Privacy Policy

Last updated: 09/10/2025
Company: GenMedChem (Pty) Ltd
Reg. number: 2022/667381/07
Registered address: 380 Hazyview street, Fearie Glen Pretoria, Gautebg, 0044
Website: https://genmedchem.co.za

We respect your privacy and process personal information in line with South Africa’s Protection of Personal Information Act, 4 of 2013 (POPIA). This policy explains what we collect, why we collect it, how we protect it, and the choices and rights available to you.

We follow POPIA’s conditions for lawful processing (including accountability, purpose specification, processing limitation, security safeguards, and data subject participation).

Scope

This policy applies when you browse our site, create an account, purchase our products, subscribe to communications, contact support, or interact with our platforms we control. It does not apply to third-party websites we do not control.

What we collect

Identity & contact: name, surname, email address, phone number, billing/delivery address.
Account & transaction: account ID, order history, invoices/returns, delivery references.
Payment metadata: payment status, authorisation/transaction references (we do not store full card numbers).
Device/usage data: IP address, device/browser info, pages viewed, cookie/SDK identifiers, referring URLs.
Communications: messages sent to support, social media messages you direct to us.
Wellness context (optional): high-level health/wellness interests you choose to share (we do not require diagnoses or medical records).

How we collect

Directly from you (checkout forms, account registration, emails/chats).
Automatically via cookies, pixels and analytics when you use our site.
From service providers (couriers, payment processors) so we can fulfil your order and prevent fraud.

Why we process (lawful bases)

We process personal information for the following purposes and lawful bases under POPIA:

Contract & service delivery: process/ship orders, manage your account, handle returns/warranties.
Legitimate interests: operate our store, improve products/services, security, fraud prevention (balanced against your rights).
Legal obligations: tax, invoicing, financial records, regulatory requests.
Consent (where required): direct marketing emails/SMS and non-essential cookies; you can withdraw consent at any time by using the unsubscribe link or emailing us.

We apply POPIA’s conditions to ensure fairness, minimality, purpose limitation, information quality, openness, security safeguards and data subject participation.

Cookies & analytics

We use essential cookies (site operation, cart, checkout) and, where you consent, non-essential cookies (analytics/performance and, occasionally, advertising). You can manage preferences via our Cookie Settings banner or your browser. Blocking some cookies may affect site features.

Direct marketing

We only send marketing with your consent or as otherwise permitted by law (e.g., after a prior sale with an easy opt-out).
You can unsubscribe anytime by contacting info@genmedchem.co.za.

Payment processing (Peach Payments)

We process payments through Peach Payments, a leading South African payment gateway.

Security: Peach Payments upholds PCI DSS standards and enforces controls such as 3-D Secure and tokenisation. Your sensitive card data is tokenised and transmitted directly to Peach Payments; we do not see or store your full card number on our servers.
Data we receive: payment confirmation, status codes, tokens, and references so we can complete your order and reconcile transactions.
More info: see Peach Payments’ security pages for details on PCI DSS and tokenisation measures.

We share personal information with trusted processors who assist us under written agreements:

E-commerce/hosting & IT support ([Shopify/WooCommerce]/hosting partners).
Payment processing (Peach Payments).
Couriers/fulfilment (delivery details only).
Analytics & communications (e.g., email platform, error monitoring).
We do not sell personal information.

International transfers

Some service providers may store/process information outside South Africa. Where this happens, we require appropriate protections consistent with POPIA (e.g., contractual safeguards).

Retention

We keep personal information only as long as necessary for the purposes described or as required by law (e.g., tax/financial records). When no longer needed, we delete or de-identify it.

Security

We use industry-standard technical and organisational measures, including encryption in transit (TLS), access controls, least-privilege, logging, and staff training.

Children

Our site and products are intended for adults. If we learn we’ve collected information from a child without the necessary authorisation, we’ll delete it promptly.

Your rights

Under POPIA, you may:

Access the personal information we hold about you.
Request correction of inaccurate, incomplete or outdated information.
Request deletion where we no longer need the data and no legal ground requires retention.
Object to certain processing (including direct marketing).
Withdraw consent at any time where processing relies on your consent.
To exercise your rights, contact info@genmedchem.co.za. We may require proof of identity.

Third-party links

Our site may link to third-party sites. Their privacy practices are outside our control. We encourage you to review their policies.

Changes to this policy

We’ll update this policy when our practices change. We’ll post the new version with a revised “Last updated” date.