Privacy Policy

Effective date: 27 September 2026

This Privacy Policy explains how ACIOS ("we", "us", "our") collects, uses, shares and protects your personal information when you visit acios.store or buy from us. We process personal information in line with the Protection of Personal Information Act 4 of 2013 ("POPIA") and, where they apply to you, other data-protection laws such as the EU/UK GDPR.

1. Responsible party and Information Officer

The responsible party is ACIOS, a private company registered in South Africa (registration number 2025/314622/07), 3239 Masetloa Street, Benoni, Gauteng, 1501, South Africa. Our Information Officer is Tsepo Kuali, who can be contacted about anything in this policy at support@acios.store or 075 313 1103.

2. What we collect

Contact and order details: name, email, phone number, billing and delivery addresses, the products you order, and your order history.
Payment details: handled by our payment providers. We receive confirmation of payment and limited card details (such as card type and last four digits), not your full card number.
Account details: if you create an account, your login details and preferences.
Communications: messages you send us, reviews, and your marketing preferences.
Device and usage information: IP address, browser and device type, pages viewed, and how you arrived at the Site, collected through cookies and similar technologies.

We collect this directly from you, automatically when you use the Site, and from our service providers (for example delivery updates from couriers or fraud-screening results from payment providers).

3. Why we use it (and our lawful basis)

To process and deliver your orders, take payment, handle returns and provide customer support: to perform our contract with you.
To prevent fraud and keep the Site secure, including verifying orders: our legitimate interests and legal obligations.
To keep records required by tax and consumer-protection law: legal obligation.
To improve the Site and understand how it is used: our legitimate interests.
To send you marketing about our products: with your consent or, if you are an existing customer, about similar products, with a simple opt-out in every message, as permitted by section 69 of POPIA.

We do not use your information to make decisions that have legal or similarly significant effects on you based solely on automated processing. Our payment providers use automated tools to screen transactions for fraud.

4. Who we share it with

We share personal information only as needed with:

Shopify, which hosts our store and checkout (Shopify Privacy Policy);
payment providers, to process payments and prevent fraud;
couriers and fulfilment partners, to deliver your orders;
analytics and advertising partners (such as Google and Meta), subject to your cookie choices;
professional advisers and authorities, where required by law or to protect our legal rights.

These operators must keep your information secure and use it only for the services they provide to us. We do not sell your personal information.

5. Transfers outside South Africa

Some of our service providers (including Shopify) store or process information outside South Africa, for example in Canada, the United States and the European Union. We transfer information only where the recipient is subject to laws, binding agreements or corporate rules that provide protection substantially similar to POPIA, or where the transfer is necessary to perform our contract with you, as permitted by section 72 of POPIA.

6. Cookies

We use cookies that are necessary for the Site and checkout to work, and, with your consent where required, analytics and advertising cookies. You can manage your choices through our cookie banner (where shown) and your browser settings. Blocking some cookies may affect how the Site works.

7. How long we keep it

We keep order and transaction records for at least 5 years to meet tax and accounting requirements. Other information is kept only as long as needed for the purposes above, after which it is deleted or de-identified. You may withdraw from marketing at any time.

8. How we protect it

We use reasonable technical and organisational measures to protect your information, including encrypted (HTTPS) connections and secure, PCI-compliant payment processing. No system is completely secure; if a security compromise affects your information, we will notify you and the Information Regulator as required by section 22 of POPIA.

9. Your rights

Subject to the law, you may:

ask whether we hold your personal information and request a copy of it;
ask us to correct, update or delete it;
object to processing based on our legitimate interests, and to direct marketing at any time;
withdraw consent where we rely on it;
if the GDPR applies to you, request data portability or restriction of processing.

Email support@acios.store to exercise these rights. We may need to verify your identity, and we will respond within a reasonable time, and within 30 days where the law requires.

10. Children

The Site is not intended for children under 18. We do not knowingly collect personal information from children without the consent of a parent or guardian. If you believe a child has given us information, please contact us and we will delete it.

11. Complaints

Please contact us first so we can try to resolve your concern. You also have the right to lodge a complaint with the Information Regulator of South Africa (inforegulator.org.za), or with your local data-protection authority if you live outside South Africa.

12. Changes

We may update this policy from time to time. The latest version, with its effective date, is always on this page.

13. Contact

ACIOS (company registration number 2025/314622/07), owned by Tsepo Kuali
3239 Masetloa Street, Benoni, Gauteng, 1501, South Africa
Phone: 075 313 1103
Email: support@acios.store