Last updated: 8 September 2026 1. Our commitment Innozanzi (Pty) Ltd respects your privacy and processes personal information responsibly in accordance with the Protection of Personal Information Act, 2013 (“POPIA”) and other applicable South African law. 2. Information we collect Depending on how you interact with us, we may collect your name, contact details, account credentials, company and VAT information, delivery and billing details, quotation and order history, support communications, uploaded documents, website activity, device information and security logs. Payment providers may process payment details; we do not intentionally store complete card details on our website. 3. How we collect information We receive information directly from you when you register, request a quotation, place an order, contact support, subscribe to updates or submit documents. We may also receive information from authorised representatives, service providers, distributors, fraud-prevention services and normal website technologies such as cookies and server logs. 4. Why we use information We use personal information to provide accounts and services; prepare and manage quotations, orders, delivery, returns and support; communicate service updates; verify identity and business details; prevent fraud and protect our systems; meet tax, accounting and legal duties; improve our website; and send marketing only where permitted. Where required, processing is based on consent, contract, legal obligation or a legitimate business purpose that does not unjustifiably infringe your rights. 5. Sharing information We may share relevant information with distributors, couriers, installers, payment and hosting providers, professional advisers, communication providers and authorities where necessary to provide services or comply with law. Providers are expected to protect information and use it only for authorised purposes. We do not sell personal information. 6. Cross-border processing Some service providers may process information outside South Africa. Where this occurs, we use reasonable contractual, technical and organisational safeguards and require an appropriate level of protection as contemplated by applicable law. 7. Retention We keep information only as long as needed for the purpose collected, contractual and support requirements, dispute management, security and legal record-keeping. Information is securely deleted or de-identified when it is no longer required. 8. Security We use reasonable administrative, technical and physical safeguards designed to prevent loss, misuse, unauthorised access or disclosure. No internet service can guarantee absolute security. Please protect your password and notify us promptly if you suspect unauthorised account activity. 9. Cookies and analytics Essential cookies support login, security, carts and your saved cookie choice. Google Analytics and optional browsing-based recommendations require the analytics choice. Use Cookie preferences on /policies/cookies to accept, reject or withdraw that choice. Withdrawing stops future optional collection and use; it does not automatically erase previously collected records. You can request deletion where applicable. See /policies/cookies for the inventory and durations. 10. Your choices and rights Subject to POPIA and lawful limitations, you may ask whether we hold your personal information, request access or correction, object to certain processing, withdraw consent where processing relies on consent, request deletion where retention is no longer lawful, or complain to the Information Regulator. We may need to verify your identity before fulfilling a request. 11. Marketing You may unsubscribe from marketing messages using the link provided or an available account preference. Service, security, quotation and transaction messages are not marketing and may still be sent when necessary. 12. Children Our services are intended for adults and organisations. We do not knowingly collect personal information from children without appropriate lawful authority. 13. Updates and enquiries We may update this policy when our practices or legal obligations change. The current version and date will remain available here. Send privacy, access, correction, objection or deletion requests to support@innozanzi.co.za with the subject “Privacy request”, or use /contact. Do not email identity documents unless we arrange a secure verification method. The Information Regulator’s contact and complaint procedures are available at https://inforegulator.org.za/. 14. AI shopping and product requests OpenAI processes shopping prompts and limited catalogue facts. We request that API responses are not stored as application response objects; this is not a promise that the provider keeps no security or abuse-monitoring records. Contact details entered in the product-request form are used for human follow-up and are not submitted to the shopping model. The conversation shown in that form is shared only when you agree and submit. Our email provider processes delivery, and the request and transcript are stored in the email outbox and staff mailbox for enquiry handling. Do not include third-party personal information or sensitive data. A product request does not subscribe you to marketing. 15. Google address search and advertising When you type in delivery address search, the street search text and a temporary search-session identifier are sent through our server to Google Places API (New). We do not send your recipient name, phone or account ID to Places. Google returns address suggestions; after you select and submit one, we keep the delivery details for your order and, if you choose, your address book, together with a Google place identifier. We do not retain suggestion lists. Removing a saved address does not change order records retained for fulfilment and legal purposes. Google address suggestions reduce typing mistakes; they do not verify residence, identity or courier deliverability. Google Maps Platform terms (https://maps.google.com/help/terms_maps/) and Google privacy information (https://policies.google.com/privacy) apply to this service. Google Ads advertising cookies and full measurement require their own optional choice on /policies/cookies. The base tag loads with consent denied and can send cookieless consent and measurement signals before permission, including network and device information. We keep personalised advertising disabled and do not send names, email addresses or delivery addresses through this tag. Google may process service and measurement information internationally as explained in its privacy information. 16. Security and incident handling Security records and request counters support abuse prevention independently of optional analytics consent. If personal information is compromised, we assess and respond and provide notifications required by POPIA. We review whether information is still required and handle lawful deletion requests across application records and service providers, subject to necessary legal retention.