Privacy policy

1. Who we are

This Privacy Policy explains how Centrio ("we", "us", "our"), a sole proprietorship, collects, uses, and protects your personal information when you visit or shop at centrio.co.za (the "Site"). We are the "responsible party" for your personal information under the Protection of Personal Information Act 4 of 2013 ("POPIA").

2. Personal information we collect

Contact details: name, delivery and billing address, phone number, and email address.
Order and payment information: items purchased, order history, and payment confirmation details (we do not store your full card details — these are processed by our payment provider).
Account information: if you create an account, your login details and preferences.
Communications: anything you tell us directly, e.g. in a support email.
Device and usage information: your IP address, browser type, and how you interact with the Site, collected automatically via cookies.

3. Why we process your information

We process your personal information because it is necessary to perform our contract with you (taking and fulfilling orders, arranging delivery, handling returns), to comply with our legal obligations (such as tax and consumer protection law), for our legitimate business interests (such as preventing fraud), or with your consent (such as marketing emails).

4. Marketing communications

We will only send you direct marketing by email or SMS if you have opted in, or if you are an existing customer and we are marketing similar products to those you have already bought from us. You can opt out at any time, free of charge, via the unsubscribe link in any email or by contacting us — this won't affect order-related communications like delivery updates.

5. How we share your information

We share personal information with service providers who help us run the Site and fulfil your orders, including our e-commerce platform (Shopify), payment processors, and delivery couriers. These providers only use your information to perform services on our behalf. We do not sell your personal information.

6. Where your information is processed

Our Site is hosted on Shopify's infrastructure, which may process and store data outside South Africa. Where this happens, we rely on Shopify's own compliance measures and contractual safeguards to ensure your information continues to receive an adequate level of protection, as required by section 72 of POPIA.

7. Security and retention

We use reasonable technical and organisational measures to protect your personal information against loss, unauthorised access, or misuse. We retain personal information only for as long as necessary for the purposes described here, or as required by law.

8. Your rights

Under POPIA, you have the right to:

request access to the personal information we hold about you;
request that we correct or update inaccurate information;
request that we delete or destroy personal information we no longer have a lawful reason to keep;
object to us processing your personal information, including for direct marketing, at any time and free of charge; and
lodge a complaint with the Information Regulator if you believe we have not handled your personal information lawfully.

To exercise any of these rights, contact us at centrioza@gmail.com.

9. Children's information

This Site is not directed at children, and we do not knowingly collect personal information from children without the consent of a parent or guardian, as required by POPIA.

10. Cookies

We use cookies and similar technologies to keep your cart working, remember your preferences, and understand how the Site is used. You can control cookies through your browser settings.

11. Complaints to the Information Regulator

If you believe we have not complied with POPIA, you have the right to lodge a complaint with South Africa's Information Regulator:

Address: JD House, 27 Stiemens Street, Braamfontein, Johannesburg, 2001 Email: POPIAComplaints@inforegulator.org.za (complaints) or enquiries@inforegulator.org.za (general enquiries) Telephone: 010 023 5200 / Toll-free 0800 017 160 Website: inforegulator.org.za