Who we are

African Caribbean Aloe Products (Pty) Ltd (“ACAP”, “we”) is the responsible party for personal information collected through this website and in our business dealings.

Address: Iphofolo Game Farm, Vivo 0924, Limpopo, South Africa Information Officer: To confirm: name, email; registered with the Information Regulator?

This notice follows the Protection of Personal Information Act 4 of 2013 (POPIA). Where we handle personal data of people in the European Union or the United Kingdom, we also apply the General Data Protection Regulation (GDPR) and the UK GDPR.

What we collect

Contact details you send us: name, company, job title, email, phone, country, delivery address for samples.
Enquiry content: products, volumes and other information in your message or form.
Business records: quotes, orders, invoices and correspondence with customers and suppliers.
Technical data from your visit: IP address, browser type and pages viewed, through server logs To confirm: any analytics or cookies used; if none beyond strictly necessary, say so.

We do not ask for special personal information (for example medical data or religious beliefs) through this website.

Why we use it, and on what basis

Purpose	POPIA ground / GDPR legal basis
Answering your enquiry, sending samples and quotes	Steps before a contract at your request; legitimate interest in responding to business enquiries
Supplying products and invoicing	Performance of a contract
Meeting legal, tax, export and certification duties	Legal obligation
Keeping business contacts informed about our products	Legitimate interest for existing business contacts, with an easy opt-out; consent where the law requires it
Keeping the website safe	Legitimate interest

We do not sell personal information.

Service providers that work for us under contract: email and website hosting, courier and freight companies, accounting To confirm: named categories or providers.
Certification bodies and authorities, where needed for organic, Kosher, Halaal or export certificates.
Professional advisers and authorities where the law requires it.

International transfers

Our business is international, so information may be processed outside South Africa (for example by email or hosting providers, or when we send documents to buyers abroad). We transfer personal information only where POPIA section 72 allows it, and for EU/UK data with an appropriate safeguard such as standard contractual clauses Legal review needed.

How long we keep it

Enquiries that do not lead to business: To confirm: e.g. 2 years. Customer and supplier records: as long as tax and company law require To confirm: e.g. 5 years after the last transaction.

Security

We use reasonable technical and organisational measures to protect personal information against loss, misuse and unauthorised access. If a security compromise affects your information, we will notify you and the regulator as the law requires.

Your rights

You may ask us to:

confirm whether we hold your personal information and give you access to it;
correct or delete it;
stop or restrict processing, or object to processing for direct marketing at any time;
(EU/UK) receive your data in a portable format and withdraw consent where processing is based on consent.

Send requests to To confirm: privacy contact email. We may need to verify your identity.

You may also complain to a regulator:

South Africa: Information Regulator, https://inforegulator.org.za
EU: the data protection authority in your country
UK: Information Commissioner’s Office, https://ico.org.uk

Cookies

To confirm: describe cookies once the analytics setup is final. If only strictly necessary cookies are used, no consent banner is needed under most rules; if analytics cookies are used, EU visitors must opt in first.

Changes

We may update this notice. The date at the top shows the latest version.

Privacy notice