Privacy Policy
Short version: we collect what we need to sell you hardware and deliver it. We do not sell your data, and we do not track you across the internet.
What we collect
| Information | Why we need it |
|---|---|
| Name, email, phone | To confirm your order and contact you about it |
| Delivery address | To deliver the goods, and to quote delivery accurately |
| Company name, VAT and registration number (business accounts only) | To issue a valid tax invoice and assess a business account |
| Order history | To support you, honour warranties, and meet our tax record-keeping duties |
| Verification codes | To confirm your email address is yours |
What we deliberately do not collect
- We never see or store your card or banking details. Payment is by EFT directly between your bank and ours. When card payment goes live it will be handled entirely by a PCI-compliant payment provider — the card details will not pass through our systems.
- We do not store your password. It is hashed, so nobody here — including us — can read it. That is also why staff cannot look it up for you and can only send you a reset.
- We do not use advertising or cross-site tracking cookies, and we do not share your details with advertisers.
How we count visitors
We keep a simple count of page views so we know what people are looking for. It is designed to avoid identifying you: your IP address and browser are combined with a secret that changes every day and are turned into an irreversible one-way hash. We cannot work backwards from it to you, and the same visitor on two different days looks like two different people. That is deliberate, and it is why this site has no cookie banner nagging you.
Who else sees your information
Only the parties who have to, and only what they need:
- The distributor supplying your item — your delivery address and contact number, so the parcel reaches you.
- The courier — the same delivery details.
- Our email provider — to send your order confirmation.
- SARS — invoice records, where the law requires it.
We do not sell, rent or trade your personal information. Ever.
How long we keep it
Invoices and order records are kept for 5 years, as required by South African tax law. Account details are kept while your account is open. Verification codes expire after 10 minutes and are deleted.
Your rights under POPIA
The Protection of Personal Information Act gives you the right to:
- ask what personal information we hold about you
- have it corrected if it is wrong — you can edit most of it yourself under My account
- ask us to delete it, where we are not legally required to keep it
- object to how we are using it
- complain to the Information Regulator if you are not satisfied
To exercise any of these, email shop@burikashop.co.za. We will respond within 30 days.
Keeping it safe
The site is served over HTTPS only. Session cookies are marked Secure and HttpOnly so they cannot be read by scripts. Customer records are stored with restricted permissions on a firewalled server, backed up daily, and access is limited to named staff accounts with individual logins and defined roles.
Cookies
We use one cookie, to keep you signed in and to remember your basket. It is not used for advertising. If you block it, the site will still work but you will not be able to stay signed in.