Integrow Health (Pty) Ltd – Privacy Policy

Effective Date: 20 April 2026

1. Introduction

Integrow Health (Pty) Ltd (“Integrow Health,” “we,” “us,” or “our”) is committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy outlines how we collect, use, disclose, store, and protect your personal information when you interact with our website, www.integrow.co.za (the “Website”), or purchase our products.

We process your personal information in accordance with the Protection of Personal Information Act, 4 of 2013 (“POPIA”), and other applicable South African data protection laws. By accessing our Website or using our services, you signify your acceptance of this Privacy Policy. If you do not agree with this policy, please do not use our Website or services.

2. Responsible Party

Integrow Health (Pty) Ltd is the responsible party for the processing of your personal information.
Registered Address: [Insert Company’s Registered Physical Address]
Contact for Privacy Matters: [Insert dedicated email address, e.g., privacy@integrow.co.za]

3. Definitions (as per POPIA)

“Personal Information”: Information relating to an identifiable, living, natural person, and where it is applicable, an identifiable, existing juristic person.
“Data Subject”: The person to whom personal information relates (i.e., you, the user).
“Processing”: Any operation or activity concerning personal information, including collection, storage, dissemination, or destruction.

4. What Personal Information We Collect

We may collect various types of personal information, depending on your interaction with us:

Identity Data: Name, surname.
Contact Data: Email address, telephone number, physical address (for delivery).
Transactional Data: Details about payments to and from you, and other details of products you have purchased from us.
Technical Data: Internet protocol (IP) address, your login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, and other technology on the devices you use to access this Website.
Usage Data: Information about how you use our Website, products, and services.
Marketing and Communications Data: Your preferences in receiving marketing from us and our third parties and your communication preferences.

We do not generally collect “Special Personal Information” (e.g., race, religion, health information) unless it is provided voluntarily by you for a specific purpose (e.g., dietary preferences relevant to a product, if applicable) and with your explicit consent.

5. How We Collect Your Personal Information

We collect information using various methods:

Direct Interactions: You provide us with your Contact, and Transactional Data by filling in forms, creating an account, placing an order, subscribing to our newsletter, or corresponding with us by post, phone, email, or otherwise.
Automated Technologies or Interactions: As you interact with our Website, we may automatically collect Technical and Usage Data. We collect this personal information by using cookies and other similar technologies. Please refer to our separate [Cookie Policy](https://integrow.co.za/cookie-policy/) for more details.
Third Parties: We may receive personal information about you from various third parties, such as analytics providers (e.g., Google Analytics) or payment service providers.

6. Purposes and Legal Basis for Processing Your Personal Information

We only process your personal information when we have a lawful basis to do so, as set out in POPIA. The purposes for which we process your personal information include:

To Fulfil Your Orders and Provide Services:
Purpose: To process your purchases, arrange for product delivery, and manage your account.
Legal Basis: Performance of a contract with you.
To Manage Our Relationship With You:
Purpose: To notify you about changes to our terms or privacy policy, respond to your queries, and provide customer support.
Legal Basis: Performance of a contract with you, compliance with a legal obligation, our legitimate interests (to keep our records updated and to study how customers use our products/services).
To Administer and Protect Our Business and Website:
Purpose: For troubleshooting, data analysis, testing, system maintenance, support, reporting, and hosting of data.
Legal Basis: Our legitimate interests (for running our business, provision of administration and IT services, network security, to prevent fraud and in the context of a business reorganisation or group restructuring exercise), compliance with a legal obligation.
To Deliver Relevant Website Content and Advertisements to You:
Purpose: To measure or understand the effectiveness of the advertising we serve to you and to make suggestions and recommendations to you about goods or services that may be of interest to you.
Legal Basis: Our legitimate interests (to develop our products/services and grow our business), or your consent where required by law.
To Use Data Analytics to Improve Our Website, Products/Services, Marketing, Customer Relationships, and Experiences:
Purpose: To analyse trends, track users’ movements around the Website, and gather demographic information.
Legal Basis: Our legitimate interests (to define types of customers for our products and services, to keep our Website updated and relevant, to develop our business, and to inform our marketing strategy).
To Comply with Legal and Regulatory Obligations:
Purpose: To meet any legal or regulatory requirements that apply to us.
Legal Basis: Compliance with a legal obligation.

Where we rely on consent as a legal basis for processing, you have the right to withdraw that consent at any time.

7. Disclosure and Sharing of Your Personal Information

We do not sell your personal information to third parties. We may share your personal information with:

Service Providers: Third-party service providers who assist us in operating our business and providing our services, such as:
Payment processors (e.g., PayFast, gateways for credit card transactions).
Courier and delivery services (e.g., The Courier Guy, Aramex).
IT and system administration services.
Marketing and analytics services (e.g., Google Analytics).
Professional advisors (e.g., lawyers, accountants).
Legal and Regulatory Authorities: When required by law, court order, or governmental regulation, or if we believe such action is necessary to comply with legal obligations, protect our rights or property, or ensure the safety of our users or the public.
Business Transfers: In the event of a merger, acquisition, or sale of all or a portion of our assets, your personal information may be transferred to the acquiring entity.

We require all third parties to respect the security of your personal information and to treat it in accordance with the law. We do not allow our third-party service providers to use your personal information for their own purposes and only permit them to process your personal information for specified purposes and in accordance with our instructions.

8. Data Security

We have implemented appropriate technical and organisational security measures to prevent your personal information from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. These measures include:

Secure servers and encrypted connections for data transmission.
Access controls to restrict who can access your personal information.
Regular security assessments and updates.
Ensuring third-party service providers also implement appropriate security safeguards.

Despite these measures, no data transmission over the Internet or electronic storage method can be guaranteed to be 100% secure.

9. Data Retention

We will only retain your personal information for as long as necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements.

To determine the appropriate retention period for personal information, we consider the amount, nature, and sensitivity of the personal information, the potential risk of harm from unauthorised use or disclosure of your personal information, the purposes for which we process your personal information, and whether we can achieve those purposes through other means, and the applicable legal requirements.

Generally, we will retain your transactional data for a minimum of five years for tax and accounting purposes.

10. Your Rights as a Data Subject (POPIA Rights)

Under POPIA, you have certain rights regarding your personal information. These include:

The Right to Be Informed: You have the right to be informed about the collection and use of your personal information (as provided in this policy).
The Right to Access: You have the right to request a copy of the personal information we hold about you.
The Right to Rectification: You have the right to request that we correct any inaccurate or incomplete personal information we hold about you.
The Right to Erasure/Deletion: You have the right to request that we delete your personal information, under certain circumstances.
The Right to Object to Processing: You have the right to object to the processing of your personal information on reasonable grounds relating to your particular situation, subject to legal limitations.
The Right to Object to Direct Marketing: You have the right to object to the processing of your personal information for direct marketing purposes, including profiling related to direct marketing.
The Right to Complain: You have the right to lodge a complaint with the Information Regulator if you believe your rights under POPIA have been infringed.

The Information Regulator (South Africa)
Website: [https://www.justice.gov.za/inforeg/](https://www.justice.gov.za/inforeg/)
Email: [complaints.IR@justice.gov.za](mailto:complaints.IR@justice.gov.za) (General enquiries)
Email: [POPIAComplaints.IR@justice.gov.za](mailto:POPIAComplaints.IR@justice.gov.za) (POPIA complaints)
Email: [PAIAComplaints.IR@justice.gov.za](mailto:PAIAComplaints.IR@justice.gov.za) (PAIA complaints)

To exercise any of these rights, please contact our Information Officer using the contact details provided in Section 13. We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal information (or to exercise any of your other rights). This is a security measure to ensure that personal information is not disclosed to any person who has no right to receive it.

11. Marketing Communications

You may receive marketing communications from us if you have requested information from us, purchased products from us, or if you provided us with your details when you entered a competition or registered for a promotion, and in each case, you have not opted out of receiving that marketing.

You can ask us to stop sending you marketing messages at any time by following the opt-out links on any marketing message sent to you or by contacting us at any time.

12. Children’s Privacy

Our Website is not intended for children under the age of 18, and we do not knowingly collect personal information from individuals under 18. If we become aware that we have collected personal information from a child without verification of parental consent, we will take steps to remove that information from our servers.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, regulatory, or operational reasons. Any changes will be posted on this page with an updated “Effective Date.” We encourage you to review this Privacy Policy periodically for any updates. Your continued use of the Website after any changes indicates your acceptance of the revised Privacy Policy.

14. Contact Information and Information Officer

For any questions, concerns, or requests regarding this Privacy Policy or your personal information, please contact our Information Officer:

Email: info@integrow.co.za

—
Thank you for trusting Integrow Health with your personal information.