Privacy Policy

Effective date: June 2026

Who we are

The HeatBox operates at theheatbox.co.za. We are a South African e-commerce business registered and operating under South African law.

Information we collect

When you place an order or contact us, we collect:

  • Your name and email address
  • Your delivery address and contact number
  • Payment reference information (we do not store card details — all card payments are processed by Yoco, a registered South African payment service provider)
  • Browsing behaviour on our website (via cookies — see below)

How we use your information

We use your information to:

  • Process and fulfil your order
  • Send you order confirmation and tracking updates
  • Respond to queries and support requests
  • Improve our website and product offering

We do not sell, rent, or share your personal information with third parties, except as required to fulfil your order (e.g. sharing your delivery address with Aramex).

Your rights under POPIA

Under the Protection of Personal Information Act (POPIA), you have the right to:

  • Know what personal information we hold about you
  • Request correction or deletion of your information
  • Object to us processing your information
  • Lodge a complaint with the Information Regulator of South Africa

To exercise any of these rights, email us at theheatboxza@gmail.com.

Cookies

Our website uses cookies to improve your browsing experience and to track basic analytics. By continuing to use our website, you consent to the use of cookies. You can disable cookies in your browser settings at any time.

Marketing communications

If you have opted in to receive marketing emails, you can unsubscribe at any time using the link at the bottom of any email we send.

Data security

We take reasonable steps to protect your personal information. All payment processing is handled by Yoco, which is PCI-DSS compliant.

Contact for privacy matters

For any privacy-related queries, email theheatboxza@gmail.com.

Information Regulator

If you believe your rights have been violated, you may contact the Information Regulator of South Africa:
Website: inforegulator.org.za
Email: inforeg@justice.gov.za