Privacy Policy

Uzumba (Pty) Ltd  ·  Last updated: 1 July 2026  ·  Version 1.0

Uzumba (Pty) Ltd (“Uzumba”, “we”, “us”, “our”) is committed to protecting your personal information in accordance with the Protection of Personal Information Act 4 of 2013 (“POPIA”). This Privacy Policy explains how we collect, use, store, and protect your personal information when you interact with our website, products, and services.

1. Who We Are

Uzumba (Pty) Ltd is a registered South African company and authorised dealer of South African Mint bullion coins, operating from Block A, Capital Office Park, 1 Central Lane, Steyn City, Johannesburg, 2191. We are the Responsible Party as defined under POPIA.

2. Personal Information We Collect

We collect personal information that you provide directly to us, including:

• Full name, identity number or passport number
• Contact details: email address, telephone number, physical address
• Banking details (for EFT payment processing and verification)
• FICA documentation: certified copy of ID and proof of residence
• Transaction history and order details
• Communication records (emails, WhatsApp messages, enquiries)
• Website usage data (cookies, IP address, browser type) via analytics

3. How We Use Your Information

We use your personal information to:

• Process and fulfil your orders for gold, silver, and platinum bullion coins
• Verify your identity as required by FICA and POPIA
• Communicate with you about your orders, enquiries, and appointments
• Send you price alerts and newsletters (only if you have subscribed)
• Comply with our legal and regulatory obligations
• Improve our website and services through analytics
• Prevent fraud and protect the security of our business and clients

4. Lawful Basis for Processing

We process your personal information on the following lawful grounds:

• Contractual necessity: to fulfil your purchase orders
• Legal obligation: FICA compliance requires identity verification
• Legitimate interest: fraud prevention and business security
• Consent: for marketing communications and newsletters (you may withdraw consent at any time)

5. Sharing of Personal Information

We do not sell, rent, or trade your personal information. We may share your information with:

• Payment processors: to process EFT payments and verify transactions
• Courier and logistics partners: solely for the purpose of delivering your order
• Regulatory authorities: the Financial Intelligence Centre (FIC) and SARS where legally required
• Professional advisors: auditors, attorneys, under strict confidentiality obligations
• Formspree (form processing): our enquiry and order forms are processed via Formspree Inc. Their privacy policy applies to form submissions

6. Retention of Information

We retain personal information for as long as necessary to fulfil the purposes outlined in this policy, and in any event for a minimum of five (5) years as required by FICA. Transaction records are retained for seven (7) years in line with SARS requirements. Marketing preferences are retained until you withdraw consent.

7. Security

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, loss, destruction, or alteration. These measures include secure server infrastructure, encrypted communications (HTTPS), and restricted staff access to personal data on a need-to-know basis.

While we take all reasonable precautions, no data transmission over the internet can be guaranteed as completely secure. You transmit information to us at your own risk.

8. Cookies

Our website uses cookies to enhance your browsing experience, analyse site traffic, and remember your preferences. You may disable cookies in your browser settings; however, this may affect certain functionality of the website. We use Google Analytics to understand how visitors use our site. Google Analytics data is anonymised and does not identify you personally.

9. Your Rights Under POPIA

You have the right to:

• Access: request a copy of the personal information we hold about you
• Correction: request correction of inaccurate or incomplete information
• Deletion: request deletion of your information, subject to our legal retention obligations
• Objection: object to the processing of your information for direct marketing
• Withdrawal of consent: withdraw consent for marketing at any time by emailing us or clicking “unsubscribe” in any newsletter
• Lodge a complaint: with the Information Regulator of South Africa if you believe your rights have been violated

To exercise any of these rights, contact our Information Officer at info@uzumba.co.za.

10. Information Regulator

If you believe we have not handled your personal information in accordance with POPIA, you have the right to lodge a complaint with the Information Regulator of South Africa:

• Website: www.justice.gov.za/inforeg/
• Email: complaints.IR@justice.gov.za

11. Changes to This Policy

We may update this Privacy Policy from time to time. The date of the most recent revision is shown at the top of this document. We encourage you to review this policy periodically. Continued use of our website or services after changes are posted constitutes your acceptance of the updated policy.