Privacy policy

Last updated: 29 September 2026

This policy explains how CLEVO collects, uses and protects your personal information when you visit or buy from our online store, and your rights under the Protection of Personal Information Act (POPIA).

Who we are

CLEVO is an online store based at 54 Umgeni Street, Middelburg, Mpumalanga, 1055, South Africa. We are the "responsible party" for your personal information under POPIA, and our information officer is the owner of CLEVO. For any privacy question or request, email shopclevo.co.za@gmail.com.

What we collect

  • Contact and delivery details: your name, email address, phone number, and delivery and billing addresses.
  • Order details: what you bought, prices, dates and order numbers.
  • Payment information: confirmation from Payfast that you've paid, and basic details of the payment. We never see or store your full card details.
  • Refund requests: what you give us on our "Request a refund" form (name, email, order number, date of purchase, reason and refund preference), and the proof of payment you email us, which may show some banking details.
  • Messages: emails and other messages you send us.
  • Technical information: such as your IP address, browser and device type, and the pages you view, collected through cookies (see below).

Most of this comes directly from you. Some is collected automatically on our website, and we receive payment confirmations from Payfast and delivery updates from our fulfilment partner and couriers. Giving us your information is voluntary, but we can't process an order or refund without the details it needs.

How we use it, and why

  • To process, deliver and support your order, including returns and refunds. We need to do this to carry out our agreement with you.
  • To communicate with you about your order and answer your questions.
  • To keep records for tax, accounting and consumer-law purposes, because the law requires it.
  • To keep our store secure, prevent fraud and improve our website, which are our legitimate interests.
  • To send marketing, only as described under "Marketing" below.

Who we share it with

We share only what each service provider needs to do its job:

  • Shopify, which hosts our online store and stores our order and customer records.
  • Payfast, which processes payments. Your card and banking details go directly to Payfast, not to us.
  • Our fulfilment partner and couriers, who pack and deliver your order. They receive your name, delivery address, phone number and order details.
  • Professional advisers and authorities, such as our accountant, or where the law requires us to share information.

These providers may only use your information to provide their services to us and must keep it secure. We never sell your personal information.

Transfers outside South Africa

Some of our service providers are based, or store data, outside South Africa. For example, Shopify may process data in Canada, Ireland, Singapore and other countries, and our fulfilment partner may process your delivery details abroad. We only transfer your information where POPIA allows it, such as where it's needed to fulfil your order, or where the recipient is bound by laws or agreements giving protection similar to POPIA.

Cookies

Our store uses cookies and similar technologies. Some are essential, for example to remember your cart and keep checkout secure. Others help us understand how visitors use the store and, if we advertise online, measure how our ads perform. You can block or delete cookies in your browser settings, but the cart and checkout may not work without the essential ones.

Marketing

We'll only send you marketing emails or messages if you've agreed to receive them or, if you've bought from us, about our own similar products, provided you were given the chance to opt out when we collected your details. Every marketing message will say who it's from and give you a free, easy way to unsubscribe. You can also opt out at any time by emailing us.

How long we keep it

We keep personal information only for as long as we need it for the purposes above, unless the law requires or allows us to keep it longer. For example, tax and accounting laws require us to keep order and payment records for a number of years (generally at least five). When we no longer need information, we delete it or make it anonymous.

How we protect it

We take reasonable technical and organisational steps to protect your information against loss, misuse and unauthorised access. Our store runs on Shopify, and payments are handled by Payfast, which is certified to the card industry's PCI DSS Level 1 security standard. If a security breach affects your personal information, we'll let you and the Information Regulator know, as POPIA requires.

Your rights

Under POPIA, you can:

  • ask whether we hold personal information about you, and request a copy of it;
  • ask us to correct information that is inaccurate or out of date;
  • ask us to delete information we no longer have a lawful reason to keep;
  • object to us using your information for our legitimate interests, and object to direct marketing at any time;
  • withdraw your consent, where we rely on it; and
  • complain to the Information Regulator (see below).

To make a request, email us. We may need to confirm your identity first. Asking whether we hold your information, or asking us to correct or delete it, is free.

Children

Our store is meant for adults. We don't knowingly collect personal information from children under 18.

Complaints

If you're unhappy with how we've handled your personal information, please contact us first so we can try to put it right. You also have the right to complain to the Information Regulator:

Changes and contact

We may update this policy from time to time; the latest version will always be on this page. Questions? Email shopclevo.co.za@gmail.com.