Privacy Policy

1. Who we are

1.1. Bizniz Chairs is a sole proprietorship owned and operated by Wayne Waldeck, based in Amanzimtoti, KwaZulu-Natal.

1.2. We provide office chair repair, custom upholstery, and the sale of office-chair spare parts nationwide.

1.3. For POPIA purposes, we are the "Responsible Party" for the personal information we collect about you.

2. Information Officer

2.1. Our Information Officer is Wayne Waldeck.

2.2. Email: info@biznizchairs.co.za

2.3. Phone: +27 71 848 0829 / +27 66 243 4867

3. What personal information we collect

We collect the following categories of personal information:

3.1. Identity and contact details: name, surname, email address, phone number, business name (if applicable).

3.2. Delivery details: physical address, suburb, city, province, postal code.

3.3. Order information: items purchased, order value, payment method, order history.

3.4. Technical data: IP address, browser type, device type, operating system, cookies, browsing behaviour on our site.

3.5. Photos and chat content: photos you upload to our website chatbot or send by WhatsApp/email when requesting a repair quote, and any messages you send us.

3.6. Service-call details: make and model of your chair, fault description, location of the on-site visit.

4. How we collect your information

4.1. Directly from you when you place an order, request a quote, fill in a form, or message us.

4.2. Automatically through cookies and analytics when you visit our site (see section 9).

4.3. From third parties such as Yoco (payment confirmations) and our courier partner (delivery status).

5. How we use your information

5.1. To fulfil your order or service request — taking payment, arranging delivery, confirming a service appointment.

5.2. To communicate with you about your order, including service reminders for chairs we have repaired.

5.3. For marketing, but only with your explicit opt-in consent (e.g. newsletters or product offers). You can unsubscribe at any time.

5.4. To prevent fraud and protect our business, including verifying identity for high-value orders.

5.5. To improve our website and service by analysing how customers use the site.

5.6. To meet our legal obligations, including SARS record-keeping and CPA compliance.

6. Legal basis for processing

We process your personal information on one or more of these legal grounds under POPIA:

6.1. Contract: processing necessary to perform a contract with you (e.g. delivering an order).

6.2. Consent: where you have given consent (e.g. marketing emails).

6.3. Legal obligation: where we are required by law to keep records.

6.4. Legitimate interest: where we have a clear business reason (e.g. fraud prevention) that does not override your rights.

7. Who we share your information with

We share only what is needed, and only with the following operators and third parties:

7.1. Yoco — payment processing for online card payments (yoco.com).

7.2. The Courier Guy / Aramex / similar nationwide courier — to deliver your order.

7.3. Google (Google Analytics) — anonymised website analytics.

7.4. Email service provider (e.g. Gmail / Mailchimp / Brevo) — for transactional and marketing emails.

7.5. SMS provider (e.g. SMSPortal / Clickatell) — for delivery and appointment notifications.

7.6. Firebase / Google Cloud — secure hosting of our website and customer database.

7.7. SARS or law-enforcement authorities — only if legally required.

We do not sell your personal information to anyone.

8. Cross-border transfers

8.1. Some of our service providers (Google, Firebase) host data outside South Africa. They are contractually committed to data-protection standards equivalent to or stronger than POPIA.

8.2. By using our site you consent to this limited cross-border processing.

9. Cookies

9.1. Essential cookies — needed for the cart and login to work. Cannot be switched off.

9.2. Analytical cookies — Google Analytics, to count visits and improve the site.

9.3. Marketing cookies — Meta Pixel, to show you relevant ads on Facebook and Instagram.

You can accept all, reject non-essential, or customise via the cookie banner shown on your first visit. See our Cookie Notice for full detail.

10. How long we keep your information

10.1. Order and tax records: 5 years (SARS requirement).

10.2. Customer account and order history: until you ask us to delete it, plus the 5-year SARS minimum.

10.3. Marketing consent records: until you unsubscribe.

10.4. Chatbot photos and quote conversations: 12 months, then deleted unless they form part of a paid order.

10.5. Website analytics: 14 months (Google Analytics default).

11. Your rights under POPIA

You have the right to:

11.1. Access the personal information we hold about you.

11.2. Correct information that is wrong or out of date.

11.3. Delete information we no longer need to keep.

11.4. Object to processing, including direct marketing.

11.5. Withdraw consent for any optional processing.

11.6. Lodge a complaint with the Information Regulator of South Africa (inforeg@justice.gov.za / www.inforegulator.org.za).

To exercise any of these rights, email info@biznizchairs.co.za. We will respond within a reasonable time, normally 30 days.

12. Children's data

12.1. Our products and services are aimed at adults and businesses.

12.2. We do not knowingly collect personal information from anyone under 18, and we do not market to under-18s.

12.3. If you believe a child has given us their information, please contact us and we will delete it.

13. How we secure your information

13.1. Our website uses HTTPS encryption end-to-end.

13.2. Customer data is stored in Firebase (Google Cloud), with access limited to Wayne Waldeck and authorised systems.

13.3. We use strong passwords and two-factor authentication for our admin tools.

13.4. We do not store your credit card numbers; payments are tokenised by Yoco.

14. Changes to this policy

14.1. We may update this policy as the business evolves.

14.2. Significant changes will be notified via email to existing customers and shown on this page.

15. Contact us