1. Introduction Spirit Run Distillery respects your privacy. This policy explains what personal information we collect, how we use it, and your rights under the Protection of Personal Information Act 4 of 2013 (POPIA).
2. Information We Collect When you use our website or place an order we may collect:
Name, email address, phone number and delivery address
Order history and payment reference numbers (not card details)
Age verification confirmation
Newsletter subscription preferences
Website usage data via cookies (see section 7)
3. Why We Collect It We use your information to:
Process and fulfil your orders
Send order confirmations and delivery updates
Respond to enquiries and support requests
Send our newsletter (only if you opted in)
Comply with legal obligations, including age verification records
Improve our website and product offering
4. Who We Share It With We do not sell your personal information. We share it only with:
PayFast — to process your payment securely
The Courier Guy / PUDO — to arrange delivery to your selected locker
Our email service provider — to send transactional and newsletter emails
South African Revenue Service (SARS) — where legally required
5. How Long We Keep It
Order records: 5 years (required by tax law)
Newsletter subscriptions: until you unsubscribe
Age verification records: 3 years
General enquiries: 1 year
6. Your Rights Under POPIA You have the right to:
Access the personal information we hold about you
Request correction of inaccurate information
Request deletion of your information (subject to legal retention requirements)
Object to the processing of your information
Lodge a complaint with the Information Regulator of South Africa
To exercise any of these rights, email us at .
7. Cookies Our website uses cookies to:
Remember your age verification for 90 days
Maintain your shopping cart session
Analyse website traffic (anonymised)
You can disable cookies in your browser settings. Disabling cookies may affect the functionality of the website.
8. Security We take reasonable technical and organisational measures to protect your personal information. Our website uses HTTPS encryption. Payment processing is handled entirely by PayFast and we never see or store your card details.
9. Children Our website is not directed at persons under 18. We do not knowingly collect personal information from minors.
10. Changes to This Policy We may update this policy from time to time. The current version will always be posted on this page with its effective date.