Private Policy

Effective Date: 23 January 2016
Last Updated: 24 July 2026

Introduction

Cirrus Healthcare (Pty) Ltd ("Cirrus Healthcare", "we", "our", or "us") is committed to protecting your privacy and ensuring that your personal information is collected, used and safeguarded responsibly.

This Privacy Policy explains how we collect, use, disclose and protect your personal information when you visit www.cirrus.shop, purchase our products, subscribe to our newsletter or interact with us.

We process all personal information in accordance with the Protection of Personal Information Act, 4 of 2013 ("POPIA"), as well as any other applicable South African laws.

By using our Website, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal information where required by POPIA.

1. Responsible Party

For purposes of POPIA, Cirrus Healthcare (Pty) Ltd is the Responsible Party responsible for determining why and how your personal information is processed.

Company Name: Cirrus Healthcare (Pty) Ltd

Website: www.cirrus.shop

Email: orders@chpsa.com

WhatsApp: +27 79 366 2553

2. Personal Information We Collect

We only collect personal information that is necessary to provide our products and services.

This may include:

  • Full name

  • Email address

  • Telephone number

  • Delivery address

  • Billing address

  • Order history

  • Marketing preferences

  • Communications you send to us

We do not collect or store your debit or credit card information.

3. How We Collect Your Information

We collect information when you:

  • Place an order

  • Subscribe to our newsletter

  • Contact us by email or WhatsApp

  • Complete forms on our Website

We also collect limited anonymous information through cookies and Google Analytics.

4. Purpose of Processing

In accordance with Section 13 of POPIA, we only process personal information for specific, explicitly defined and lawful purposes.

We use your personal information to:

  • Process and fulfil your orders

  • Deliver products to you

  • Communicate regarding your purchases

  • Respond to customer enquiries

  • Send promotional emails where you have given your consent

  • Improve our Website and customer experience

  • Comply with legal and regulatory obligations

  • Detect and prevent fraud

We will not process your personal information for purposes incompatible with those listed above.

5. Lawful Basis for Processing

We process your personal information where:

  • You have provided your consent;

  • Processing is necessary to perform a contract with you;

  • Processing is required to comply with a legal obligation; or

  • Processing is necessary for our legitimate business interests, provided these do not override your rights under POPIA.

6. Marketing Communications

If you subscribe to our newsletter, we may send you:

  • Promotions

  • Product launches

  • Exclusive offers

  • Health and wellness updates

  • Company news

You may unsubscribe at any time by clicking the unsubscribe link in any marketing email or by contacting us directly.

We will only send electronic marketing communications where permitted under POPIA and applicable electronic communications legislation.

7. Cookies and Analytics

Our Website uses cookies to improve your browsing experience.

Cookies help us:

  • Remember your preferences

  • Improve Website functionality

  • Analyse Website traffic

  • Measure Website performance

We use Google Analytics to understand how visitors use our Website.

Google Analytics may collect anonymous information including:

  • Browser type

  • Device information

  • Pages visited

  • Time spent on pages

  • General geographic location

  • Referring websites

This information is aggregated and is not intended to identify you personally.

8. Payments

Payments made on our Website are securely processed by Yoco.

Cirrus Healthcare never receives or stores your payment card details.

Yoco processes payment information in accordance with its own privacy and security policies.

9. Disclosure of Personal Information

We may share your personal information only where necessary to operate our business, including with:

  • Courier and logistics providers

  • Payment processors

  • Email marketing service providers

  • Website hosting providers

  • Professional advisers

  • Government authorities where required by law

We do not sell, rent or trade your personal information to third parties.

10. Security Measures

In accordance with Section 19 of POPIA, we take appropriate, reasonable technical and organisational measures to protect personal information against:

  • Loss

  • Unauthorised access

  • Unlawful processing

  • Accidental destruction

  • Alteration

  • Disclosure

Although we strive to protect your information, no internet transmission or electronic storage system can be guaranteed to be completely secure.

11. Retention of Information

We retain personal information only for as long as reasonably necessary to:

  • Complete transactions

  • Maintain customer records

  • Meet legal and tax obligations

  • Resolve disputes

  • Enforce our agreements

Once personal information is no longer required, it will be securely deleted, destroyed or anonymised in accordance with POPIA.

12. Your Rights Under POPIA

Subject to applicable law, you have the right to:

  • Request access to your personal information.

  • Request correction or updating of inaccurate or incomplete information.

  • Request deletion of personal information where retention is no longer necessary or legally required.

  • Withdraw consent where processing is based on consent.

  • Object to certain types of processing as permitted by POPIA.

  • Request information regarding the third parties with whom your personal information has been shared.

  • Lodge a complaint with the Information Regulator (South Africa).

To exercise any of these rights, please contact us using the details provided below.

13. Cross-Border Transfers

Where your personal information is processed or stored outside South Africa through trusted service providers, we will take reasonable steps to ensure that such processing complies with POPIA and that appropriate safeguards are in place.

14. Third-Party Websites

Our Website may contain links to external websites.

Cirrus Healthcare is not responsible for the privacy practices or content of third-party websites. We encourage you to review their privacy policies before providing personal information.

15. Children's Privacy

Our Website is not intended to knowingly collect personal information directly from children without the consent of a parent or legal guardian, as required by POPIA.

16. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in legislation, our business operations or our Website.

Any updates will be published on this page with a revised "Last Updated" date.

17. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your rights under POPIA, please contact us:

Cirrus Healthcare (Pty) Ltd

Website: www.cirrus.shop

Email: orders@chpsa.com

WhatsApp: +27 79 366 2553

If you believe that we have not processed your personal information in accordance with POPIA, you may lodge a complaint with the Information Regulator (South Africa) or seek any other remedy available under applicable law.