Privacy Policy

1. Definitions

• “Company” or “We” or “Us”: STECO
• “Data Subject” or “User”: Means the person to whom any personal information relates. This includes website visitors, customers, and any individual whose information we collect.
• “Personal Information”: Means any information that can identify a person, directly or indirectly, including but not limited to names, contact details, financial information, and online identifiers.
• “Processing”: Any operation performed on personal information, including collection, storage, use, and disposal.
• Other definitions (as needed): Include definitions for terms like “Competent Person,” “Operator,” etc., if relevant, similar to the original document.  

2. Introduction

• STECO operates an online store where customers can purchase products/services.
• We understand the importance of privacy and are committed to protecting the personal information of our users.
• This Privacy Policy outlines how we collect, use, and safeguard your information.
• We acknowledge the importance of data privacy and strive to comply with relevant data protection laws.  

3. Objective

• The objective of this policy is to explain how we protect user’s personal information, obtain consent, and prevent unauthorized disclosure.  

4. Core Principles

• We are committed to:
  • Implementing security measures to protect personal information.
  • Processing information lawfully and transparently.
  • Collecting information only for specified and legitimate purposes.
  • Ensuring data accuracy.
  • Providing users access to their information.
  • Not processing special personal information without consent (if applicable).
  • Securing the integrity and confidentiality of personal information.  

5. Consent

• We obtain user consent for the collection, processing, and sharing of their information, as required.
• Consent will be obtained when information is collected, and if the purpose changes, new consent will be requested.  

6. Collection, Processing, and Sharing of Information

• We collect personal information when users:
  • Register an account.
  • Place an order.
  • Contact us.
• The types of information we collect may include:
  • Contact information (name, email, address).
  • Payment information.
  • Order details.
  • Website usage data.
• We may share information with:
  • Delivery services.
  • Payment processors.
  • Other third-party service providers necessary for our operations.
• We ensure that any third parties we share data with have their own privacy policies in place.
• We will only collect personal information directly from the data subject, unless an exception applies under the relevant privacy law.  

7. Storage of Information

• We take reasonable measures to protect personal information from loss, misuse, and unauthorized access.
• These measures include:
  • Secure databases.
  • Firewalls.
  • Regular security assessments.  

8. Disposal of Data Subject’s Information

• We retain personal information only as long as necessary for the purposes for which it was collected or as required by law.  
• When no longer needed, we will securely dispose of the information.
• Methods of disposal include:
  • Secure deletion of electronic data.
  • Shredding of physical documents.  

9. Internet and Cyber Technology

• This section outlines our policies regarding the use of our website, email, and other online systems.
• It includes rules for:
  • Acceptable use.
  • Password security.
  • Email usage (prohibiting inappropriate content).
  • Protection of handheld devices.
  • Anti-virus measures.
  • Physical access control to our systems.  

10. Usage Data, Tracking Technologies and Cookies

• We may collect usage data automatically when users interact with our website.
• This may include IP addresses, browser type, pages visited, and other diagnostic data.
• We use cookies and similar tracking technologies to enhance user experience and analyze website traffic.
• Users can control cookie settings in their browsers.  

11. Third-Party Operators

• We may share personal information with third-party service providers (operators) to perform services on our behalf.
• We take steps to ensure these operators protect user information.
• We will obtain consent and enter into operator agreements where necessary.  

12. Banking Details

• We offer various payment methods for customer convenience.
• Customers’ financial information is subject to the terms and conditions of the payment processors used.
• We are not liable for data breaches that may occur on those platforms.  

13. Direct Marketing

• We will not share personal information with third parties for their direct marketing purposes.
• We may send promotional emails to our customers.
• Customers can opt out of receiving marketing communications.  

14. Data Classification

• We classify information based on its sensitivity to ensure appropriate protection.
• This helps us manage data security and access controls.  

15. Rights of the Data Subject

• Users have the right to:
  • Withdraw consent.
  • Object to processing.
  • Access their personal information.
  • Request correction or deletion of their information.
• We will respond to user requests in accordance with applicable data protection laws.  
• Include FORM 1 & 2

16. COVID-19 (If Applicable)

• If you collect health-related information due to COVID-19 requirements, include a section explaining this.
• Be specific about what information is collected, how it’s used, and with whom it might be shared (e.g., health authorities).  

17. Information Officer

• Designate an Information Officer responsible for overseeing data protection compliance.
• Provide their contact information.  

18. Data Breach Procedures

• Outline the steps we will take in the event of a data breach, including:
  • Assessment of the breach.
  • Notification to affected parties and authorities.
  • Remedial actions.  

19. Availability and Revision

• This policy will be available on our website.
• We will update this policy as needed to reflect changes in our practices or legal requirements.  

Important Considerations

• Legal Compliance: Ensure the policy complies with all applicable data protection laws in your jurisdiction (e.g., GDPR, CCPA, POPIA).
• Clarity and Readability: Use clear, concise language that is easy for users to understand.
• Specificity: While aiming for generality, you’ll need to add specific details about your store’s practices (e.g., the exact types of data you collect, the names of specific third-party providers).
• Regular Review: It’s crucial to review and update your privacy policy regularly to maintain compliance and reflect changes in your business.