Privacy Policy

Al Shifa operates the website https://al-shifa.co.za. We are a South African-based online retailer of natural wellness and prophetic remedy products.

For any privacy-related enquiries, contact our Information Officer at: info@al-shifa.co.za

We collect personal information that you provide to us directly, including:

• Account information: name, email address, password (hashed)
• Order information: billing address, shipping address, phone number
• Payment information: processed securely by PayFast — we do not store card details
• Communications: messages you send us via email or contact forms

We also collect limited technical data automatically:

• IP address, browser type, device information
• Pages visited and time spent on the site (via cookies)

We use your personal information to:

• Process and fulfil your orders
• Send order confirmations, shipping updates, and invoices
• Manage your customer account
• Respond to enquiries and provide customer support
• Improve our website and services
• Comply with legal obligations

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

Under POPIA, we process your personal information on the following lawful grounds:

• Contract performance: to fulfil orders you have placed
• Legal obligation: to comply with South African law
• Legitimate interest: to operate and improve our business
• Consent: where you have given explicit consent (e.g. marketing emails)

We share your information only where necessary:

• Courier partners (e.g. Shiplogic, The Courier Guy) — to deliver your orders
• PayFast — to process payments securely
• Firebase / Google — for secure cloud storage and authentication
• Legal authorities — if required by law or court order

All third-party processors are contractually obliged to protect your data and process it only for the purposes we specify.

We use cookies and similar technologies to:

• Keep you signed in across sessions
• Remember your shopping cart
• Understand how visitors use our website

You can disable cookies in your browser settings. Note that some site features (such as the shopping cart) may not function correctly without cookies.

We retain your personal information for as long as necessary to fulfil the purposes described in this policy, or as required by law. Specifically:

• Order records: 5 years (for tax and accounting purposes)
• Account data: until you request deletion
• Marketing consents: until you unsubscribe

You have the right to:

• Access the personal information we hold about you
• Correct inaccurate or outdated information
• Delete your personal information (subject to legal retention requirements)
• Object to processing for direct marketing purposes
• Complain to the Information Regulator of South Africa

To exercise any of these rights, email us at info@al-shifa.co.za.

The Information Regulator can be contacted at: inforegulator.org.za

We take reasonable technical and organisational measures to protect your personal information against unauthorised access, loss, or misuse. These include:

• HTTPS encryption for all data in transit
• Secure, authenticated access to our systems
• Limited staff access on a need-to-know basis

No method of transmission over the internet is 100% secure. If you suspect a breach, please notify us immediately.

Our website is not directed at children under the age of 18. We do not knowingly collect personal information from minors. If you believe a child has provided us with personal information, please contact us so we can remove it.

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date at the top of this page. We encourage you to review this policy periodically.

For any questions, concerns, or requests relating to this Privacy Policy: