Privacy Policy

Diski Kits (Pty) Ltd ("Diski Kits", "we", "us") respects your privacy and is committed to protecting your personal information in line with the Protection of Personal Information Act, 2013 ("POPIA"). This policy explains what we collect, why, how we use it, and your rights.

1. Who we are

2. What we collect

When you place an order or contact us, we collect:

• Identity data: full name
• Contact data: email address, WhatsApp/mobile number, delivery address (street, suburb, city, postal code)
• Order data: items purchased, size, quantity, price, order reference
• Payment data: we do not receive or store your card details. Payments are processed by Yoco (see section 5)
• Technical data: IP address, browser type, device type, and pages viewed on our site — collected via Vercel Web Analytics in aggregate form

3. Why we collect it (lawful basis)

• To fulfil your order — process payment, arrange courier delivery, send confirmations, respond to queries. Lawful basis: performance of a contract.
• To meet legal obligations — retain records for tax and consumer-protection compliance. Lawful basis: legal obligation.
• To improve our service — understand which products and pages perform. Lawful basis: legitimate interest (aggregated / non-identifying data only).

4. Who we share it with

Your information is only shared with third parties that help us run the business:

• Yoco Payments (Pty) Ltd — processes card payments. Yoco has its own privacy policy at yoco.com.
• Supabase Inc. — stores order data on our behalf. Data resides in EU/US regions.
• Resend Inc. — sends transactional order emails.
• Vercel Inc. — hosts the website.
• Courier partners — receive your name, address, and phone number to make delivery.

We do not sell your data. We do not share it for marketing purposes with unrelated third parties.

5. Payment security

All card payments are processed by Yoco via a secure 3D Secure checkout. Card numbers and CVVs are entered on Yoco's system and are never transmitted to or stored on our servers.

6. How long we keep it

We retain order records for 5 years to comply with South African tax and consumer-protection laws. After that period, records are anonymised or deleted.

7. Your rights (POPIA)

You have the right to:

• Access the personal information we hold about you
• Correct or delete it
• Object to processing for direct marketing
• Lodge a complaint with the Information Regulator (inforegulator.org.za)

To exercise these rights, email howzit@diskikits.co.za. We will respond within 30 days.

8. Cookies

Our site uses minimal cookies for cart persistence (localStorage) and anonymous analytics (Vercel Web Analytics). We do not use tracking cookies for advertising.

9. Children

Our site is not directed at children under 18. We do not knowingly collect information from minors.

10. Changes to this policy

We may update this policy from time to time. Changes take effect when posted on this page. Material changes will be communicated by email to registered customers.

11. Contact

Questions or concerns? Email howzit@diskikits.co.za or WhatsApp +27 64 668 1757.