Privacy Policy

Green Gorilla Lifestyle (Pty) Ltd is the Responsible Party as defined under POPIA, responsible for the lawful processing of your personal information.

Trading name: Green Gorilla Lifestyle

Website: greengorillalifestyle.com

Email: info@greengorilla.store

Information Officer: As required by POPIA Section 55, our Information Officer is responsible for ensuring compliance with this policy and POPIA obligations.

We process your personal information only when one of the following lawful grounds applies:

• Contractual necessity — to fulfil orders and deliver services you have requested
• Legitimate interests — to operate and improve our platform, prevent fraud, and ensure security
• Legal obligation — to comply with South African law (e.g., tax records, FICA)
• Consent — for marketing communications (you may withdraw consent at any time)
• Vital interests — where processing is necessary to protect your safety or that of another person

Information you provide directly:

• Full name and email address
• Phone number and physical address
• Date of birth (for mandatory age verification — 18+ only)
• Payment details (processed and secured by Stripe — we do not store card numbers)
• Health-related information submitted voluntarily (e.g., health quiz, medical cannabis application)
• Messages, reviews, and communications you send us
• March/event support form data including opinions and attendance information

Information collected automatically:

• IP address, browser type and version
• Pages visited, time on site, and referring URLs
• Device type and operating system
• Cookies and similar tracking technologies

Special personal information (e.g., health data) is only processed with your explicit consent and solely to provide the relevant service.

• To process and fulfil your orders and purchases
• To verify your age as required by applicable legislation
• To create and manage your account
• To operate our Loyalty Programme
• To communicate order updates and transactional messages
• To send marketing or promotional communications (only with your consent)
• To respond to enquiries and provide customer support
• To personalise your experience and recommend products
• To operate the GreenScan plant identification feature (images are processed by AI)
• To review Medical Cannabis Programme applications
• To analyse website usage and improve our services
• To detect and prevent fraud, abuse, or unlawful activity
• To comply with legal and regulatory obligations under South African law

We do not sell, rent, or trade your personal information. We may share it only with:

• Stripe — payment processing (PCI DSS compliant). View their Privacy Policy
• Google Analytics — aggregated, anonymised usage analytics. View their Privacy Policy
• Resend — email delivery infrastructure
• Base44 — our application hosting and database platform
• Legal authorities — where required by South African law, court order, or to protect our rights

All third-party operators are bound by confidentiality obligations and may only process your data for the specified purpose.

We use cookies and local storage for:

• Age verification (stored locally in your browser)
• Authentication and session management
• Shopping cart and user preferences
• Analytics and website performance

You may disable cookies in your browser settings. Disabling certain cookies may affect the functionality of this website. By continuing to use this site you consent to our use of cookies as described above.

We implement appropriate technical and organisational measures to safeguard your personal information, including:

• HTTPS (TLS) encryption for all data in transit
• Secure payment processing via Stripe (PCI DSS Level 1 certified)
• Role-based access controls and minimum-access principles
• Regular platform security updates
• Secure, encrypted data storage

In the event of a security breach that is likely to affect your rights and freedoms, we will notify the Information Regulator and affected data subjects as required under POPIA Section 22.

We retain personal information only for as long as is necessary to fulfil the purpose for which it was collected, or as required by law:

• Account data — retained while your account is active and for up to 5 years thereafter
• Transaction records — retained for 7 years for tax and regulatory compliance (South African Revenue Service requirements)
• Medical applications — retained for the duration required by applicable health regulations
• Marketing opt-ins — until you withdraw consent
• Analytics data — anonymised after 26 months

As a data subject under POPIA, you have the right to:

• Access — request a copy of the personal information we hold about you
• Correction — request that inaccurate or incomplete information be corrected
• Deletion / Erasure — request deletion of your personal information (subject to legal retention obligations)
• Objection — object to the processing of your personal information on grounds of legitimate interests
• Withdraw consent — withdraw consent for marketing communications at any time
• Lodge a complaint — complain to the Information Regulator (South Africa) if you believe your rights have been violated

To exercise any of these rights, contact us at: info@greengorilla.store. We will respond within 30 days as required by POPIA.

Information Regulator (South Africa):
Website: inforegulator.org.za
Email: inforeg@justice.gov.za

Where you choose to submit health-related information (via our Health Quiz, BMI Tracker, GreenScan, or Medical Cannabis Programme), we treat this as special personal information under POPIA Section 26.

Such information is:

• Collected only with your explicit, informed consent
• Used solely to provide the service you requested
• Not shared with third parties without your express permission
• Stored securely and accessible only to authorised personnel

This website is strictly for individuals 18 years of age or older. We do not knowingly collect personal information from persons under the age of 18. If we become aware that personal information of a minor has been collected without appropriate consent, we will delete it immediately. Parents or guardians who believe their child's data has been collected may contact us at info@greengorilla.store.

Where personal information is transferred to third parties outside of South Africa, we ensure that such transfers comply with POPIA Section 72, including that the recipient country provides an adequate level of protection or that appropriate safeguards are in place through contractual obligations.

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The updated policy will be posted on this page with a revised "Last updated" date. For material changes, we will notify registered users by email. Continued use of the website after changes are posted constitutes acceptance of the updated policy.

For any privacy queries, access requests, or complaints, please contact our Information Officer: