Your privacy is incredibly important to us. How we process and handle your personal information is explained in this policy to comply with the Protection of Personal Information Act 4 of 2013 (“POPI”).
You may disable the collection of cookies on your browser and you may browse the internet and our website incognito. It is a function easy to engage on your browser. We will not use your personal information for any other purpose without your permission.
Rethink CBD collects and processes personal information in a manner that is reasonable, adequate, relevant, non-excessive and purpose-specific. When you access our website, register as a user and/ or purchase any goods and/ or services from us, we have to collect and process your personal information to render our services to you. To do so, we may collect inter alia the following categories of personal information:
Should your personal information change or you wish to amend and/ or correct your personal information, you can do so by updating your user information in your account profile or contacting Rethink CBD directly for assistance in this regard.
When you access our website, we process your personal information to render our services to you and by doing so, we may receive log information, through online identifiers, including information on how, when and for how long you use our website and other services, as well as the content you view and search queries you submit.
We may also receive information about the equipment or device you use to access or use our website, how you access our website, your browser or operating system, your Internet Protocol address, the geographic location from which you accessed our website, including your device’s global positioning system signal and information about nearby Wi-Fi networks and cell towers, which are obtained when you use location-enabled services and other information about you from third parties, such as social media.
You are not obliged to supply any personal information that you want to keep private. If you purchase goods and services on our website and you do not wish to provide either your telephone number or email address, communication with you will be restricted. However, if you do not provide a method to communicate with you, we will not be able to process your order.
Please note that we only request your banking details to accept your payment/s electronically through PayFast. If for any reason you consent to give us your bank details, we shall retain those details only for as long as it is necessary to carry out the purpose for which you provided us with the details.
All personal information you provide us depends on your consent to give that information. Even after you have given us any personal information, you may request we remove your personal information from our database.
We do not collect personal information about you from other sources. If you have concerns about the personal information we request on our website, you may address these concerns with the Information Officer of Rethink CBD. The details of the Information Officer are set out at the end of this policy.
You warrant that the information you have provided is accurate, current, true and correct and that does not impersonate or misrepresent any person, entity or falsely state or otherwise misrepresent your affiliation with anyone or anything.
We keep your personal information on a secure server. However, when you browse Releaf Pharmaceutical’s network, and you upload any personal information on our website, our provider is based in South Africa.
Our systems are not invulnerable to Zero Day attacks. (A Zero Day attack means the first type of attack of its kind). So, we cannot guarantee that any personal information you communicate to us will be secure. However, we take all precautions reasonably available to protect your personal information.
Among the many things we do to secure your personal information, we use the following essential protocols:
So, if you are making contact with us for the first time, please do not send us PDF documents or open links in your emails.
If we suffer a breach of your personal information, we will immediately inform the Information Regulator of the breach. We will also let you know the nature and extent of that breach unless the Information Regulator requires us to wait for the completion of investigations into the breach.
And, of course, to the best of our ability, we will close the attack vector immediately.
We keep your personal information for as long as you allow us to keep your information, for as long as the law requires us to keep such information or for as long as it is necessary to uphold the contract between you and Rethink CBD.
If you request us to delete your personal information from our database, we will do so immediately. However, if you do not request us to delete your personal information, we will keep your information for three years after your last contact with Rethink CBD or as stipulated above. We base the three-year limit on the Prescription Act 68 of 1969 which has a three-year prescription for debts.
If your personal information is used for more than one purpose, we will retain it until the purpose with the latest period expires. However, we will stop using it for a shorter period once that period expires.
By accessing and using our website, you consent to us retaining records of your personal information for no longer than may be necessary to achieve the purpose for which the information was initially collected or subsequently processed.
Rethink CBD respects your privacy. We are committed to respecting your privacy per POPI and will strive to apply the protections accorded to personal information in any other legislation, local and international, which may be applicable.
Rethink CBD uses your personal information for the following main purposes:
Rethink CBD will protect the quality and integrity of your personal information at all times. You are also entitled to know what personal information Rethink CBD keeps about you. To request access to your personal information and to assist Rethink CBD to correct inaccuracies in your personal information please send an email to our Information Officer. The details of the Information Officer are set out at the end of this policy.
We secure the integrity and confidentiality of your personal information in our possession or under our control by taking appropriate, reasonable technical and organisational measures to prevent loss of, damage to or unauthorised destruction of personal information; and unlawful access to or processing of personal information.
To implement and maintain such measures, we have in place policies, controls and related processes, which are reviewed and updated regularly.
We may provide or make your personal information available to our employees and/ or third-party service providers in the following circumstances:
All users of our website that are below the age of 18 years must always obtain permission from their parent or guardian before they use our website or give us their personal information. We may investigate whether your parent or guardian has given you such permission. We may also investigate whether the contact details you have given us are correct and the details of a person who is your parent or guardian. If you are aware that you do not have the required permission of your parent or guardian or if we are not able to verify such permission or if a parent or guardian confirms that you do not have their permission, you are strictly prohibited from using our website.
It is important to know your rights, particularly those in terms of POPI. You have the right inter alia to:
You have the right to request us not to contact you for purposes of direct marketing by any form of electronic communication by “opting-out” of any direct marketing communications we may send to you.
We may transfer certain personal information outside the geographic borders of South Africa to service providers for purposes set out above, including for data storage and backup purposes to ensure the integrity of our systems.
When we transfer your personal information outside of the geographic borders of South Africa, we will ensure that we do so per the requirements for lawful transfer outside of South Africa as set out in POPI.
By accessing and using our website, you consent to us transferring your personal information outside of South Africa as set out in POPI.
If you are unhappy with how we address your questions and complaints, you also have the right to refer a complaint to the
Information Regulator at:
4th Floor, JD House, 27 Stiemens Street, Braamfontein, Johannesburg, 2001 P.O Box 31533, Braamfontein, Johannesburg, 2017
Complaints email: complaints.IR@justice.gov.za General enquiries email: email@example.com