Privacy Policy
Last updated: 1 January 2026
1. Who we are
iscricrass.com is the responsible party for personal information collected through this Website, in terms of the Protection of Personal Information Act 4 of 2013 (“POPIA”).
2. Information we collect
- Information you give us — for example your name, email address, phone number, delivery address and order details when you contact us or place an order via our retail partner.
- Information collected automatically — such as IP address, browser type, device type, referral source, pages viewed and time on page, via cookies and similar technologies.
3. How we use your information
- To respond to enquiries and provide customer support.
- To help our retail partner process, deliver and invoice your order.
- To improve our Website, marketing and product offering.
- To comply with legal, tax and regulatory obligations.
4. Legal basis
We process personal information on the basis of your consent, the performance of a contract with you, our legitimate business interests, or compliance with a legal obligation.
5. Sharing your information
We share personal information only where necessary and only with parties that are contractually bound to protect it: our authorised retail partner, payment processors, courier and logistics providers, hosting providers, and professional advisors. We do not sell your personal information.
6. International transfers
Where personal information is processed outside South Africa (for example by hosting or analytics providers), we ensure appropriate safeguards are in place as required by POPIA.
7. Retention
We retain personal information only for as long as reasonably required for the purposes described above, or as required by law. Order records are typically kept for five years for tax purposes.
8. Your rights
Under POPIA you have the right to access, correct, delete or object to the processing of your personal information, and to lodge a complaint with the Information Regulator (South Africa). To exercise any of these rights, contact us via the Contact Information page.
9. Security
We apply reasonable technical and organisational measures to protect personal information against loss, unauthorised access and misuse, including encryption in transit and access controls.
10. Children
The Website is not intended for children under 18, and we do not knowingly collect personal information from children.
11. Cookies
See our Cookie Policy for details on how we use cookies and how to manage them.
12. Contact the Information Regulator
Information Regulator (South Africa), JD House, 27 Stiemens Street, Braamfontein, Johannesburg, 2001 · [email protected]