer protection law)
  • To improve our website and customer experience
  • To send marketing communications, where you have given consent or where we have a legitimate interest as an existing customer

How we share your information

We do not sell your personal information. We share it only with trusted third parties who assist in operating our business, including:

  • Courier and logistics partners (for order delivery)
  • Payment processors (for secure transaction handling)
  • Xero (accounting software, for invoicing and financial records)
  • Email service providers (for transactional and marketing emails)
  • Google and Meta (for website analytics and advertising, via cookies — see below)

All third-party service providers are required to handle your information securely and in line with POPIA.

Cookies

We use cookies to improve your browsing experience, remember your cart, and analyse website traffic. You may disable cookies in your browser settings, though this may affect site functionality. We use Google Analytics and Facebook Pixel, which set their own cookies to measure advertising effectiveness.

How long we keep your information

We retain customer order and account data for 5 years to comply with tax and consumer protection requirements. You may request deletion of your account and personal data at any time, subject to any legal retention obligations.

Your rights as a data subject under POPIA

You have the right to:

  • Know what personal information we hold about you
  • Request access to your personal information
  • Request correction of inaccurate information
  • Request deletion of your personal information (subject to legal obligations)
  • Object to the processing of your personal information
  • Lodge a complaint with the Information Regulator of South Africa

To exercise any of these rights, contact us at info@diygeek.co.za. We will respond within 30 days.

The Information Regulator

If you are not satisfied with how we handle your personal information, you may contact the Information Regulator (South Africa):

Website: www.inforegulator.org.za
Email: inforeg@justice.gov.za
Tel: 010 023 5207

Security

We implement reasonable technical and organisational measures to protect your personal information from unauthorised access, loss, or misuse. However, no transmission over the internet is completely secure, and we cannot guarantee absolute security.

Changes to this policy

We may update this policy from time to time. The date at the top of this page reflects the most recent revision. Continued use of our site after changes constitutes acceptance of the updated policy.