Privacy policy

Privacy Policy

Last Updated: August 2026

Sunalix ("Sunalix", "we", "us", or "our") respects your privacy and is committed to protecting the personal information you provide to us.

This Privacy Policy explains how we collect, use, store, protect, and disclose personal information when you visit or use sunalix.com, create an account, place an order, contact us, subscribe to communications, or otherwise interact with Sunalix.

This Privacy Policy is intended to comply with applicable South African privacy and electronic-commerce legislation, including:

  • The Protection of Personal Information Act 4 of 2013 (POPIA);

  • The Promotion of Access to Information Act 2 of 2000 (PAIA);

  • The Electronic Communications and Transactions Act 25 of 2002 (ECTA);

  • The Consumer Protection Act 68 of 2008, where applicable; and

  • Other applicable South African legislation and regulations governing the processing of personal information and electronic transactions.

Nothing in this Privacy Policy is intended to exclude or limit any right or obligation that cannot lawfully be excluded or limited.

1. Who We Are

Sunalix operates the online store available at:

Website: sunalix.com

Email: info@sunalix.com
Physical Address: 30 Gemini St, Brackenfell South, Cape Town, 7560, South Africa
Support Hours: Monday–Friday, 08:00–17:00 SAST

For purposes of POPIA, Sunalix acts as the responsible party in relation to personal information that we determine the purposes and means of processing.

Privacy-related requests may be directed to:

Email: info@sunalix.com

Where appropriate, we will route privacy requests to the person responsible for information protection within Sunalix.

2. What Is Personal Information?

For purposes of this Privacy Policy, personal information generally means information relating to an identifiable, living person and, where applicable, an identifiable existing juristic person.

Depending on how you interact with us, this may include your:

  • Full name;

  • Company or business name;

  • Email address;

  • Telephone or mobile number;

  • Billing address;

  • Delivery address;

  • Postal address;

  • Account details;

  • Order and transaction information;

  • Products purchased or considered;

  • Payment-related information;

  • Customer-service communications;

  • Return and refund information;

  • IP address;

  • Device information;

  • Browser information;

  • Website activity;

  • Cookies and similar identifiers; and

  • Information you voluntarily provide to us.

We only request information that is reasonably necessary for the relevant purpose.

3. Personal Information We Collect

3.1 Information You Provide Directly

We may collect personal information when you:

  • Create an account;

  • Place an order;

  • Complete checkout;

  • Request a quote;

  • Contact customer support;

  • Submit a contact form;

  • Subscribe to marketing communications;

  • Request a return or refund;

  • Participate in a promotion;

  • Leave a product review;

  • Communicate with us by email, telephone, SMS, or other electronic means; or

  • Otherwise voluntarily provide information to us.

3.2 Information Collected Automatically

When you visit our website, certain technical information may be collected automatically.

This may include:

  • IP address;

  • Browser type and version;

  • Device type;

  • Operating system;

  • Referring website;

  • Pages visited;

  • Date and time of visits;

  • Approximate geographic information derived from technical data;

  • Website interaction information;

  • Cookies and similar technologies; and

  • Diagnostic and security information.

This information helps us operate, secure, analyse, and improve our website.

4. How We Use Personal Information

We may process personal information for legitimate and lawful purposes, including:

Order Processing

To:

  • Process and fulfil purchases;

  • Verify orders;

  • Arrange delivery;

  • Provide tracking information;

  • Process returns and refunds;

  • Communicate about orders; and

  • Provide customer support.

Account Management

To:

  • Create and manage customer accounts;

  • Authenticate accounts;

  • Maintain order histories; and

  • Provide account-related services.

Customer Service

To:

  • Respond to enquiries;

  • Investigate complaints;

  • Resolve disputes;

  • Assist with returns and refunds; and

  • Maintain records of customer communications.

Payments

To facilitate and administer payments through our authorised payment service providers.

Sunalix does not intend to store complete card numbers or payment authentication credentials where those details are processed directly by an authorised third-party payment provider.

Payment providers may process personal and transaction information in accordance with their own privacy policies and security requirements.

Website Operations

To:

  • Operate and maintain sunalix.com;

  • Improve website functionality;

  • Detect technical problems;

  • Prevent fraud and abuse;

  • Maintain website security; and

  • Analyse website performance.

Legal and Regulatory Compliance

To:

  • Comply with applicable laws;

  • Respond to lawful requests from authorities;

  • Maintain appropriate business and transaction records;

  • Establish, exercise, or defend legal rights; and

  • Detect and prevent fraud or other unlawful activity.

Marketing

Where permitted by applicable law, we may use personal information to send information about products, services, promotions, or other marketing communications.

Electronic direct marketing will be conducted in accordance with applicable POPIA requirements.

5. Lawful Basis for Processing

POPIA requires personal information to be processed lawfully and in accordance with applicable conditions for processing.

Depending on the circumstances, we may process personal information because:

  • You have provided consent;

  • Processing is necessary to perform a contract with you;

  • Processing is necessary to take steps at your request before entering into a contract;

  • Processing is necessary to comply with a legal obligation;

  • Processing protects a legitimate interest recognised by law;

  • Processing is necessary to protect a person's legitimate interest; or

  • Another lawful basis permitted by applicable South African law applies.

We will not collect or process personal information for purposes that are incompatible with the purpose for which the information was originally collected unless permitted by law.

6. Information Required to Place an Order

Certain personal information is necessary for us to process and fulfil an order.

For example, we may need your:

  • Name;

  • Email address;

  • Telephone number;

  • Billing information;

  • Delivery address; and

  • Payment or transaction information.

If you do not provide information that is necessary to complete a transaction, we may be unable to process or deliver your order.

7. Payment Information

Payments may be processed through third-party payment service providers.

When you make a payment, the applicable payment provider may collect and process information necessary to authenticate and complete the transaction.

Sunalix does not request or intentionally retain your full payment-card credentials unless such processing is specifically necessary and lawfully permitted.

Payment providers may have separate privacy policies governing their processing of personal information.

8. Delivery and Courier Information

To deliver your order, we may share relevant information with courier and logistics providers.

Information may include:

  • Recipient name;

  • Delivery address;

  • Telephone number;

  • Email address;

  • Order reference;

  • Parcel information; and

  • Tracking information.

We only provide information reasonably necessary for the delivery provider to perform the relevant service.

9. Third-Party Service Providers

We may use trusted third-party service providers to operate our business and website.

These may include providers of:

  • Website hosting;

  • E-commerce services;

  • Payment processing;

  • Courier and logistics services;

  • Email delivery;

  • SMS communications;

  • Customer support;

  • Website analytics;

  • Fraud prevention;

  • Security services;

  • Advertising and marketing;

  • Cloud storage; and

  • Other business-support services.

Where a third party processes personal information on our behalf, we will take reasonable steps to ensure that the processing is subject to appropriate confidentiality, security, and data-protection requirements.

Third parties may process information in accordance with their own applicable privacy policies.

10. Shopify and Website Technology

Our online store may use third-party e-commerce technology and associated services to operate the website, manage products and orders, process customer information, and provide checkout functionality.

These services may involve the processing or storage of personal information by service providers operating in South Africa or other jurisdictions.

We take reasonable steps to ensure that personal information is handled in accordance with applicable privacy requirements.

11. Cookies and Similar Technologies

Our website may use cookies and similar technologies.

Cookies are small files or identifiers that may be stored on your device when you visit a website.

We may use cookies to:

  • Keep the website functioning;

  • Maintain shopping-cart information;

  • Remember preferences;

  • Authenticate customer accounts;

  • Understand website usage;

  • Measure website performance;

  • Improve user experience;

  • Detect fraud and security threats; and

  • Support advertising and marketing activities where applicable.

Some cookies may be placed by third-party service providers.

You may be able to control or disable certain cookies through your browser settings. Disabling certain cookies may affect website functionality, including shopping-cart or checkout functionality.

Where required by applicable law, we will obtain the necessary consent before using non-essential cookies or similar tracking technologies.

12. Analytics and Advertising

We may use analytics and advertising technologies to understand how visitors interact with our website and to measure the effectiveness of our advertising.

These technologies may collect information such as:

  • IP address;

  • Device information;

  • Browser information;

  • Pages visited;

  • Products viewed;

  • Referring sources;

  • Purchase or conversion information; and

  • Website interaction data.

Where these technologies involve third-party providers, their processing may be governed by their respective privacy policies.

We will take reasonable steps to ensure that marketing and analytics activities are conducted in accordance with applicable privacy and electronic-communications requirements.

13. Electronic Direct Marketing

Sunalix may send promotional communications by email, SMS, telephone, or other electronic means where permitted by applicable law.

We will not use personal information for unsolicited electronic direct marketing except where the applicable requirements of POPIA have been satisfied.

Where consent is required, we will request it in an appropriate manner.

Where permitted by law, we may communicate with existing customers about similar products or services, subject to applicable requirements and the customer's right to opt out.

Every applicable electronic marketing communication will provide an appropriate and reasonably accessible way to stop receiving further marketing communications.

You may unsubscribe from marketing communications at any time by using the unsubscribe mechanism included in the communication or by contacting:

info@sunalix.com

Opting out of marketing communications will not prevent us from sending essential transactional or service communications, such as order confirmations, delivery updates, payment notices, security notices, or information necessary to administer your account.

14. Electronic Communications

When you communicate with Sunalix electronically, including by email, website forms, SMS, or other electronic channels, we may retain records of those communications where reasonably necessary for customer service, transaction administration, security, legal compliance, or dispute resolution.

Electronic communications may contain personal information and will be handled in accordance with this Privacy Policy and applicable law.

Electronic transactions conducted through our website are subject to our Terms of Service and other applicable website policies.

15. Information Security

Sunalix takes reasonable technical and organisational measures to protect personal information against:

  • Loss;

  • Theft;

  • Unauthorised access;

  • Unauthorised disclosure;

  • Unauthorised alteration;

  • Unauthorised destruction;

  • Accidental loss; and

  • Other unlawful or unauthorised processing.

Security measures may include access controls, authentication, secure communications, service-provider controls, monitoring, and other reasonable safeguards appropriate to the nature of the information.

However, no website, electronic transmission, or storage system can be guaranteed to be completely secure.

16. Security Breaches

If Sunalix becomes aware of a security compromise involving personal information, we will take reasonable steps to investigate, contain, and address the incident.

Where POPIA requires notification of a security compromise, we will notify affected data subjects and/or the Information Regulator as required by law.

A notification may include information about the nature of the compromise, the information potentially affected, and steps that affected individuals can take to reduce potential harm.

17. Retention of Personal Information

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected, or for longer where required or permitted by law.

Retention periods may depend on:

  • The nature of the information;

  • The purpose for which it was collected;

  • Whether an account or customer relationship remains active;

  • Legal and accounting requirements;

  • Tax and transaction-record requirements;

  • Dispute-resolution requirements;

  • Fraud-prevention requirements; and

  • Other legitimate business or legal requirements.

When personal information is no longer required, we will take reasonable steps to securely delete, destroy, anonymise, or otherwise dispose of it where appropriate.

18. Cross-Border Transfers

Some of our service providers or technology platforms may process or store personal information outside South Africa.

Where personal information is transferred outside South Africa, Sunalix will take reasonable steps to ensure that the transfer is conducted in accordance with applicable POPIA requirements.

This may include ensuring that the recipient jurisdiction, recipient organisation, contractual arrangements, consent, or other applicable legal basis provides an appropriate level of protection or otherwise satisfies the requirements applicable to cross-border transfers.

19. Special Personal Information

Sunalix does not ordinarily require customers to provide special personal information such as information concerning health, biometric information, religious beliefs, political opinions, or similar sensitive categories.

Please do not provide special personal information to us unless it is reasonably necessary for the purpose for which you are contacting us.

If we ever need to process special personal information, we will do so only where permitted by applicable law and where an appropriate lawful basis exists.

20. Children's Privacy

Our website is intended for general consumers and is not specifically directed at children.

We do not knowingly collect personal information from children in circumstances where such collection is prohibited by applicable law.

If you believe that a child has provided personal information to us unlawfully or without appropriate consent, please contact us at info@sunalix.com.

21. Your Privacy Rights

Subject to applicable law, you may have rights including the right to:

  • Ask whether we hold personal information about you;

  • Request access to personal information we hold about you;

  • Request correction of inaccurate or incomplete personal information;

  • Request deletion of personal information where permitted by law;

  • Object to certain processing;

  • Object to processing for direct marketing;

  • Withdraw consent where processing is based on consent;

  • Request information about how your personal information is processed;

  • Lodge a complaint regarding the handling of your personal information; and

  • Exercise other rights provided by POPIA or other applicable law.

We may need to verify your identity before processing certain requests.

Some rights are subject to statutory exceptions and limitations.

22. Correction or Deletion Requests

If you believe that information we hold about you is inaccurate, incomplete, misleading, or outdated, you may request that it be corrected or updated.

Where permitted by law, you may also request deletion or destruction of personal information.

Requests should be sent to:

info@sunalix.com

Please provide enough information for us to identify the relevant personal information and verify your identity.

23. Withdrawal of Consent

Where we process your personal information on the basis of consent, you may withdraw that consent, subject to applicable legal and contractual limitations.

Withdrawal of consent does not affect processing that occurred lawfully before consent was withdrawn.

If certain information is necessary to provide a service or complete a transaction, withdrawing consent may mean that we cannot continue providing that service.

24. Complaints

If you believe that Sunalix has processed your personal information unlawfully or has otherwise interfered with your privacy rights, please contact us first so that we can investigate and attempt to resolve the matter.

Sunalix Privacy Contact:


Email: info@sunalix.com

You may also lodge a complaint with the Information Regulator of South Africa where permitted by law.

The Information Regulator is responsible for administering and enforcing POPIA and PAIA.

25. PAIA and Access to Information

Sunalix recognises the requirements of the Promotion of Access to Information Act 2 of 2000 (PAIA).

Requests for access to records or personal information must be made in accordance with applicable PAIA and POPIA procedures.

Where appropriate, Sunalix will provide access to information subject to the applicable legal requirements, exceptions, verification procedures, and fees.

A separate PAIA Manual may be made available where required by applicable law.

26. Third-Party Websites

Our website may contain links to websites, services, social-media platforms, payment providers, or other third-party websites.

This Privacy Policy does not govern the privacy practices of those third parties.

We recommend reviewing the privacy policy of any third-party website or service before providing personal information.

27. Fraud Prevention and Legal Compliance

We may process personal information to detect, prevent, investigate, and address:

  • Fraud;

  • Payment abuse;

  • Theft;

  • Cybersecurity incidents;

  • Unauthorised transactions;

  • Misuse of our website;

  • Violations of our Terms of Service; and

  • Other unlawful activities.

We may disclose information where reasonably necessary to comply with a lawful request, court order, legal obligation, or regulatory requirement.

28. Disclosure to Law Enforcement and Authorities

Sunalix may disclose personal information where required or permitted by law.

This may include disclosures to:

  • Courts;

  • Law-enforcement agencies;

  • Regulators;

  • Tax authorities;

  • Government authorities;

  • Legal advisers; and

  • Other persons or organisations where disclosure is legally required or permitted.

We will not sell your personal information to third parties.

29. Data Accuracy

We take reasonable steps to ensure that personal information used by us is:

  • Accurate;

  • Complete where necessary;

  • Not misleading; and

  • Kept reasonably up to date.

Customers should notify us if their personal information changes.

30. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect:

  • Changes in our business;

  • Changes to our website or services;

  • Changes to technology;

  • Changes to our service providers;

  • Changes in applicable law; or

  • Changes to privacy or security practices.

The latest version will be published on sunalix.com with the applicable "Last Updated" date.

Where a material change is required to be communicated to customers under applicable law, we will take reasonable steps to provide appropriate notice.

31. Contact Information

For questions, requests, complaints, or concerns relating to this Privacy Policy or the handling of personal information, contact:

Sunalix
Email: info@sunalix.com
Physical Address: 30 Gemini St, Brackenfell South, Cape Town, 7560, South Africa
Support Hours: Monday–Friday, 08:00–17:00 SAST

Privacy requests: info@sunalix.com

We aim to handle privacy enquiries in a timely and appropriate manner in accordance with applicable law.

32. Applicable Law

This Privacy Policy is governed by the laws of the Republic of South Africa, subject to any mandatory legal rights or requirements that may apply.

Where this Privacy Policy refers to POPIA, PAIA, ECTA, or other legislation, the applicable legislation and regulations in force from time to time will apply.