Privacy Policy

Herbal Holland's online business, including this website, is owned by Vantax (Pty) Ltd, the responsible party for the personal information collected here: we decide why and how it's used.

Registered name: Vantax (Pty) Ltd

Our registration number and registered address aren't published yet. Until they are, you can reach us at hello@herbalholland.com.

Information Officer. Our Information Officer, Reshigan Govender, looks after privacy and access to information. You can reach them at hello@herbalholland.com.

The early-access sign-up. If you ask for first access to our online shop: your first name if you give it, your email address or mobile number (or both), your province if you choose one, and your consent to hear from us, with the date you gave it. You also confirm that you're 18 or older. If you reached the sign-up through a link with a campaign tag (such as ?src=instagram), we note the tag.

Franchise enquiries. This site no longer takes franchise enquiries. If you sent one before the form closed, we hold what it asked for: your name, email address and mobile number, the area and province where you'd like to open, your retail or business experience, the band of capital you could put in, whether you have a pharmacist partner, any message you added and, if you came through a link with a campaign tag (such as ?src=linkedin), the tag.

Your connection address. When you send the sign-up form, we use your connection (IP) address only to stop the same form being sent over and over, and we keep it only as a scrambled code, never the address itself.

Routine security logs. Like any website, our host keeps routine logs of requests to the site, such as the connection address, the browser used and the time, to keep the site secure and working.

Emails. If you email us, we receive your email address, your message and anything you attach.

Your answer to the 18+ question. It stays in your own browser's local storage: for a year if you confirm you're 18 or older, and only until you close the tab if you're younger. It's never sent to us.

What we don't do. This site sets no tracking or advertising cookies, runs no analytics and builds no profiles. Emailing us never signs you up for marketing: we send launch news only if you ask for first access and tick the box to hear from us.

To reply to you. You send us your details so that we can answer your enquiry or email, and you consent to us using them for that (POPIA section 11(1)(a)). If your enquiry goes further, we use them to take your franchise application forward with you, as steps you've asked for before any agreement (section 11(1)(b)).

To tell you when our online shop opens. If you ask for first access, we use your details to tell you when our online shop opens and about its launch, because you've consented to that (section 11(1)(a)). Those messages are electronic direct marketing, which POPIA allows only with your consent (section 69), so we send them only because you ticked the box, and every one of them lets you unsubscribe.

To keep the site secure. We use the scrambled connection code and the security logs because we have a legitimate interest in protecting the site, and the people who use it, from abuse (section 11(1)(f)).

It's your choice. Giving us your details is voluntary. Without them we can't reply to you or tell you about the launch, and nothing else happens.

We don't use your details for anything else.

Our head-office team. The people at Herbal Holland's head office who answer franchise enquiries and emails, and who send launch news to people who've asked for first access.

Operators who process it for us. Cloudflare, which hosts the site, stores enquiries and sign-ups and routes our email; our email provider; and the messaging service that sends launch messages, if you gave us a mobile number. Under POPIA (sections 20 and 21) they may process it only on our instructions, and must keep it secure.

Our franchise system. Once it's live, enquiries that go further move into the system our head office uses to manage franchise applications.

No one else. Early-access sign-ups are never shared beyond us and our operators. We never sell your details, and we disclose them to anyone else only when the law requires us to.

Enquiries and early-access sign-ups are stored in Cloudflare's European Union region. That's a transfer outside South Africa, which POPIA allows (section 72) because EU law gives personal information an adequate level of protection.

When you visit the site, your requests pass through Cloudflare's global network, so they may be handled in data centres in South Africa and elsewhere.

Emails are kept by our email provider. If it stores them outside South Africa, it's only where POPIA allows.

Enquiries. If an enquiry doesn't go ahead, we delete it within 12 months. Once an enquiry moves into our franchise system, we delete the website's copy within 30 days.

Early-access sign-ups. We keep them until our online shop opens, and for 12 months at most, then delete them. If you ask us to remove you sooner, we do.

The scrambled connection code. It's deleted together with the enquiry or sign-up it belongs to.

Emails. We keep emails only as long as we need them for the reason you wrote to us.

Security logs. Our host keeps them only as long as it needs to protect the site.

Everything between your browser and this site is encrypted (HTTPS), and the site tells browsers to connect to it only that way.

Only the people who need your details for their work can see them, and connection addresses are kept only as scrambled codes.

If your details are ever accessed by someone who shouldn't have them, we'll tell you and the Information Regulator as soon as reasonably possible, as POPIA requires (section 22).

See your details. Ask us whether we hold details about you, and for a copy. Our PAIA manual explains how to request records.

Correct or delete them. Ask us to correct details that are wrong, out of date or incomplete, or to delete them.

Object. Object to us using your details, for example to keep the site secure.

Withdraw your consent. You can withdraw your consent at any time. It doesn't affect what we did before, but we'll stop using your details for your enquiry or sign-up. To stop launch messages, use the unsubscribe link in any of them, or email us.

Complain. Complain to the Information Regulator at inforegulator.org.za. You don't have to come to us first, but we'd welcome the chance to put things right.

How to ask. Email hello@herbalholland.com and tell us what you'd like. We'll check it's you, then answer within 30 days.

Herbal Holland is for adults aged 18 and over. We don't knowingly collect information from anyone younger than 18, and if we find we have, we delete it.

When we change this policy, we'll publish the new version on this page, with a new version number and date at the top.

Questions about this policy or your details: email hello@herbalholland.com, for the attention of our Information Officer, Reshigan Govender.

The Information Regulator: inforegulator.org.za.