SPOTBOT PRIVACY POLICY
Last updated: March 2026

WELCOME TO THE SPOTBOT PRIVACY POLICY

This Privacy Policy applies to all users of our Website (spotbot.co.za), related mobile sites, software applications (including the SPOTBOT App), and any other platforms we operate (collectively, “our Platforms”), which are used to access, purchase, or interact with our products and services.

The purpose of this Privacy Policy is to explain how, why, and when SPOTBOT processes your Personal Information in compliance with the Protection of Personal Information Act 4 of 2013 (“POPIA”).

It is important that you read this Privacy Policy together with our Terms and Conditions and any other privacy notices or policies we may provide when we collect or use your Personal Information.

Please pay special attention to the clauses in this Privacy Policy, which:
– may limit the risk or liability of SPOTBOT or a third party;
– may create risk or liability for you;
– may compel you to indemnify SPOTBOT or a third party; or
– serve as an acknowledgement by you of a fact.

We respect your privacy and take the protection of Personal Information very seriously. We strive to deliver excellent service every time you interact with us, and to do this, we need to use some of your Personal Information. This Privacy Policy describes how we handle the Personal Information we collect about you and/or receive from you.

By using our Platforms, you agree to the processing of your Personal Information as set out in this Privacy Policy.

DEFINITIONS
In this Privacy Policy, the terms:
– “Personal Information” and “process/processing” bear the same meanings as set out in POPIA.
– “we”, “us” or “our” refers to SPOTBOT , registration number 2011/078684/23, with registered/physical address at 24 Parys Avenue, Potchefstroom, North West, South Africa

(the “Responsible Party”).
– “you” and “your” refers to every person that accesses or uses our Platforms (also referred to as a user or data subject).
– “registered user(s)” refers to anyone registered on our Platforms who has provided us with a unique email address, password, and other Personal Information to order goods and services.

RESPONSIBLE PARTY DETAILS
We are the Responsible Party for the Personal Information we process. Our contact details are:
– Email: info@spotbot.co.za
– Telephone: 086 0017 443
– Physical/Postal Address: 24 Parys Avenue, Potchefstroom, North West, South Africa

Our appointed Information Officer oversees compliance with POPIA. Contact details:
– Name/Title: Jan-Adriaan Cordier
– Email: info@spotbot.co.za (Attention: Information Officer)
– For queries, access requests, corrections, or complaints: Use the above email or phone.

IF YOU ARE BELOW THE AGE OF 18
If you are below the age of 18 years, you must always get permission from your parent or guardian before you use our Platforms or give us your Personal Information. We may verify this permission (e.g., by requesting your parent’s/guardian’s contact details to confirm). If we cannot verify permission or if a parent/guardian confirms you do not have it, you may not use our Platforms.

WHAT PERSONAL INFORMATION WE COLLECT AND PROCESS
We process Personal Information in a manner that is reasonable, adequate, relevant, non-excessive, and purpose-specific.

When you register or use our Platforms, we collect and process:
– Name and surname
– Email address
– Physical address
– Mobile phone number
– Online identifiers (e.g., IP address, device info)
– Date of birth
– Identification number (where required for verification or compliance)

**Providing certain Personal Information (e.g., name, email, physical address, mobile number) is mandatory** to register an account, place orders, deliver products, process payments, or access full services. **If you do not provide this mandatory information, we may not be able to register you, complete your purchase, deliver products, or provide support.**

Other information (e.g., date of birth for age verification) may be voluntary — you can choose not to provide it without affecting core services, but it may limit certain features.

You warrant that the information you provide is accurate, current, true, and correct, and does not impersonate or misrepresent any person or entity.

Information collected automatically when using our Platforms (whether registered or not):
– Log information (e.g., how, when, and for how long you use our Platforms; content viewed; search queries)
– Device/equipment information (e.g., device type, browser/OS, IP address)

**Where Personal Information is not collected directly from you** (e.g., from third-party payment gateways, analytics providers, or delivery partners), we will inform you of the source as required by POPIA.

You can update or correct your Personal Information at any time via your account profile on our Platforms.

WHY DO WE PROCESS YOUR PERSONAL INFORMATION?
We process your Personal Information to:
– Identify and verify you
– Create and manage your user account
– Enter into and perform contracts with you (e.g., process orders, deliver goods, handle returns)
– Provide requested products, services, information, billing, customer support, complaint resolution, and quality control
– Communicate changes to our Platforms, services, products, terms, or this Privacy Policy
– Send direct marketing (e.g., competitions, products/services that may interest you) — only if you have not opted out
– Obtain feedback to improve products/services
– Comply with legal/regulatory obligations (e.g., tax, financial laws)
– Conduct anonymised research/statistical purposes (data cannot identify you)

RETENTION AND RESTRICTION OF RECORDS
We retain your Personal Information only as long as necessary to:
– Provide our Platforms, products, or services
– Comply with legal requirements or our internal retention policies
– Uphold our contract with you
– Honour any retention you have consented to (subject to your right to object)

We delete or anonymise data when no longer needed for these purposes. Retention periods vary by purpose (e.g., order data kept for tax/compliance periods).

USER TRACKING AND COOKIES
We use cookies and similar technologies to enhance your experience, personalise content, provide relevant advertising, and analyse usage. Cookies do not contain Personal Information but associate your device with activity.

By using our Platforms, you consent to our use of cookies. You can manage preferences via browser settings, but this may limit functionality.

OPT OUT FROM DIRECT MARKETING
You may opt out of direct marketing (SMS, email, etc.) at any time by:
– Clicking the unsubscribe link in communications
– Contacting us at info@spotbot.co.za
– Updating preferences in your account

We will stop marketing promptly upon request.

WHO ELSE GETS TO PROCESS YOUR PERSONAL INFORMATION
We do not sell your Personal Information. Categories of recipients include:
– Our employees and SPOTBOT Group companies
– Third-party service providers (e.g., delivery couriers, payment processors, IT/cloud hosts, marketing/tech partners) — bound by contracts to use data only for our services and keep it confidential
– Law enforcement, regulators, or fraud agencies when required by law or to protect rights
– Potential buyers/advisors in mergers, sales, or reorganisations
– Suppliers/sellers for order fulfilment or compliance (e.g., licensing)

SENDING YOUR PERSONAL INFORMATION OUTSIDE SOUTH AFRICA
We may transfer Personal Information outside South Africa (e.g., to cloud/storage providers) for the purposes above. We ensure transfers comply with POPIA (Section 72) via adequate safeguards (e.g., binding contracts, adequacy decisions).

**By using our Platforms, you consent to such transfers as permitted by POPIA.**

SECURING YOUR PERSONAL INFORMATION
We implement reasonable technical and organisational measures to protect Personal Information from loss, damage, unauthorised access, or unlawful processing (e.g., encryption, access controls, secure storage, breach response policies, third-party agreements).

In case of a breach, we will notify you and the Information Regulator as required by POPIA.

If you disclose information to third parties (not us), we are not liable for their handling — review their policies.

KNOW YOUR RIGHTS
Subject to proof of identity and POPIA limits, you have the right to:
– Access, correct, amend, or request a description of your Personal Information (fees may apply for excessive requests)
– Request deletion/destruction (subject to legal retention)
– Withdraw consent (where processing is consent-based)
– Object to processing (e.g., direct marketing)
– Be notified of actions taken on your requests
– Lodge a complaint with the Information Regulator (details below)

You can exercise rights via info@spotbot.co.za (Attention: Information Officer). We will respond as required by law.

HOW TO LODGE A COMPLAINT WITH THE INFORMATION REGULATOR
If unsatisfied, contact:
Information Regulator (South Africa)
Website: https://inforegulator.org.za/
Email: inforeg@justice.gov.za / complaints.IR@justice.gov.za

This Privacy Policy replaces prior versions. We may update it — continued use means acceptance of the current version posted here.

For questions, contact us at info@spotbot.co.za.