Privacy Policy
This policy explains how DistriNode collects, uses, stores, shares and protects personal information when customers browse the store, create accounts, place orders, use alerts, earn rewards or contact us.
Plain-English summary
DistriNode is a South African online store. We process personal information so that customers can browse products, create accounts, place orders, pay, receive delivery, request support, manage returns, use Reward Rands and receive Price Alert or Stock Alert notifications.
We aim to process only the information reasonably needed for those purposes, protect it with appropriate safeguards, share it only where necessary or legally allowed, and give customers a practical way to ask about, correct or object to the processing of their personal information.
This policy should be read together with our Terms & Conditions, Returns & Refunds page, Rewards Program page, Price & Stock Alerts page and any other policy that applies to a specific feature.
Privacy at a glance
Account, order and usage data
Names, contact details, addresses, order records, account activity, alert settings, rewards history and website-use data.
To run the store
We need information to process orders, arrange delivery, respond to support requests and operate customer account features.
Only where needed
Payment providers, couriers, suppliers, hosting providers, support tools and lawful authorities where required.
Access, correction and objection
You may request access, correction, deletion where legally possible, objection to processing or marketing opt-out.
1. Who is responsible for your information
DistriNode is the responsible party for personal information processed through the DistriNode website, customer accounts, order process, support channels and store features unless a third-party provider acts as an independent responsible party under its own terms.
For privacy questions or personal-information requests, customers should contact DistriNode through the contact details or support channels available on the website. We may need to verify your identity before acting on privacy-related requests.
2. Legal framework
This policy is written for South African privacy law, including the Protection of Personal Information Act, 4 of 2013, commonly known as POPIA.
POPIA gives individuals rights regarding their personal information and requires organisations to process personal information lawfully, fairly, securely and for specific purposes.
3. Personal information we may collect
The exact information collected depends on how you use the website. Browsing without logging in uses less information than creating an account, placing an order or using customer tools.
Identity and contact details
Name, surname, company name, email address, phone number, billing address, delivery address and recipient details.
Account and order records
Login/account details, order history, invoices, returns, refunds, support messages, reward history and alert settings.
Technical and usage data
IP address, browser type, device data, cookie identifiers, session data, pages viewed, timestamps and website interaction data.
4. How we collect information
Directly from you
When you create an account, update your profile, place an order, submit a contact form, save an alert, request a return or contact support.
Automatically from the website
Through cookies, server logs, security tools, analytics, session tracking and normal ecommerce functionality.
From service providers
From payment providers, couriers, suppliers, fraud-prevention tools, support platforms or other service providers involved in the transaction.
5. Why we process personal information
| Purpose | Examples | Typical basis |
|---|---|---|
| PurposeAccount creation and management | ExamplesCreating profiles, logging in, showing order history, saving addresses and managing alerts. | Typical basisContract, consent or legitimate interest. |
| PurposeOrder processing | ExamplesConfirming stock, processing payment, issuing invoices, arranging dispatch and providing updates. | Typical basisContract and legitimate interest. |
| PurposeDelivery and collection | ExamplesSharing delivery details with couriers, supplier fulfilment partners or collection staff. | Typical basisContract and legitimate interest. |
| PurposeReturns, refunds and warranties | ExamplesHandling product assessments, repair records, replacement requests and refund processing. | Typical basisContract, legal obligation and legitimate interest. |
| PurposeCustomer tools | ExamplesPrice Alerts, Stock Alerts, Reward Rands, price history and account notifications. | Typical basisConsent, contract or legitimate interest. |
| PurposeSecurity and compliance | ExamplesFraud checks, abuse prevention, audit logs, legal recordkeeping, dispute handling and system protection. | Typical basisLegal obligation and legitimate interest. |
6. Customer account features
Registered customers may use account tools such as order history, address book, Reward Rands, Price Alerts, Stock Alerts and account notifications. These features require us to store and process account-level records linked to your profile.
Guest checkout, where available, may collect less account information but still requires enough personal information to process payment, fulfil orders, handle delivery and comply with legal obligations.
7. Payment information
Payment processing may be handled by third-party payment providers such as PayFast or other payment methods made available at checkout. DistriNode may receive payment status, transaction reference, fraud-screening information and limited payment confirmation data.
We do not need to store full card details on the store database where payment is processed securely by a third-party payment provider.
8. Who we may share personal information with
Operational providers
Hosting providers, ecommerce platform services, email services, payment providers, courier companies, suppliers and customer-support tools.
Product and fulfilment partners
Distributors, suppliers, manufacturers, warranty centres and logistics partners where needed to process an order, return or warranty claim.
Legal and safety recipients
Regulators, law-enforcement bodies, courts, professional advisers or other parties where required by law, dispute handling or fraud prevention.
We do not sell customer personal information as a standalone product. Where information is shared, it is shared for a store-related purpose, legal requirement, legitimate operational need or customer-requested transaction.
9. Cookies and similar technologies
DistriNode uses cookies and similar technologies to make the website work, keep customers logged in, remember cart/session information, improve security, measure website performance, support analytics and improve the shopping experience.
| Cookie type | Purpose | Can it be disabled? |
|---|---|---|
| Cookie typeEssential cookies | PurposeCart, checkout, login sessions, security and basic website functionality. | Can it be disabled?Disabling may break core store features. |
| Cookie typePreference cookies | PurposeRemembering selected settings, display preferences or repeat-visit convenience. | Can it be disabled?Usually, but the site may feel less convenient. |
| Cookie typeAnalytics cookies | PurposeUnderstanding page use, traffic patterns, errors and improvements. | Can it be disabled?Browser settings or available consent tools may limit these. |
| Cookie typeSecurity cookies | PurposeFraud reduction, bot protection, abuse prevention and website integrity. | Can it be disabled?Disabling may block access or reduce security. |
10. Direct marketing
We may send store-related messages such as order updates, delivery notices, account notices, reward reminders, alert emails, return updates and security messages because these are necessary for the services customers use.
Marketing messages, where used, should be based on consent or another lawful basis allowed under POPIA. You may unsubscribe or opt out using the method provided in the message or by contacting us.
Opting out of marketing does not stop necessary transactional, account, order, alert, reward, return or security messages.
11. Children's privacy
DistriNode is intended for customers who have legal capacity to transact or who are acting with appropriate consent and supervision.
We do not knowingly target children for account creation or online purchases without the involvement of a parent, guardian or authorised adult.
12. Security safeguards
We use reasonable technical and organisational measures to protect personal information against loss, unauthorised access, misuse, disclosure, alteration or destruction. These measures may include access controls, secure hosting, encrypted connections, security monitoring, account controls, backups and operational procedures.
No online system is perfectly secure. Customers should protect their own passwords, use secure devices, avoid sharing account credentials, keep email accounts secure and notify us if suspicious account activity is detected.
If a reportable security compromise occurs, DistriNode will take reasonable steps required by law, which may include notifying affected data subjects and/or the Information Regulator where applicable.
13. Retention of personal information
Order and tax records
Kept for as long as needed for accounting, tax, audit, warranty, dispute, return and legal recordkeeping purposes.
Account records
Kept while the account is active and for a reasonable period afterwards where required for support, fraud prevention, legal or operational purposes.
Marketing and alert data
Kept while needed for the selected feature or until you unsubscribe, disable the alert, withdraw consent or request deletion where legally possible.
We may retain some information after an account deletion or privacy request where retention is required or allowed for legal claims, accounting records, fraud prevention, warranty obligations, dispute resolution, order history, regulatory obligations or legitimate business records.
14. Cross-border processing
DistriNode may use suppliers, distributors, manufacturers, payment providers, hosting infrastructure, email providers, analytics tools or support systems that process information outside South Africa.
Where personal information is transferred outside South Africa, we aim to do so only where there is a lawful basis or appropriate safeguards, such as contractual protection, customer consent, performance of a contract, a recipient subject to adequate protection or another permitted ground under applicable law.
15. Your privacy rights
| Right | What it means | Important note |
|---|---|---|
| RightAccess | What it meansYou may ask whether we hold personal information about you and request access to that information. | Important noteWe may need to verify your identity and may apply lawful limitations. |
| RightCorrection | What it meansYou may ask us to correct inaccurate, outdated, incomplete or misleading personal information. | Important noteYou can also update certain account details directly from your account area. |
| RightDeletion or restriction | What it meansYou may ask for deletion, destruction or restriction where the law allows it. | Important noteSome records may need to be retained for legal, tax, order, fraud, warranty or dispute reasons. |
| RightObjection | What it meansYou may object to certain processing where POPIA gives you the right to object. | Important noteWe may continue processing where a lawful ground remains. |
| RightComplaint | What it meansYou may raise privacy concerns with DistriNode and may also approach the Information Regulator where applicable. | Important noteWe encourage customers to contact us first so we can investigate and respond. |
16. How to make a request
To make a privacy request, contact DistriNode through the website contact channels and clearly state the request you are making. Include enough information for us to identify the account, order or record involved.
We may ask for proof of identity or authority before releasing or changing personal information. This protects customers from unauthorised access to their information.
We will respond within a reasonable period and according to applicable law. Complex requests, archived records or third-party checks may take longer.
17. Information Regulator
The Information Regulator is South Africa's privacy and access-to-information authority. Customers may contact the Information Regulator if they believe their rights under POPIA have been infringed.
Current regulator details and complaint procedures should be checked on the Information Regulator's official website.
18. Automated decisions and profiling
DistriNode may use automated systems to support ecommerce operations, such as fraud checks, stock updates, price updates, alert triggering, reward calculations, search results, product filtering and account notifications.
These systems are intended to support store operations and customer features. If you believe an automated result has affected your account or order incorrectly, contact us so that it can be reviewed.
19. Related policy pages
| Page | Privacy relevance |
|---|---|
| PageTerms & Conditions | Privacy relevanceExplains website use, accounts, orders, payment, fulfilment and related responsibilities. |
| PageReturns & Refunds | Privacy relevanceReturn and warranty processes may require order, product, contact and assessment records. |
| PageRewards Program | Privacy relevanceReward Rands require account-level reward balances, history and qualifying order records. |
| PagePrice & Stock Alerts | Privacy relevanceAlerts require saved customer-product monitoring records and email notifications. |
| PagePrice History | Privacy relevancePrice history is product-price information, but usage analytics may show how customers interact with pages. |
20. Changes to this policy
DistriNode may update this Privacy Policy from time to time to reflect changes in the website, customer tools, service providers, legal requirements or business operations.
The version published on the website applies from the time it is published, unless a specific effective date is stated. Material changes may be highlighted where appropriate.
We use personal information to run a clearer, safer store.
DistriNode's privacy approach is to collect what is needed, use it for defined store purposes, protect it responsibly, and give customers practical ways to understand and manage their personal information.
Advertising and data sharing. We use third-party advertising services, including Google (Google Ads, Google Customer Match and related Google advertising products), to promote our products and reach relevant customers. For these services we may share certain customer information (such as hashed email addresses or phone numbers) with Google, which acts as a data processor on our behalf. This information is used only to match your data to Google accounts and to deliver, optimise and measure our advertising, in accordance with Google's policies, including Google's EU user consent policy. Where consent is required by applicable law (including the GDPR and POPIA), we obtain it before sharing your data. You can manage or opt out of personalised advertising at any time via your Google Account Ad Settings, or by contacting us.