Sycal (Pty) Ltd – Privacy Policy

Overview

This Privacy Policy details how Sycal (Pty) Ltd collects, uses, protects, and discloses your personal information when you visit our website, complete a purchase, or subscribe to our newsletter and mailing lists. We are committed to safeguarding your privacy in strict compliance with applicable data protection laws, including the Protection of Personal Information Act (POPIA) of South Africa and international data protection standards. By interacting with our platform or opting into our communications, you acknowledge and agree to the practices described in this document.

1. Personal Information We Collect

When you access our platform, we automatically gather specific digital information regarding your device. This encompasses details about your web browser, network IP address, time zone, and data from specific cookies installed on your system. As you navigate the website, we further collect metrics regarding the individual pages or products viewed, the referral websites or search terms that directed you to us, and general interaction metrics. This automatically collected data is defined as Device Information. We collect Device Information utilising industry-standard technologies such as cookies, which are data files placed on your device containing an anonymous unique identifier, alongside log files, web beacons, tags, and tracking pixels to accurately record your browsing behavior and system data.

Separately, when you finalise a purchase or attempt to complete a transaction through our platform, we collect explicit processing information from you. This includes your full name, billing address, shipping address, payment information, email address, and contact telephone number. This database profile is defined as “Order Information”.

Additionally, when you choose to subscribe to our newsletter or promotional mailing lists, we collect the necessary information required to safely deliver our content to you. This includes Subscriber Identity and Contact Data, such as your email address and your name if explicitly provided. Our system also tracks Technical and Usage Data provided via Mailchimp, our designated Email Service Provider, which monitors how you interact with our broadcast campaigns, including specific email open rates, link clicks, and your IP address at the time of engagement. Throughout this policy, any reference to Personal Information collectively encompasses Device Information, Order Information, and Subscriber Data.

2. Processing and Usage of Personal Information

We process your Order Information primarily to fulfill transactions placed through our platform, which includes securing your payment transactions via Payfast, coordinating national courier logistics, and generating necessary invoices or order confirmations. We also utilise this data to manage client communications, protect our operational ecosystem from potential risk or fraud, and deliver targeted marketing materials or product updates aligned with the communication parameters you have explicitly chosen.

Your Device Information is utilised to help us screen for potential operational risk and fraud, specifically through IP address validation. More broadly, this data enables us to optimise and improve our platform experience by generating internal analytics regarding customer browsing habits, allowing us to accurately measure the performance of our promotional campaigns.

Regarding our subscriber database, we use your information solely to distribute newsletters, product updates, targeted marketing materials, and special promotional offers. This data allows us to personalise your consumer experience and deliver tailored content relevant to your specific cycling and outdoor safety interests while systematically improving our overall email campaigns based on real-time subscriber engagement metrics.

3. Legal Basis for Data Processing

In accordance with statutory data compliance regulations, Sycal (Pty) Ltd processes your personal information for general store operations based on legitimate business interests, contractual necessity to fulfill your orders, and legal obligations. For our newsletter and marketing communications, we process your personal information based strictly on your explicit consent. By clicking the subscription authorisation / subscribe button and confirming your email address, you give us formal permission to process your data for the communication channels outlined. You maintain an absolute right to withdraw this consent at any target time.

4. Third-Party Data Sharing and Security

We share your Personal Information with trusted third-party service providers solely to facilitate the business operations described above. For example, your transactional data is safely transferred to Payfast to secure card payments, your physical delivery profiles are shared with our logistics couriers, and tracking data is shared with Google Analytics to interpret platform interaction.

To securely deliver our email newsletters and marketing updates, your identity and contact data are shared with Mailchimp. Mailchimp acts as our contracted data processor and is contractually obligated to protect your data under strict confidentiality agreements, meaning they are explicitly forbidden from using your personal records for any alternative purpose. We do not sell, rent, or trade your personal information to third parties under any circumstances.

We implement strict, comprehensive technical and organisational security measures designed to protect your personal information from unauthorised access, accidental loss, misuse, disclosure, or permanent alteration. While we maintain rigorous protection environments, no method of digital transmission or storage can be guaranteed as entirely infallible, and users assume normal inherent internet risks.

5. Data Retention and Your Legal Rights

We will retain your archived Order Information within our corporate records for administrative, taxation, and legal purposes unless you formally request the erasure of your personal records. For our mailing lists, we retain your email address and associated interaction data within Mailchimp for as long as you remain an active subscriber. If you choose to opt out or unsubscribe, your data will be securely deleted or permanently archived from our active mailing lists in accordance with applicable statutory timelines.

Depending on your geographical location, you maintain comprehensive rights regarding your personal data under POPIA and associated frameworks. You retain the right to access and request a copy of the personal data we hold about you, the right to request corrections to any inaccurate information, and the right to complete erasure, also known as the right to be forgotten, where legally applicable. Furthermore, you hold the right to object to your data being utilised for direct marketing.

6. Unsubscribe Procedure and Customer Rights

You can exercise your right to opt out of our marketing communications at any moment. Every digital broadcast sent by Sycal (Pty) Ltd via Mailchimp contains a clear, accessible, and automated Unsubscribe link embedded directly within the email footer. Alternatively, you can request manual removal from our database by contacting our privacy compliance team directly via email. Please note that our website data collection and analytics practices remain unaltered when detecting an automated Do Not Track signal from your browser.

7. Corporate and Contact Information

This website and its associated communication channels are operated entirely by Sycal (Pty) Ltd, a private company incorporated in the Republic of South Africa under company registration number 2026/374106/07.

For additional details regarding our automated data privacy practices, to submit a compliance query, or to lodge a formal data erasure request, please communicate with our administrative team directly at info@sycal.co.za.

Physical Address: [Insert Corporate Physical Address]

Contact Number: [Insert Contact Phone Number]

Section 8 – Corporate and Contact Information

This website is operated by Sycal (Pty) Ltd, a private company incorporated in the Republic of South Africa with registration number 2026/374106/07.

Any formal inquiries or questions regarding these Terms of Service should be directed to our administrative team at info@sycal.co.za.