Privacy policy
Basis Nutrition (Pty) Ltd · Last updated 2 October 2026
This policy explains what personal information we collect on basis-nutrition.com and in our shop, why we collect it, where it is kept, who sees it, and the rights you have over it. Basis Nutrition (Pty) Ltd is the responsible party under the Protection of Personal Information Act 4 of 2013 (POPIA).
The short version: we collect only what we need to sell and deliver our products, we do not run advertising or analytics trackers, and we never sell your information to anyone.
What we collect, and why
| Waitlist | If you joined the waitlist before the shop opened, your email address, so we could tell you when we launched. The waitlist is closed. |
|---|---|
| Your account | You sign in with Google. Google confirms who you are and gives us your name, email address and Google account identifier. We never see or store a password. |
| Orders | The delivery addresses you save, each with the mobile number of whoever receives parcels there, and the products you order, so we can deliver them and show you your order history. |
| Payments | Payments are processed by Paystack. Your card number goes to Paystack, never to our servers. We keep only a payment reference so we can match a payment to an order and process refunds. |
| Order updates | We email you about your order: the receipt, and the tracking details once it ships. Email is the only way we send order updates. Our courier may use the mobile number on your delivery address to contact you about that delivery, and for nothing else. |
| If you email us, we keep the correspondence so we can help you and keep a record of what was agreed. |
We process your account, order, payment and delivery information because it is necessary to carry out your order, in terms of section 11(1)(b) of POPIA.
Marketing
We do not send marketing messages: no discounts, offers or newsletters, by email or any other channel. If that changes, we will ask for your consent first, and you will be able to withdraw it at any time.
Cookies
We use a small number of cookies, all of them functional. There are no advertising cookies, no analytics, and no third party trackers on this site or in the shop.
| Session | Keeps you signed in. Expires after 30 days. |
|---|---|
| Cart | Remembers what is in your cart before you sign in. Encrypted, and merged into your account when you sign in. |
| Security token | Protects forms against cross-site request forgery. Expires after 24 hours. |
| Sign-in state | Set for a few minutes while you sign in with Google, then removed. |
Where address autocomplete is available at checkout, what you type into the address field is sent to Google Maps so it can suggest addresses. You can ignore the suggestions and type the address yourself.
Where your information lives
Our servers and database run in Amazon Web Services' Cape Town region, so your information is stored in South Africa. Traffic to our site passes through Cloudflare's network, which we use for security and delivery. We keep encrypted backups so an outage does not lose your orders.
Who we share it with
We share personal information with three kinds of operator, and no one else:
- Paystack, to process your payment.
- Our courier, who gets your name, delivery address, the mobile number on it and any delivery notes you add, to bring you your order.
- Google, to verify your identity when you sign in, and to suggest matching addresses while you type one in the shop.
We do not sell, rent or trade your personal information. We will disclose it if a court or a law obliges us to.
How long we keep it
| Order and payment records | 5 years, as tax law requires |
|---|---|
| Your account and addresses | Until you ask us to delete them |
| Waitlist email addresses | Until we have told the waitlist we launched, then deleted |
| Sign-in sessions | 30 days |
Your rights
Under POPIA you may, at any time and at no cost:
- ask what personal information we hold about you
- ask us to correct it
- ask us to delete it, where the law does not oblige us to keep it
- object to how we are using it
Email [email protected] and we will respond within one business day. If you are not satisfied with our answer, you may complain to the Information Regulator of South Africa at inforegulator.org.za, and we will co-operate with them.
Age
Our products and site are intended for adults. We do not knowingly collect personal information from anyone under 18. If you believe a minor has given us personal information, email us and we will delete it.
Changes to this policy
If we change this policy we will change the date at the top, and if the change matters, for example a new operator or a new kind of information collected, we will tell account holders by email before it takes effect.
Basis Nutrition (Pty) Ltd, Somerset West, Western Cape, South Africa.