Shipped across SA & abroad·Held by nature, guided by women
GaiaBerry

Privacy Policy

Last updated: 2026-05-04

GaiaBerry (“we”, “us”, “our”) is the responsible party for the personal information we process about you. This policy describes what we collect, why we collect it, how long we keep it, who we share it with, and the rights you have under the Protection of Personal Information Act, 2013 (POPIA).

Information Officer

Our designated Information Officer can be contacted at info@gaiaberry.co.za for any privacy-related request, including access, correction, deletion, complaints, or to lodge a complaint directly with the Information Regulator (South Africa) at inforegulator.org.za.

What we collect

  • Contact & delivery details — name, email address, telephone number, shipping and billing address.
  • Order data— items purchased, order value, payment confirmation token (we never see or store your full card details — see “Processors” below).
  • Health context — when you book a consultation or use the remedy finder, information you voluntarily share about your fertility, cycle, ailments or medication. This is special personal information under POPIA s.26 and we process it only with your explicit consent and only to provide the consultation you have requested.
  • Account & agent data — if you apply to be a GaiaBerry agent, the information on your application form.
  • Technical data — IP address, browser/device type, anonymised page analytics, and strictly-necessary cookies needed to operate the site (e.g. cart and agent-portal session cookies).

Why we process it (legal basis under POPIA s.11)

  • Performance of a contract — to take and fulfil your order, run consultations, and provide customer support.
  • Legal obligation — to keep tax and accounting records (Tax Administration Act).
  • Consent — to send marketing emails, process special information (health context), and place non-essential cookies. You can withdraw consent at any time.
  • Legitimate interest — to detect fraud, secure the site, and improve our products.

Who we share it with (operators / processors)

We share the minimum information necessary with vetted service providers, each of whom is contractually obliged under POPIA s.21 to protect it:

  • Shopify Inc. (Canada/USA) — e-commerce platform and payment processing.
  • Resend (USA) — transactional and marketing email delivery.
  • Vercel Inc. (USA) — website hosting and edge delivery.
  • The Courier Guy (South Africa) — domestic order fulfilment.
  • DHL Express — international order fulfilment.
  • Our agents — where you book a consultation, your name, contact details and stated concern are shared with the agent you select.

Cross-border transfers

Some of our processors are located outside South Africa. Where this is the case, we rely on POPIA s.72 — either because the destination country has a comparable data-protection law, the operator is bound by binding corporate rules or equivalent contractual safeguards, or the transfer is necessary to perform our contract with you.

How long we keep it

  • Order & tax records: 5 years (Tax Administration Act).
  • Consultation notes: 7 years from the date of the consultation.
  • Marketing list entries: until you unsubscribe, plus 12 months on a suppression list.
  • Booking requests held in transient server storage: deleted automatically after 30 days.
  • Agent applications (unsuccessful): 12 months.

Your rights

Under POPIA you have the right to:

  • Be told what personal information we hold about you.
  • Request a copy, correction or deletion of that information.
  • Object to processing on grounds of legitimate interest or for direct marketing.
  • Withdraw any consent you have given, at any time.
  • Lodge a complaint with the Information Regulator at complaints.IR@justice.gov.za.

To exercise any of these rights, email info@gaiaberry.co.za. We respond within 30 days.

Marketing & unsubscribing

We only send marketing emails to people who have opted in. Every email contains a one-click unsubscribe link, or you can unsubscribe at any time at gaiaberry.co.za/unsubscribe. We honour opt-outs within 5 business days.

Cookies

We use only strictly-necessary cookies — your shopping cart and your agent-portal session. We do not currently set advertising cookies. If we add analytics or marketing cookies in future, we will request your consent first via a cookie banner.

Children

Our products and services are intended for adults. We do not knowingly collect personal information from children under 18 without verifiable parental consent.

Changes to this policy

We will post any updates on this page with a revised “Last updated” date and, for material changes, notify subscribed users by email.