Privacy Policy

Last Updated: September 9, 2026
 

1. INTRODUCTION

Iron Drive Components (“we,” “our,” or “us”) is committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website at https://irondrivecomponents.co.za/ (the “Site”) and purchase our products.
 
By using our Site and services, you consent to the data practices described in this policy. If you do not agree with the terms of this Privacy Policy, please do not access the Site or provide us with your personal information.
 
This policy complies with applicable South African legislation, including but not limited to:
  • The Protection of Personal Information Act 4 of 2013 (POPIA)
  • The Consumer Protection Act 68 of 2008
  • The Electronic Communications and Transactions Act 25 of 2002
 

2. INFORMATION WE COLLECT

2.1 Personal Information

We may collect the following types of personal information:
 
Information You Provide Directly:
  • Name and surname
  • Email address
  • Physical/delivery address
  • Telephone/mobile number
  • Payment information (credit card details, bank account information)
  • Account credentials (username and password)
  • Order history and preferences
  • Product requests and inquiries
  • Communication records with our customer service team
 
Iron Drive Membership Information:
  • Membership registration details
  • Purchase history and loyalty points
  • Preferences and interests
 
Technical Information Automatically Collected:
  • IP address
  • Browser type and version
  • Device information (type, operating system)
  • Pages visited and time spent on Site
  • Referring URLs and exit pages
  • Clickstream data
  • Cookies and similar tracking technologies
 

2.2 Sensitive Personal Information

We generally do not collect sensitive personal information as defined by POPIA. If we inadvertently receive such information, we will handle it with extra care and in accordance with legal requirements.
 

2.3 Children’s Privacy

Our Site is not intended for children under 18 years of age. We do not knowingly collect personal information from minors. If you believe a child has provided us with personal information, please contact us immediately.
 

3. HOW WE COLLECT INFORMATION

3.1 Direct Collection

We collect information when you:
  • Create an account or register for Iron Drive Membership
  • Place an order or make a purchase
  • Submit a product request form
  • Contact customer service
  • Subscribe to newsletters or marketing communications
  • Participate in surveys or promotions
  • Leave product reviews or comments
 

3.2 Automatic Collection

We automatically collect certain information through:
  • Cookies: Small text files stored on your device
  • Web beacons/pixel tags: Electronic images used to track user activity
  • Log files: Records of Site activity
  • Analytics tools: Third-party services that analyze Site usage
 

3.3 Third-Party Sources

We may receive information from:
  • Payment processors
  • Shipping and courier companies
  • Social media platforms (if you interact with us there)
  • Marketing partners (with your consent)
 

4. PURPOSES FOR PROCESSING PERSONAL INFORMATION

We process your personal information for the following lawful purposes:
 

4.1 Contractual Obligations

  • Processing and fulfilling orders
  • Managing your account and membership
  • Providing customer support
  • Processing payments and refunds
  • Arranging delivery and shipping
 

4.2 Legal Compliance

  • Complying with tax and accounting requirements
  • Meeting consumer protection obligations
  • Responding to legal requests and court orders
  • Preventing fraud and illegal activities
 

4.3 Legitimate Interests

  • Improving our products and services
  • Analyzing Site usage and performance
  • Protecting our business and users
  • Sending administrative communications
  • Conducting market research
 

4.4 Consent-Based Processing

  • Sending marketing communications and promotional offers
  • Sharing information with third-party partners (where applicable)
  • Using cookies for non-essential purposes
 
You may withdraw consent at any time by contacting us or using unsubscribe options in marketing emails.
 

5. LEGAL BASIS FOR PROCESSING (POPIA COMPLIANCE)

Under POPIA, we process personal information based on:
  • Consent: Where you have given explicit permission
  • Contract: To fulfill our contractual obligations to you
  • Legal obligation: To comply with statutory requirements
  • Legitimate interests: For our legitimate business purposes, balanced against your rights
 

6. HOW WE USE YOUR INFORMATION

We use your personal information to:
 

6.1 Service Delivery

  • Process and ship your orders
  • Manage your Iron Drive Membership account
  • Provide customer support and respond to inquiries
  • Send order confirmations and shipping updates
  • Process returns, exchanges, and refunds
 

6.2 Communication

  • Send transactional emails (order confirmations, shipping notifications)
  • Respond to your questions and comments
  • Notify you of important Site updates or policy changes
  • Request feedback and reviews
 

6.3 Marketing (With Consent)

  • Send promotional emails about new products, sales, and special offers
  • Share news about Iron Drive Components
  • Provide personalized product recommendations
  • Invite you to participate in surveys or contests
 

6.4 Site Improvement

  • Analyze browsing patterns and user behavior
  • Test and optimize Site functionality
  • Improve product offerings based on demand
  • Enhance user experience
 

6.5 Security and Fraud Prevention

  • Verify your identity
  • Detect and prevent fraudulent transactions
  • Protect against unauthorized access
  • Monitor for suspicious activity
 

7. DISCLOSURE OF PERSONAL INFORMATION

7.1 Third-Party Service Providers

We may share your information with trusted third parties who assist us in operating our business:
 
Payment Processors:
  • Secure payment gateway providers
  • Banks and financial institutions
 
Shipping and Logistics:
  • Courier companies (e.g., PostNet, The Courier Guy, DHL)
  • Warehouse and fulfillment partners
 
Technology Services:
  • Website hosting providers
  • Email service providers
  • Analytics and tracking services
  • IT support and maintenance providers
 
Professional Services:
  • Accountants and auditors
  • Legal advisors
  • Insurance providers
 
All third-party service providers are contractually obligated to:
  • Use your information only for specified purposes
  • Implement appropriate security measures
  • Comply with applicable data protection laws
  • Not sell or misuse your personal information
 

7.2 Legal Requirements

We may disclose your information if required to:
  • Comply with court orders, subpoenas, or legal processes
  • Respond to government or law enforcement requests
  • Protect our rights, property, or safety
  • Prevent or investigate fraud or illegal activities
  • Enforce our Terms of Service
 

7.3 Business Transfers

In the event of a merger, acquisition, reorganization, or sale of assets, your information may be transferred to the acquiring entity. We will notify you of any such change and provide choices regarding your information.
 

7.4 With Your Consent

We will not share your personal information with third parties for marketing purposes without your explicit consent.
 

8. INTERNATIONAL DATA TRANSFERS

Your personal information is primarily processed in South Africa. However:
 
  • Some service providers may operate servers outside South Africa
  • International transfers occur only to countries with adequate data protection standards
  • We implement safeguards such as standard contractual clauses
  • We ensure compliance with POPIA requirements for cross-border transfers
 

9. DATA SECURITY

9.1 Security Measures

We implement reasonable technical and organizational measures to protect your personal information:
 
Technical Safeguards:
  • SSL/TLS encryption for data transmission
  • Secure payment processing (PCI DSS compliant)
  • Firewalls and intrusion detection systems
  • Regular security updates and patches
  • Access controls and authentication mechanisms
 
Organizational Safeguards:
  • Employee training on data protection
  • Limited access to personal information on a need-to-know basis
  • Confidentiality agreements with staff and contractors
  • Regular security audits and assessments
  • Incident response procedures
 

9.2 Payment Security

  • We do not store complete credit card numbers
  • Payment processing is handled by PCI-compliant third-party providers
  • All financial transactions are encrypted
 

9.3 Limitations

While we strive to protect your information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security but commit to continuous improvement of our security practices.
 

10. DATA RETENTION

10.1 Retention Periods

We retain your personal information only for as long as necessary:
 
  • Order information: 5 years (for tax and accounting purposes)
  • Account information: Duration of account plus 2 years after last activity
  • Marketing consent: Until withdrawal of consent
  • Customer service records: 3 years from last interaction
  • Website analytics: Aggregated and anonymized data retained indefinitely
 

10.2 Deletion

When retention periods expire, we securely delete or anonymize your personal information in accordance with our data retention policy.
 

11. YOUR RIGHTS UNDER POPIA

As a data subject, you have the following rights:
 

11.1 Right to Access

You may request access to your personal information we hold, including:
  • What information we have
  • How it is being used
  • Who it has been shared with
 

11.2 Right to Correction

You may request correction of inaccurate, incomplete, or outdated personal information.
 

11.3 Right to Deletion

You may request deletion of your personal information, subject to:
  • Legal retention requirements
  • Ongoing contractual obligations
  • Legitimate business interests
 

11.4 Right to Object

You may object to processing of your personal information for:
  • Direct marketing purposes
  • Processing based on legitimate interests
 

11.5 Right to Restrict Processing

You may request restriction of processing in certain circumstances, such as when accuracy is disputed.
 

11.6 Right to Data Portability

You may request a copy of your personal information in a structured, commonly used format.
 

11.7 Right to Withdraw Consent

Where processing is based on consent, you may withdraw consent at any time without affecting prior lawful processing.
 

11.8 Right to Lodge a Complaint

You may complain to the Information Regulator if you believe your rights have been violated.
 

11.9 Exercising Your Rights

To exercise any of these rights:
  • Email us at: [Insert privacy email address]
  • Call us at: [Insert phone number]
  • Write to us at: [Insert physical address]
 
We will respond to your request within 30 days, as required by POPIA. We may require verification of your identity before processing your request.
 

12. COOKIES AND TRACKING TECHNOLOGIES

12.1 What Are Cookies?

Cookies are small text files placed on your device when you visit our Site. They help us remember your preferences and improve your experience.
 

12.2 Types of Cookies We Use

Essential Cookies:
  • Required for Site functionality
  • Enable shopping cart and checkout processes
  • Cannot be disabled
 
Performance/Analytics Cookies:
  • Track Site usage and performance
  • Help us understand user behavior
  • Usually anonymous
 
Functionality Cookies:
  • Remember your preferences (language, currency)
  • Enhance user experience
  • May be first or third-party
 
Marketing/Targeting Cookies:
  • Track browsing habits across sites
  • Enable personalized advertising
  • Require your consent
 

12.3 Managing Cookies

You can control cookies through:
  • Your browser settings (disable or delete cookies)
  • Our cookie consent banner (manage preferences)
  • Opt-out links in marketing emails
 
Note: Disabling essential cookies may affect Site functionality.
 

12.4 Third-Party Cookies

Some cookies are set by third parties, including:
  • Google Analytics (website analytics)
  • Payment processors
  • Social media platforms
  • Advertising networks
 
These parties have their own privacy policies governing cookie use.
 

13. MARKETING COMMUNICATIONS

13.1 Opt-In Consent

We only send marketing communications if you have:
  • Explicitly opted in during registration or checkout
  • Given separate consent via subscription forms
  • Not withdrawn consent
 

13.2 Opt-Out Options

You may unsubscribe from marketing communications by:
  • Clicking the “unsubscribe” link in any marketing email
  • Updating preferences in your account settings
  • Contacting us directly
 

13.3 Transactional Communications

Even if you opt out of marketing, you will continue to receive:
  • Order confirmations
  • Shipping notifications
  • Important account updates
  • Legal or regulatory notices
 

14. SOCIAL MEDIA AND PUBLIC FEATURES

14.1 Social Media Integration

Our Site may include social media features (sharing buttons, plugins). When you interact with these features:
  • The social media company may collect your information
  • Their privacy policies apply to such interactions
  • We do not control third-party social media practices
 

14.2 User-Generated Content

If you post reviews, comments, or other content:
  • This information becomes publicly visible
  • We may use this content for marketing purposes
  • You retain ownership but grant us a license to use it
  • Consider carefully before sharing personal information
 

15. LINKS TO THIRD-PARTY WEBSITES

Our Site may contain links to external websites. This Privacy Policy does not apply to:
  • Third-party websites linked from our Site
  • Partner or supplier websites
  • Social media platforms
 
We encourage you to review the privacy policies of any third-party sites you visit.
 

16. CHANGES TO THIS PRIVACY POLICY

16.1 Updates

We may update this Privacy Policy periodically to reflect:
  • Changes in our practices
  • New legal requirements
  • Technological developments
  • Business improvements
 

16.2 Notification

When we make material changes:
  • We will update the “Last Updated” date
  • We may notify you via email or Site notice
  • Continued use of our Site constitutes acceptance of changes
 

16.3 Review

We encourage you to review this Privacy Policy regularly to stay informed about how we protect your information.
 

17. DATA BREACH NOTIFICATION

In the event of a personal information breach that poses a risk of harm:
  • We will assess the severity and scope
  • We will notify affected individuals without undue delay
  • We will report to the Information Regulator as required by POPIA
  • We will take remedial action to mitigate harm
  • We will cooperate with authorities as needed
 

18. CONTACT INFORMATION

For questions, concerns, or requests regarding this Privacy Policy or your personal information:
 
Iron Drive Components
 
Information Regulator (South Africa):
 

19. COMPLAINTS PROCEDURE

If you have a complaint about our handling of your personal information:
 
  1. Contact us directly using the information above
  2. We will investigate and respond within 30 days
  3. If unsatisfied, you may escalate to the Information Regulator
  4. You retain the right to pursue legal remedies
 

20. SPECIAL NOTES

20.1 Do Not Track

Our Site currently does not respond to “Do Not Track” browser signals. However, you can manage tracking through cookie settings and browser preferences.
 
 
 
ACKNOWLEDGMENT
 
By using https://irondrivecomponents.co.za/, you acknowledge that you have read and understood this Privacy Policy and consent to our collection, use, and disclosure of your personal information as described herein.