Pharma Direct Holdings (Pty) Ltd

Privacy Policy

Effective Date: 2023, Revised June 2026

Version: 1.1

1. Introduction

Pharma Direct Holdings (Pty) Ltd (“Pharma Direct”, “we”, “our”, or “us”) respects your constitutional right to privacy and is committed to protecting your personal information in accordance with:

The Protection of Personal Information Act 4 of 2013 (“POPIA”);
The Promotion of Access to Information Act 2 of 2000 (“PAIA”);
The Consumer Protection Act 68 of 2008 (“CPA”);
The Electronic Communications and Transactions Act 25 of 2002 (“ECTA”);
Any other applicable South African legislation.

This Privacy Policy explains how Pharma Direct collects, uses, stores, protects, and discloses personal information when you interact with our business, website, products, services, and customer support channels.

By accessing our website or using our services, you acknowledge that you have read and understood this Privacy Policy.

2. Responsible Party

For purposes of POPIA, Pharma Direct Holdings (Pty) Ltd is the Responsible Party responsible for determining the purpose and means of processing personal information.

Pharma Direct Holdings (Pty) Ltd

Website: www.pharmadirect.co.za

Email: privacy@pharmadirect.co.za

Customer Support: support@pharmadirect.co.za

3. Information We Collect

We may collect and process the following categories of personal information:

Personal Identification Information

Full names
Identity or passport number (where legally required)
Date of birth
Gender
Customer account information

Contact Information

Email address
Telephone number
Mobile number
Physical address
Delivery address

Transaction Information

Product purchases
Order history
Payment references
Invoice details
Delivery information

Technical Information

When visiting our website, we may automatically collect:

IP address
Browser type
Device information
Operating system
Website usage statistics
Cookies and tracking data

Customer Communications

Customer service enquiries
Product feedback
Reviews
Support requests
Marketing preferences

4. Special Personal Information

Pharma Direct may process limited health-related information where voluntarily provided by customers in connection with:

Product enquiries;
Customer support requests;
Adverse event reporting;
Product suitability questions;
Wellness consultations where offered.

Such information will only be processed where permitted by POPIA and only for lawful and necessary purposes.

Pharma Direct does not request or require detailed medical records unless specifically required for regulatory compliance or customer safety purposes.

5. How We Collect Information

We collect information directly from you when you:

Create an account;
Place an order;
Subscribe to newsletters;
Contact customer support;
Participate in promotions;
Submit product reviews;
Complete forms on our website.

We may also collect information through:

Website cookies;
Analytics tools;
Payment processors;
Delivery service providers;
Lawfully available public sources.

6. Purpose of Processing

We process personal information for legitimate business purposes including:

Order Fulfilment

Processing orders
Delivering products
Managing payments
Providing customer support

Customer Communications

Sending order confirmations
Providing delivery updates
Responding to enquiries

Regulatory Compliance

Meeting legal obligations
Maintaining accounting records
Product traceability requirements

Business Operations

Improving products and services
Managing customer relationships
Preventing fraud and abuse

Marketing Communications

Where permitted by law, we may send:

Newsletters
Promotions
Product updates
Educational content

Customers may opt out at any time.

7. Legal Basis for Processing

We process personal information on one or more of the following lawful grounds:

Consent from the data subject;
Performance of a contract;
Compliance with legal obligations;
Protection of legitimate interests;
Legitimate business interests that do not override privacy rights.

8. Cookies and Website Technologies

Our website may use cookies and similar technologies to:

Improve user experience;
Remember preferences;
Analyse website performance;
Support website security;
Deliver relevant content.

Users may disable cookies through their browser settings; however, some website functionality may be affected.

9. Sharing of Personal Information

Pharma Direct does not sell personal information.

We may share personal information with trusted third parties including:

Service Providers

Payment processors
Courier companies
Website hosting providers
Customer support providers
Marketing service providers

Professional Advisors

Accountants
Auditors
Attorneys
Regulatory consultants

Regulatory Authorities

Where required by law, court order, subpoena, or regulatory request.

All third parties are required to maintain appropriate confidentiality and security measures.

10. International Transfers

Where personal information is transferred outside South Africa, Pharma Direct will take reasonable steps to ensure that the recipient provides an adequate level of protection substantially similar to that required under POPIA.

11. Data Security

Pharma Direct implements reasonable technical and organisational safeguards designed to protect personal information against:

Unauthorised access;
Loss;
Theft;
Destruction;
Alteration;
Disclosure.

Security measures may include:

SSL encryption;
Secure servers;
Access controls;
Password protection;
Firewall protection;
Staff confidentiality obligations.

While we take reasonable precautions, no method of electronic transmission or storage is completely secure.

12. Retention of Information

We retain personal information only for as long as:

Necessary for the purposes for which it was collected;
Required by law;
Needed to resolve disputes;
Required for accounting and tax compliance.

When information is no longer required, it will be securely deleted, destroyed, anonymised, or de-identified.

13. Your Rights Under POPIA

Subject to applicable law, you have the right to:

Access

Request access to your personal information.

Correction

Request correction of inaccurate information.

Deletion

Request deletion of information where legally permissible.

Objection

Object to certain forms of processing.

Restriction

Request limitation of processing activities.

Direct Marketing

Object at any time to direct marketing communications.

Complaints

Lodge a complaint with the Information Regulator of South Africa.

14. Information Regulator

If you believe your personal information has been processed unlawfully, you may contact:

Information Regulator (South Africa)

JD House

27 Stiemens Street

Braamfontein

Johannesburg

2001

Website: www.justice.gov.za/inforeg

Email: enquiries@inforegulator.org.za

Complaints Email: PAIAComplaints@inforegulator.org.za

15. Children’s Privacy

Pharma Direct does not knowingly collect personal information from persons under the age of 18 years without the consent of a parent, guardian, or competent person where required by law.

16. Third-Party Websites

Our website may contain links to third-party websites.

Pharma Direct is not responsible for the privacy practices, content, or security of external websites.

Users are encouraged to review the privacy policies of those websites before providing personal information.

17. Changes to this Privacy Policy

Pharma Direct may amend this Privacy Policy from time to time to reflect legal, regulatory, operational, or technological changes.

The latest version will always be available on our website.

Continued use of our services after changes are published constitutes acceptance of the updated Privacy Policy.

18. Contact Us

For privacy-related enquiries, requests, or complaints, please contact:

Information Officer

Pharma Direct Holdings (Pty) Ltd

Email: privacy@pharmadirect.co.za

Customer Support: support@pharmadirect.co.za

Website: www.pharmadirect.co.za

Business Hours:

Monday – Friday

08:00 – 17:00 South African Time

Last Updated: [Insert Date]

Approved By: Pharma Direct Holdings (Pty) Ltd Management