1. Introduction

This Privacy Policy explains how SterlingPro (Pty) Ltd ("we", "us", "our") collects, uses, discloses, and protects your personal information when you visit https://avomart.co.za ("Website") or purchase from us. Avomart is the online store operated by SterlingPro (Pty) Ltd.

This policy complies with the Protection of Personal Information Act 4 of 2013 ("POPIA") and applicable provisions of the Electronic Communications and Transactions Act 25 of 2002.

2. Responsible party and Information Officer

• Responsible party: SterlingPro (Pty) Ltd (registration number K2025946660)
• Address: 5 Princess Place, Parktown, Johannesburg, Gauteng, 2193
• Information Officer: Shelta Ndhlovu
• Information Officer email: shelta@avomart.co.za

3. What personal information we collect

We collect personal information that you provide directly to us and information collected automatically when you use the Website. This includes:

• Identity information: full name, gender (if voluntarily provided)
• Contact information: email address, telephone number, delivery address, billing address
• Account information: username, password (encrypted), purchase history, wishlist, preferences
• Transaction information: products ordered, prices paid, delivery details. We do not store full credit card numbers — payment data is processed and stored by our PCI-DSS compliant payment providers.
• Technical information: IP address, browser type and version, device identifiers, operating system, referring URLs
• Usage information: pages viewed, products searched, time spent on the Website, links clicked, cart activity
• Communications: messages you send us via email, contact forms, or customer support channels

4. How we collect personal information

• Directly from you (when you create an account, place an order, subscribe to our newsletter, or contact us)
• Automatically through cookies and similar technologies (see section 9 below)
• From our service providers (e.g. payment processors, courier services such as Bob Go, Shopify)

5. Purpose of processing (POPIA s.13)

We process your personal information for the following specific, explicit, and lawful purposes:

• To process and fulfil your orders (including payment, packing, delivery, and after-sales support)
• To create and manage your customer account
• To communicate with you about your orders, account, and customer service queries
• To send you marketing communications, where you have consented
• To improve our Website, products, and services
• To prevent fraud and ensure the security of our Website
• To comply with our legal and regulatory obligations

6. Lawful basis for processing

We process your personal information on one or more of the following bases under POPIA section 11:

• Consent — for marketing communications and optional cookies
• Contractual necessity — to fulfil your purchase orders
• Legal obligation — to comply with tax, accounting, and consumer-protection laws
• Legitimate interests — to improve our services, prevent fraud, and ensure Website security

7. Sharing of personal information

We share your personal information only with third parties who help us operate the Website and deliver your orders. These include:

• Shopify — our e-commerce platform and payment processor
• Bob Go and its courier partners (The Courier Guy, Pargo, RAM, etc.) — for delivery fulfilment
• Payment service providers — to process card and EFT payments
• Email and analytics providers — to send transactional emails and understand Website usage
• Professional advisers — accountants, auditors, lawyers, where required
• Law enforcement or regulators — where we are legally compelled to do so

We require all third parties to respect the security of your personal information and to treat it in accordance with POPIA.

8. Cross-border transfers (POPIA s.72)

Some of our service providers (including Shopify) are based outside South Africa. Where we transfer your personal information outside the Republic, we do so only where:

• the recipient is subject to a law, binding corporate rules, or binding agreement that provides an adequate level of protection comparable to POPIA; or
• you have consented to the transfer; or
• the transfer is necessary for the performance of our contract with you.

9. Cookies and similar technologies

We use cookies and similar tracking technologies to enable Website functionality (such as keeping you signed in and remembering your cart), to analyse usage, and — where you consent — for marketing.

You can control cookies through your browser settings. Disabling essential cookies may affect Website functionality (e.g. you may not be able to maintain a cart or sign in).

10. Retention

We retain your personal information only for as long as is necessary for the purposes for which it was collected, or as required by law:

• Order records: 5 years (as required by the Tax Administration Act)
• Account data: until you request deletion or your account becomes inactive for 3 years
• Marketing data: until you unsubscribe or withdraw consent
• Website analytics: typically 26 months

11. Your rights under POPIA

You have the following rights regarding your personal information:

• Access: request a copy of the personal information we hold about you
• Correction: ask us to correct inaccurate or incomplete information
• Deletion: ask us to delete your personal information, subject to our legal obligations to retain certain records
• Objection: object to processing on grounds relating to your particular situation
• Withdraw consent: where processing is based on consent, withdraw it at any time
• Complaint: lodge a complaint with the Information Regulator (see section 13)

To exercise any of these rights, email shelta@avomart.co.za. We will respond within a reasonable period and at most within 30 days, as required by POPIA.

12. Security

We take appropriate technical and organisational measures to protect your personal information against loss, unauthorised access, alteration, or disclosure, including HTTPS encryption, access controls, and use of reputable processors. No system is entirely secure, however, and we cannot guarantee absolute security.

In the event of a personal information breach that is likely to result in harm to you, we will notify you and the Information Regulator as required by POPIA section 22.

13. Information Regulator

If you believe we have not complied with POPIA, you may lodge a complaint with the Information Regulator:

• Website: https://inforegulator.org.za
• Email: complaints.IR@justice.gov.za
• Address: JD House, 27 Stiemens Street, Braamfontein, Johannesburg, 2001

14. Children

The Website is not directed at children under the age of 18. We do not knowingly collect personal information from children. If you become aware that a child has provided us with personal information, please contact us so we can delete it.

15. Changes to this Policy

We may update this Privacy Policy from time to time. The current version is always available at /policies/privacy-policy. Continued use of the Website after changes are published constitutes acceptance.

16. Contact

For any privacy-related questions or requests, contact our Information Officer at shelta@avomart.co.za.

Last updated: 20 May 2026.