Privacy Policy

Last updated: August 25, 2025

At Source is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal information in accordance with the Protection of Personal Information Act (POPIA) No. 4 of 2013, the Electronic Communications and Transactions Act (ECTA) No. 25 of 2002, and other applicable South African laws. By using our website (https://www.atsource.co.za) or services, you consent to the practices described in this policy.

We collect personal information to provide you with our products and services, process orders, and improve your shopping experience. The types of information we collect include:

1.1 Personal Information You Provide
- Contact Details: Name, email address, phone number, shipping address, and billing address provided during account registration, checkout, or customer support interactions.
- Payment Information: Credit card details, bank account information, or other payment-related data required to process transactions.
- Demographic Information: Age, gender, or preferences you voluntarily share, such as through surveys or promotional sign-ups.
- Account Information: Login credentials and preferences when you create an account on our website.
- User-Generated Content: Comments, reviews, or messages you submit on our website or through customer support channels.
1.2 Information Collected Automatically
- Website Usage Data: IP address, browser type, operating system, device information, and browsing behavior (e.g., pages visited, time spent on the site) collected via cookies, web beacons, or similar technologies.
- Transactional Data: Purchase history, order details, and delivery information.
- Location Data: Approximate location based on IP address or, if applicable, precise location data from images you upload (e.g., EXIF GPS data), which we recommend you remove before uploading.
1.3 Information from Third Parties
We may receive information from third-party services, such as payment processors (e.g., PayPal, Payfast), analytics providers (e.g., Google Analytics), or social media platforms, when you interact with our website through these services.

We collect information in the following ways:

Directly from You: When you register an account, place an order, sign up for newsletters, or contact us.
Automatically: Through cookies, web beacons, and other tracking technologies when you visit our website. Cookies are small text files stored on your device to enhance your browsing experience. You can manage cookie preferences through your browser settings or our cookie consent tool.
From Third Parties: When you connect to our website via social media, use third-party payment services, or when we receive data from trusted partners with your consent.

We use your personal information for the following purposes:

Order Processing: To process and fulfill your orders, including shipping and payment processing.
Customer Support: To respond to your inquiries, provide assistance, and resolve disputes.
Marketing and Communication: To send you promotional emails, newsletters, or personalized offers, provided you have given consent. You may opt out at any time via the unsubscribe link in our emails or by contacting us.
Website Improvement: To analyze website usage and improve our services, content, and user experience.
Fraud Prevention: To verify your identity, detect and prevent fraud, money laundering, or other illegal activities.
Legal Compliance: To comply with applicable laws, such as tax regulations, or to respond to legal requests.
Research and Analytics: To conduct market research, customer satisfaction surveys, or statistical analysis to enhance our offerings.

We will only use your information for the purposes for which it was collected or as otherwise permitted by law.

We process your personal information based on the following legal grounds under POPIA:

Consent: Where you have given explicit consent, such as for marketing communications.
Contractual Necessity: To fulfil our obligations under a contract, such as processing your order.
Legal Obligation: To comply with South African laws, such as tax or consumer protection regulations.
Legitimate Interests: For purposes like fraud prevention, website analytics, or improving our services, where such interests do not override your rights.

We may share your personal information with:

Service Providers: Trusted third parties who assist with payment processing, shipping, website hosting, or analytics (e.g., Payfast, Google Analytics). These providers are contractually obligated to comply with POPIA and protect your data.
Business Partners: With your consent, we may share data with partners for marketing or promotional purposes.
Legal Authorities: When required by law, court order, or to protect the safety of individuals or the public.
Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.

We do not sell or share your personal information with third parties for their own marketing purposes without your explicit consent.

We implement appropriate technical and organizational measures to protect your personal information, including:

Encryption of payment information during transactions.
Secure servers and firewalls to prevent unauthorized access.
Regular security audits and updates to our systems.
Staff training on data protection and POPIA compliance.

Despite these measures, no online system is completely secure. We encourage you to use strong passwords and avoid sharing sensitive information unnecessarily.

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this policy or as required by law. For example:

Transactional data may be kept for seven years to comply with tax regulations.
Account information is retained until you request deletion or your account becomes inactive for a prolonged period.
Marketing data is kept until you withdraw consent.

When data is no longer needed, it is securely deleted or anonymized.

As a data subject, you have the following rights:

Access: Request details of the personal information we hold about you.
Correction: Request correction of inaccurate or incomplete information.
Deletion: Request deletion of your data, subject to legal retention requirements.
Objection: Object to the processing of your data for specific purposes, such as direct marketing.
Restriction: Request restriction of processing in certain circumstances.
Portability: Request a copy of your data in a structured, machine-readable format.
Withdraw Consent: Withdraw consent for processing at any time, where applicable.

To exercise these rights, contact us at [insert contact email, e.g., privacy@atsource.co.za]. We will respond within a reasonable time and may charge a reasonable fee for access requests, as permitted by POPIA.

We use cookies and similar technologies to enhance your experience, analyze website performance, and deliver personalized content. Types of cookies include:

Essential Cookies: Necessary for the website to function (e.g., maintaining your shopping cart).
Analytics Cookies: Track website usage to improve our services (e.g., Google Analytics).
Marketing Cookies: Deliver targeted ads based on your interests (e.g., DoubleClick DART cookies).

You can manage cookie preferences through our cookie consent tool or your browser settings. Note that disabling cookies may affect website functionality. For more details, see our Cookie Policy [link to Cookie Policy, if applicable].

If you place orders from outside South Africa, your data may be transferred to servers or third-party providers in other countries. We ensure that such transfers comply with POPIA and that recipients have adequate data protection measures in place. By using our services, you consent to such transfers where necessary.

Our services are not intended for children under 14. We do not knowingly collect personal information from children without parental consent. If you believe we have collected data from a child under 14, please contact us, and we will take steps to delete it.

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of these sites. We encourage you to review their privacy policies before sharing personal information.

In the event of a data breach, we will notify the Information Regulator and affected data subjects as required by POPIA. We will take immediate steps to mitigate the breach and prevent future occurrences.

We may update this Privacy Policy to reflect changes in our practices or legal requirements. The updated policy will be posted on our website with the revised “Last updated” date. We encourage you to review this policy periodically.

If you have questions, concerns, or wish to exercise your rights under POPIA, please contact our Information Officer:

At Source
Email: sales@atsource.co.za
Phone: 031 701 2540
Address: 13 Malone Road Maxmead, Pinetown, Durban, 3610

You may also lodge a complaint with the Information Regulator:
Email: enquiries@inforegulator.org.za
Website: https://inforegulator.org.za/

By using our website or services, you acknowledge that you have read and understood this Privacy Policy.

Privacy Policy

X Close

Login

X Close

Register