Effective Date: 26 May 2026
Last Updated: 26 May 2026

1. Introduction

This Privacy Policy explains how  Mountain Merch (“Mountain Merch”, “we”, “us”, or “our”) collects, uses, stores, shares, and protects personal information when you use our website, purchase products, interact with our services, or communicate with us.

This policy is intended to comply with the Protection of Personal Information Act (“POPIA”), the Electronic Communications and Transactions Act (“ECTA”), and other applicable South African laws relating to electronic commerce and consumer protection.

By using our website, you consent to the practices described in this Privacy Policy.

2. Responsible Party

MountainMerchant (Pty) Ltd
Registration Number: 2025/314752/07
VAT Number: Pending Allocation

Address:
2 Tributelaan
Jamestown
Stellenbosch
South Africa

Email: info@mountainmerch.co.za
Telephone: 087 822 1578

The Information Officer of MountainMerchant (Pty) Ltd is responsible for ensuring compliance with applicable data protection laws.

3. Information We Collect

We may collect and process the following categories of personal information:

3.1 Information You Provide Directly

When placing orders, creating accounts, contacting us, subscribing to newsletters, posting reviews, or interacting with the website, we may collect:

  • Full name
  • Email address
  • Telephone number
  • Billing address
  • Delivery address
  • Company name (where applicable)
  • Order details and purchase history
  • Customer support communications
  • Product reviews and comments
  • Marketing preferences

3.2 Technical and Usage Information

When visiting our website, we may automatically collect:

  • IP address
  • Browser type and version
  • Device information
  • Operating system
  • Website usage and navigation behaviour
  • Referring websites
  • Session information
  • Cookie and tracking data

3.3 Payment Information

Payments processed through  Yoco are handled securely by the payment provider.

We do not store or have direct access to your full payment card details.

Bank transfer payments may require us to process payment confirmation information for reconciliation purposes.

4. How We Use Personal Information

We use personal information for legitimate business purposes, including:

  • Processing and fulfilling orders
  • Providing customer support
  • Managing customer accounts
  • Delivering products
  • Sending order confirmations and shipping notifications
  • Communicating regarding purchases or enquiries
  • Sending newsletters and marketing communications where consent exists
  • Recovering abandoned shopping carts
  • Improving website functionality and customer experience
  • Monitoring website security and fraud prevention
  • Complying with legal and tax obligations

5. Marketing Communications

We may send marketing communications via email and other digital channels where:

  • you have provided consent;
  • you are an existing customer and applicable law permits such communication; or
  • you have subscribed to our newsletter.

Marketing communications are managed using:

  • Brevo
  • WooCommerce native email functionality

You may unsubscribe from marketing communications at any time using the unsubscribe link included in emails or by contacting us directly.

6. WhatsApp Communications

Our website includes direct click-to-chat and group join links to  WhatsApp.

If you choose to contact us through WhatsApp, your communication may be processed through WhatsApp’s own systems and privacy policies.

We may use WhatsApp to:

  • communicate regarding orders;
  • provide customer support;
  • send delivery updates; and
  • respond to customer enquiries.

7. Cookies and Tracking Technologies

Our website uses cookies and similar technologies to improve functionality, analyse usage, and support marketing activities.

This includes:

  • essential website cookies;
  • functional cookies;
  • analytics cookies;
  • advertising and remarketing cookies.

Cookie consent and preferences are managed using  Complianz.

We also use:

  • Google Analytics
  • Meta Pixel

These services may collect information about your browsing activity across websites and devices.

For more information, please refer to our separate Cookie Policy.

8. Third-Party Services and Integrations

We may share necessary personal information with trusted third parties involved in operating the business and delivering services, including:

Payment Providers

  • Yoco

Courier and Logistics Providers

  • The Courier Guy
  • DHL

Website Infrastructure and Security

  • Axxess
  • Cloudflare
  • W3 Total Cache

Marketing and Analytics

  • Google
  • Meta Platforms
  • Brevo

Ecommerce and Website Functionality

  • WooCommerce
  • FiboSearch
  • Trustpilot

We only share information reasonably necessary for those providers to perform their services.

9. International Data Transfers

Some third-party providers used by Mountain Merch may process or store information outside South Africa.

This may include providers such as:

  • Google
  • Meta
  • Cloudflare
  • Brevo
  • YouTube

Where international transfers occur, we take reasonable steps to ensure appropriate safeguards are in place in accordance with POPIA.

10. Product Reviews and Public Content

Product reviews, blog comments, and similar content submitted by users may be publicly visible on the website.

By submitting reviews or comments, you acknowledge that:

  • your displayed name and content may become public;
  • search engines may index such content; and
  • we cannot fully control further sharing or copying of publicly posted information.

We reserve the right to moderate, remove, or refuse content at our discretion.

11. Data Retention

We retain personal information only for as long as reasonably necessary for business, legal, tax, and operational purposes.

Current retention periods include:

  • Order and transaction data: 5 years
  • General customer and marketing data: 3 years
  • Inactive customer accounts: removed after 3 years

Certain information may be retained longer where legally required or necessary for fraud prevention, dispute resolution, or regulatory compliance.

12. Security Measures

We implement reasonable technical and organisational measures to protect personal information against unauthorised access, loss, misuse, alteration, or disclosure.

Security measures include:

  • SSL encryption
  • Secure hosting infrastructure
  • Password-protected administrative systems
  • Two-factor authentication
  • Website security and caching systems
  • Access limitation controls

No online platform can guarantee absolute security, and users provide information at their own risk.

13. Your Rights Under POPIA

Subject to applicable law, you may have the right to:

  • request access to your personal information;
  • request correction or updating of inaccurate information;
  • request deletion of personal information;
  • object to certain processing activities;
  • withdraw consent for marketing communications;
  • lodge complaints relating to privacy practices.

Requests may be submitted to:

Email: info@mountainmerch.co.za

We may require verification of identity before processing requests.

14. Children’s Privacy

Our website and services are not directed at children, and we do not knowingly collect personal information from minors for marketing purposes.

If we become aware that personal information relating to a child has been collected unlawfully, we will take reasonable steps to delete such information.

15. Third-Party Links and Embedded Content

Our website may contain links to external websites or embedded content, including YouTube videos and social media content.

Third-party websites and services operate under their own privacy policies, and we are not responsible for their privacy practices or content.

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect legal, operational, or technical changes.

Updated versions will be published on this page with the revised effective date.

Continued use of the website after changes are published constitutes acceptance of the updated policy.

17. Contact Information

For questions, complaints, or requests relating to this Privacy Policy or your personal information, contact:

MountainMerchant (Pty) Ltd
Email: info@mountainmerch.co.za
Telephone: 087 822 1578
Address: 2 Tributelaan, Jamestown, Stellenbosch, South Africa