Privacy policy
Last updated: 15 March 2026
1. Who is responsible for your information
Red Health Innovations (Pty) Ltd, Registration No. 2025/231476/07, of 3 McDonald Road, Salt Rock, KwaZulu-Natal, 4417, South Africa, is the "responsible party" for personal information collected through http://www.redhealthinnovations.com, as defined in the Protection of Personal Information Act 4 of 2013 ("POPIA").
Information Officer: Chris Prinsloo, info@redhealthinnovations.com,
2. What information we collect
1. Who is responsible for your information
Red Health Innovations (Pty) Ltd, Registration No. 2025/231476/07, of 3 McDonald Road, Salt Rock, KwaZulu-Natal, 4417, South Africa, is the "responsible party" for personal information collected through http://www.redhealthinnovations.com, as defined in the Protection of Personal Information Act 4 of 2013 ("POPIA").
Information Officer: Chris Prinsloo, info@redhealthinnovations.com,
2. What information we collect
- Identity and contact details: name, email address, phone number, delivery and billing address.
- Order details: products purchased, order history, delivery tracking.
- Payment information: processed by Paystack, Shopify Payments or PayPal. We receive confirmation of payment and the last four digits of your card only; we never see or store your full card number.
- Account information if you create an account: login details and saved addresses.
- Communications: emails, contact-form messages, chat messages and reviews you send us.
- Technical data: IP address, browser type, device, pages visited and referring site, collected through cookies and similar technologies (see section 7).
We do not intentionally collect special personal information (such as health information). If you choose to share health details with us when asking for product guidance, we use them only to answer your query and do not store them beyond that.
3. Why we process it and on what basis
- To process and deliver your order, take payment and provide customer support (performance of a contract).
- To comply with legal obligations, including tax, consumer protection and record-keeping laws.
- To send you marketing emails about products and offers, only where you have opted in, and with an unsubscribe link in every message (consent, section 69 of POPIA). You may withdraw consent at any time.
- To improve our website, products and service, and to prevent fraud (legitimate interest).
4. Who we share it with
We share personal information only as needed to run our business:
- Shopify Inc. (website and order platform), Paystack and PayPal (payment processing), our manufacturing and fulfilment partner and courier companies (to deliver your order), ParcelPanel (order tracking), email and analytics providers, and our accountants and professional advisers.
- Public authorities or courts where required by law.
We never sell, rent or trade your personal information to third parties for their own marketing.
5. Transfers outside South Africa
Some of our service providers (for example Shopify and PayPal) store data on servers outside South Africa. Where this happens we ensure, in line with section 72 of POPIA, that the recipient is bound by contractual terms or laws that give substantially similar protection to POPIA.
6. How long we keep it
Order, invoice and payment records are kept for 5 years as required by the Companies Act, Tax Administration Act and CPA. Marketing data is kept until you unsubscribe. Account data is kept while your account is active and deleted on request. Website analytics data is anonymised or deleted within 26 months.
7. Cookies
Our Site uses cookies that are strictly necessary for it to work (cart, checkout, security), and, with your consent, analytics and marketing cookies (for example Google Analytics and Meta Pixel) to understand how the Site is used and to show relevant advertising. You can manage cookies through the cookie banner and your browser settings; disabling necessary cookies may stop the checkout working.
8. Security
The Site is protected by SSL/TLS encryption. Payments are handled by PCI-DSS compliant providers. Access to personal information within Red Health is limited to staff who need it, and we take reasonable technical and organisational measures required by section 19 of POPIA. If a data breach affects you, we will notify you and the Information Regulator as required by section 22.
9. Your rights
Under POPIA you have the right to:
- be told what personal information we hold about you and request a copy (see also our PAIA Manual);
- ask us to correct or delete inaccurate, out-of-date or unnecessary information;
- object to processing, including direct marketing, at any time;
- withdraw consent you have previously given;
- lodge a complaint with the Information Regulator (South Africa): JD House, 27 Stiemens Street, Braamfontein, Johannesburg; complaints.IR@inforegulator.org.za; http://www.inforegulator.org.za.
To exercise any of these rights, email our Information Officer at info@redhealthinnovations.com. We will respond within 7 days.
10. Children
Our Site and products are intended for adults. We do not knowingly collect personal information from anyone under 18.
11. Changes to this policy
We may update this policy from time to time. The latest version, with its date, will always be published on this page.