Privacy Policy

• Identity data — first name, last name, date of birth (for age verification).
• Contact data — email address, phone number, billing and delivery address.
• Transaction data — details of products you have purchased, order history, and payment records.
• Technical data — IP address, browser type, device type, pages visited, and session duration (collected via cookies and analytics tools).
• Account data — username, password (stored in encrypted form), saved delivery addresses.
• Communications data — messages you send via our contact form or support email.

We do not collect sensitive personal information (as defined in POPIA Section 26) such as race, health records, or financial account numbers beyond what is required to process a payment.

• Directly from you — when you create an account, place an order, subscribe to our newsletter, or contact us.
• Automatically — via cookies, log files, and analytics tools as you browse our website.
• Third parties — from payment processors (e.g. PayFast) when you complete a transaction.

• Fulfilling and managing your orders and deliveries.
• Processing payments and preventing fraud.
• Creating and managing your account.
• Sending transactional emails (order confirmation, shipping updates).
• Responding to enquiries and providing customer support.
• Complying with legal obligations (e.g. liquor licence regulations, tax records).
• Improving our website and services through analytics.
• Sending marketing communications — only with your consent.

• Payment processors — to securely process your payment (e.g. PayFast). They are bound by their own privacy policies.
• Courier / logistics providers — your name and delivery address are shared with our courier partners to fulfil your order.
• Analytics providers — anonymised usage data may be shared with providers such as Google Analytics.
• Legal authorities — if required by law or to protect our legal rights.

• Order and transaction records — 5 years (as required by SA tax legislation).
• Account data — for as long as your account is active, plus 12 months after closure.
• Marketing consent records — until you unsubscribe or withdraw consent.
• Analytics data — as per the retention settings of the relevant analytics tool.

• Access — request a copy of the personal information we hold about you.
• Correction — request that inaccurate or incomplete information be corrected.
• Deletion — request deletion of your personal information (subject to legal retention obligations).
• Objection — object to the processing of your personal information for direct marketing.
• Withdraw consent — withdraw any consent you have previously given at any time.
• Complaint — lodge a complaint with the Information Regulator of South Africa.

To exercise any of these rights, contact us at info@dusolwines.com. We will respond within 30 days.