Privacy Policy

Our Information Officer is The owner ([to be confirmed]). Contact them at jccampworld@gmail.com for any privacy question or request.

• Contact and delivery details: name, email address, phone number, and delivery address or chosen Pudo locker.
• Account details: email address and a one-way hash of your password, if you create an account.
• Order details: items, amounts, payment status, and delivery tracking.
• Messages: what you send us through the contact form or by email.
• Session data: a random identifier that links your browser to its cart (see Cookies below).

We do not collect or store card or bank details. PayFast collects them on its own secure pages.

• To process, deliver, and support your order, which is needed to perform our contract with you.
• To keep tax and accounting records, which the law requires.
• To answer your questions and handle returns and warranty claims.
• To keep the site secure and prevent fraud, which is in our legitimate interest.

We send marketing messages only if you have asked to receive them, and every message lets you unsubscribe. We do not sell personal information.

• PayFast, to take your payment.
• The Courier Guy and Pudo, to deliver your order: your name, phone number, and delivery address or locker.
• Our email and hosting providers, who store and send data on our behalf under confidentiality obligations.
• Authorities, only when the law requires it.

Some of these providers, such as our email provider, may store data on servers outside South Africa. We use only providers bound by data-protection laws or agreements that give a level of protection comparable to POPIA (section 72).

• Orders and invoices: 5 years after the order, as the Tax Administration Act requires.
• Account details: until you close your account.
• Contact-form messages: up to 12 months after we resolve your question.
• Session cookie: 7 days.

We use one strictly necessary HttpOnly cookie named campworld_session to link your browser to its cart and order tracking session. It contains a random identifier, expires after 7 days, and is not used for analytics, advertising, personalisation, or cross-site tracking. Staff authentication uses a separate browser local-storage token and is not used for customer carts.

The site uses HTTPS encryption. Passwords are stored only as one-way hashes. Access to order data is limited to staff who need it, and staff accounts are password-protected.

• Ask what personal information we hold about you, and get a copy.
• Ask us to correct or delete it, unless the law requires us to keep it.
• Object to us using it, and withdraw consent to marketing at any time.
• Complain to the Information Regulator at inforegulator.org.za.

Email jccampworld@gmail.com to use these rights. We reply within 30 days.

We update this notice when our practices change and show the date at the top. See also our Terms and Conditions.