Stettyn Family Vineyards – Privacy Policy (POPIA)

This Privacy Policy explains how Stettyn Family Vineyards (“we”, “us”) processes personal information when you visit our website, use our STETTGO mobile app and purchase our products online. We are a “responsible party” under the Protection of Personal Information Act, 2013 (“POPIA”).

1. Information Officer & Contact

Our Information Officer is responsible for POPIA compliance and may be contacted via the details provided on our website. The Information Officer will be registered with the Information Regulator via its e-services portal.

2. What We Collect

We may collect the following categories of personal information:

Identity and contact information (name, email, mobile number, address)
Date of birth / age-verification data (and, where required by law, proof of age on delivery)
Order and delivery details; purchase history
Payment data (tokenised by our payment provider; we do not store full card numbers)
Account credentials (if you create an account)
Marketing preferences and communications
Wine preferences you choose to share, and wines you save as favourites
Technical data (device identifiers, IP address, cookies/analytics), and, in the app, a notification token for your device

3. Our Mobile App (STETTGO)

Signing in: you can sign in with a one-time code sent to your email, or with Sign in with Google or Sign in with Apple. If you use Google or Apple, we receive your name, email address and a unique account identifier from them. We never receive your Google or Apple password.
Age check: to create an account you must confirm your date of birth. Only people aged 18 or older may use the app.
Payments: payments are made on our payment provider’s secure page. The app never receives or stores your card details.
Notifications: if you allow notifications, we use a device token (through Google Firebase Cloud Messaging) to send you order updates and reward notices. You can switch notifications off at any time in your phone’s settings.
On your device: the app stores your cart and favourites on your phone. They are removed when you log out or delete your account.
No advertising tracking: the app does not show ads and does not track you across other companies’ apps or websites.

4. Why We Process Personal Information (POPIA s11)

We process your information in order to:
a) Perform a contract with you (accept, fulfil and deliver orders).
b) Comply with legal obligations (e.g., liquor and tax laws; verification of age and prevention of sales to minors).
c) Pursue our legitimate interests (running and improving our e-commerce store and app, fraud prevention, network security).
d) With your consent (e.g., electronic direct marketing and app notifications).

You may withdraw consent at any time.

5. Direct Marketing (POPIA s69)

We only send electronic direct marketing with your prior consent or where permitted for existing customers. Every message includes a free and simple opt-out. We honour all opt-out requests promptly. In the app, you can change your email and WhatsApp preferences at any time under Profile → Preferences.

6. Cookies & Analytics

We use cookies and similar technologies for site functionality, analytics and, where consented, marketing. You can manage cookies via your browser or our cookie banner.

7. Sharing with Operators (Processors)

We share data with trusted service providers (operators) who process it on our instructions, such as:

Payment gateways
Couriers and logistics providers
IT/hosting services, including the provider that hosts and operates our mobile app
Google (Sign in with Google, Firebase Cloud Messaging for notifications) and Apple (Sign in with Apple)
Age-verification tools
Customer support tools

We require all operators to protect your personal information in written agreements.

8. Cross-Border Transfers (POPIA s72)

If we transfer personal information outside South Africa (for example, to cloud hosting providers, or to Google and Apple when you use their sign-in or notification services), we will ensure an adequate level of protection through appropriate agreements or safeguards permitted by POPIA, or we will obtain your consent where required.

9. Security Safeguards & Breach Notification (POPIA s19 & s22)

We implement appropriate technical and organisational measures to protect personal information. In the event of a security compromise that may affect you, we will notify you and the Information Regulator where required by law.

10. Data Retention

We retain personal information only as long as necessary for the purposes listed above and to comply with legal, tax, and accounting requirements. Order records may be kept for the statutory retention periods.

If you delete your app account, we delete your app login, sign-in links (Google / Apple), app preferences, favourites and notification tokens. We keep your orders and the related customer details (name, email, phone, address and the date of birth you declared) for tax, accounting and liquor-licence purposes, including as proof that age was confirmed for alcohol sales.

11. Your Rights

You may request:

Access to, correction or deletion of your personal information.
To object to processing.
To withdraw consent.
To lodge a complaint with the Information Regulator.

Deleting your app account: in the STETTGO app go to Profile → Delete my account, or follow the steps at stettyncellar.co.za/delete-account.

We will respond to verified requests within the timelines required by POPIA.

12. Children

We do not knowingly sell alcohol to, or collect personal information from, persons under 18 years of age. The app requires users to confirm they are 18 or older before an account is created.

13. Updates

We may amend this policy from time to time. The latest version will always be available on our website with the effective date.

Effective Date: 10 October 2026

CONTACT DETAILS
Stettyn Family Vineyards
R43 between Villiersdorp & Worcester
Worcester District, Western Cape, South Africa
📧 orders@stettynwines.co.za
📞 023 340 4220