Privacy Policy

• Account & identity: name, email, password hash, delivery address.
• Order: items purchased, currency, order reference, delivery address. We do not process payments on this website and never collect, store or transmit card numbers, CVV, PIN, banking details, digital-wallet tokens or any other payment instrument data.
• Support: messages you send us, WhatsApp order references.
• Technical: IP, device, browser, referrer, cookie identifiers (see Cookie Policy).

We process personal data only to (a) fulfil orders, courier dispatch and customs declarations; (b) provide client support; (c) operate and secure the site; (d) comply with tax and consumer-protection law. Legal bases: contract performance, legitimate interest, legal obligation, and, for marketing, explicit consent.

Under POPIA you have the right to access, correct, delete and object to processing of your personal information, to lodge a complaint with the Information Regulator (South Africa), and to withdraw consent for direct marketing at any time. Requests: info@alpineibexapparel.co.za.

If you are located in the EU or UK, you have the right to access, rectify, erase, restrict or port your data, and to object to processing. The lawful basis for each activity is stated in Section 2. You may complain to your local supervisory authority.

California residents have the right to know what personal information we collect, to request deletion, and to opt out of any "sale" or "sharing" of personal information. Alpine Ibex Apparel™ does not sell personal information.

Order records are retained for the period required by South African tax and consumer-protection law. Account data is retained while your account is active; you may request deletion at any time subject to legal retention.

We share limited data with: The Courier Guy and DHL Express (delivery), WhatsApp (Meta Platforms Ireland Limited, order and support conversations), Supabase (application backend and authentication), and Google Analytics (aggregated site analytics, only with consent).

For domestic deliveries we transmit only the recipient name, delivery address, contact number and order reference to The Courier Guy, solely to create the waybill, deliver the parcel and provide tracking. No payment data is shared with the courier.

Orders are finalised in a WhatsApp conversation. When you submit the checkout form we prepare a message on your device containing only your order reference, item names, quantities, order total and delivery city and country. Your street address, postal code, phone number and email address are never placed in that message, and no payment data exists to share. You start the conversation yourself and can edit or delete the message before sending it.

Message content is processed by WhatsApp (Meta Platforms Ireland Limited) under its own terms and privacy policy, and messages may be stored on infrastructure outside South Africa and the EEA. That transfer is made under section 72 of POPIA (comparable protection and your consent) and, for EU/UK data subjects, the European Commission’s Standard Contractual Clauses. WhatsApp chats are end-to-end encrypted in transit between devices.

Using WhatsApp is optional. If you would rather not use it, complete your order by email at info@alpineibexapparel.co.za quoting your order reference. Order records are retained as set out in section 6; chat history is kept only as long as needed to service and prove your order.

Data is transmitted over HTTPS. Authentication is handled by Supabase Auth with hashed credentials. Access to production data is restricted to authorised personnel.

Information Officer, Alpine Ibex Apparel™. Randburg, Johannesburg, South Africa. info@alpineibexapparel.co.za.