Privacy Policy

Responsible party and contact

Oritoke is the responsible party for customer information. Our address is 2 Leicester Road, Vincent, East London, 5217. Privacy requests may be sent to oritokeproducts@gmail.com or directed to Tanya on +27 82 407 7913.

Information we collect

• Contact and enquiry information, including your name, email address, telephone number and message.
• Launch-list information, including your name, email address, consent record and campaign attribution such as UTM parameters or a Facebook click identifier.
• Order information, including delivery or collection choice, delivery address, ordered products, amounts, payment status, fulfilment history and customer notes.
• Technical and security information required to operate, protect and measure the website, such as request timestamps, consent preferences and privacy-preserving analytics.
• Reviews, photographs or testimonials only when you choose to provide them and Oritoke has permission to publish them.

Why we use it

We process information to answer enquiries; manage launch notifications; validate stock, orders and payments; arrange collection or delivery; provide customer support; prevent fraud and abuse; comply with accounting, tax and consumer-law duties; and improve the website. Marketing email is sent only where you requested it or where another lawful basis permits it. Oritoke does not sell personal information.

Service providers

Only the minimum information needed for a service is shared with providers acting for Oritoke. These may include Devv Studio and uStock for website, subscriber and catalogue operations; Supabase for secure data hosting; Vercel for website hosting and analytics; Resend for transactional email; Paystack for payment processing; and Fastway Couriers for delivery quoting and fulfilment. Each provider processes information under its own legal and security obligations.

Payments

Payment-card details are entered on Paystack's secure payment service and are not stored by Oritoke's website. Oritoke retains the resulting transaction reference, amount and status needed for the order, reconciliation, refunds and legal records.

Marketing, Meta and cookies

Launch and product marketing is currently email-based. Oritoke does not upload customer contact lists to Meta for advertising audiences. Advertising technology such as Meta Pixel remains disabled unless Oritoke approves it and you consent through the website's cookie controls. Essential storage may still be used for security, cart and consent preferences.

Retention

Launch-list information is retained until the launch campaign is completed, then removed or anonymised unless you separately consent to ongoing product marketing. Order, payment, tax and delivery records are ordinarily retained for at least five years, and longer where required for an audit, dispute, legal claim or statutory obligation. Enquiries and operational records are kept only as long as reasonably necessary for their purpose.

Security and cross-border processing

Oritoke and its technology providers use reasonable technical and organisational safeguards, including access controls and server-side credentials. Some providers may process information outside South Africa; where this occurs, Oritoke uses providers expected to protect information to an appropriate standard. No internet service can promise absolute security.

Your rights

You may ask what information Oritoke holds about you, request correction or deletion, object to processing, withdraw marketing consent, or unsubscribe from marketing. Unsubscribing does not automatically erase transaction records Oritoke must retain. Send requests to oritokeproducts@gmail.com. Identity may be verified before protected information is released or changed.

If a privacy concern is not resolved, you may contact the Information Regulator (South Africa) at POPIAComplaints@inforegulator.org.za or visit inforegulator.org.za.

Children

This shop is intended for adults. A parent or legal guardian should place an order or provide personal information for a minor.

Changes

Material changes will be reflected by updating the effective date. Where appropriate, affected subscribers or customers will also be notified.