Company: On Target 007 (PTY) LTD

Jurisdiction: Republic of South Africa 

1. INTRODUCTION & PURPOSE 

On Target 007 (PTY) LTD (“On Target 007”, “we”, “us”, “our”) is committed to protecting the privacy, confidentiality, and security of personal information entrusted to us.

This Privacy Policy explains:

•       What personal information we collect

•       How and why we collect it

•       How it is used, stored, and protected

•       Your rights under South African law

This policy complies with the Protection of Personal Information Act (POPIA) and applies to all interactions across:

•       Online platforms

•       Physical retail stores

•       Wholesale and reseller relationships

 

2. SCOPE – WHO THIS POLICY APPLIES TO

This Privacy Policy applies to:

•  Website visitors
• Online customers
• Retail store customers
• Wholesale and reseller customers
• Suppliers and partners
• Support and warranty claimants

3. PERSONAL INFORMATION WE COLLECT

3.1 Types of Information

We may collect the following categories of personal information:

Identification Information

•       Full name

•       ID number (where legally required)

•       Date of birth (for age-restricted products)

Contact Information

•       Email address

•       Phone number

•       Physical and delivery addresses

Transactional Information

•       Purchase history

•       Order numbers

•       Invoices and receipts

•       Payment confirmations (not card details)

Account & ERP Records

•       Customer profiles

•       Warranty records

•       Support history

•       Product serial numbers (where applicable)

Wholesale / Business Information

• Business registration details.
• VAT numbers.
• Authorized contact persons.

Technical Information

•       IP address

•       Browser type

•       Device information

•       Cookies and site usage data

 

4. HOW WE COLLECT PERSONAL INFORMATION

We collect information when you:

•       Place an order online

•       Purchase in-store

•       Register an account

•       Apply for wholesale or reseller access

•       Contact customer support

•       Submit warranty or after-sales requests

•       Interact with our website or marketing channels

 

5. PURPOSE OF COLLECTION (WHY WE NEED IT)

We collect personal information to:

• Process orders and payments
• Deliver products and services
•  Verify identity and age (where required)
•  Provide after-sales and warranty support
•  Maintain ERP-based customer records
•  Communicate order updates and service notices
• Comply with legal and regulatory obligations
• Improve customer experience and service quality Prevent fraud, misuse, or unlawful activity

 

6. PREVENTION-FIRST & RESPONSIBLE USE CONTEXT

As part of our prevention-first, education-led business model, certain information may be used to:

•       Ensure products are supplied responsibly

•       Identify misuse or abnormal activity patterns

•       Support lawful, compliant transactions

This is done strictly within legal boundaries and for safety, compliance, and risk prevention purposes only.

7. LEGAL BASIS FOR PROCESSING

We process personal information based on:

•       Contractual necessity (order fulfilment)

•       Legal obligation (compliance with law)

•       Legitimate business interests

•       Customer consent (marketing, where applicable)

8. CONSENT & MARKETING COMMUNICATIONS

Marketing communications (email, SMS, or digital ads) are sent only where:

•       Consent has been provided, or

•       Allowed under applicable law

Customers may opt out at any time using:

• Unsubscribe links
• Account preferences
• Direct contact with us

9. DATA SHARING & DISCLOSURE

We may share personal information with:

•       Payment processors

•       Courier and logistics providers

•       ERP and IT service providers

•       Manufacturers (for warranty claims)

•       Legal or regulatory authorities (where required)

We do not sell or trade personal information.

All third parties are required to maintain appropriate data protection standards.

10. CROSS-BORDER DATA TRANSFERS

Where personal information is transferred outside South Africa:

•       It is done only where necessary

•       Adequate data protection safeguards are in place

•       POPIA requirements are respected

11. DATA STORAGE & SECURITY

We implement technical and organizational safeguards, including:

• Secure ERP systems
• Access control and authentication
• Encrypted data storage (where applicable)
• Limited staff access on a need-to-know basis