RégimA Privacy Policy

Legal

Privacy Policy

Last updated:

RégimA (Pty) Ltd ("RégimA", "we", "us", or "our") is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit regima.com (the "Site"). It applies to all visitors, users, and others who access the Site.

This policy is drafted in compliance with the General Data Protection Regulation (GDPR) (EU) 2016/679 and the Protection of Personal Information Act (POPIA) 4 of 2013 (South Africa). By using the Site, you consent to the practices described in this policy.

1Who We Are (Responsible Party / Data Controller)

RégimA (Pty) Ltd is the responsible party (POPIA) and data controller (GDPR) for personal information collected through this Site.

RégimA (Pty) Ltd — Information Officer

50 Van Buuren Road, Bedfordview, 2008, Gauteng, South Africa

Email: info@regima.com

Tel: +27 11 615 2869

2Information We Collect

We collect personal information in the following ways:

2.1 Information You Provide Directly

  • Contact form submissions — your name, email address, and message when you use our contact form.
  • Enquiries — any additional information you voluntarily provide when contacting us.

2.2 Information Collected Automatically

  • Usage data — pages visited, time spent on pages, referring URLs, browser type, device type, and operating system.
  • IP address — collected in truncated form (last octet removed) for security and analytics purposes. We do not store full IP addresses.
  • Cookies and similar technologies — see Section 5 below.

2.3 Information We Do Not Collect

We do not collect payment card details, government identification numbers, or special categories of personal information (such as health data, race, or religious beliefs) through this Site.

3How We Use Your Information

We use the personal information we collect for the following purposes:

PurposeLegal Basis (GDPR)POPIA Condition
Respond to your enquiries and contact form submissionsLegitimate interests / ContractPurpose specification
Improve and optimise the SiteLegitimate interestsPurpose specification
Analyse website traffic and user behaviour (Google Analytics)ConsentPurpose specification
Ensure the security and integrity of the SiteLegitimate interestsSecurity safeguards
Comply with legal obligationsLegal obligationAccountability

4Sharing Your Information

We do not sell, trade, or rent your personal information to third parties. We may share your information with:

  • Service providers — trusted third-party companies that assist us in operating the Site and conducting our business (e.g. hosting providers, analytics providers), subject to confidentiality obligations.
  • Legal authorities — where required by law, court order, or governmental authority.
  • Business transfers — in the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

All third-party service providers are required to handle your personal information in accordance with applicable data protection laws.

5Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience on the Site. A cookie is a small text file placed on your device.

5.1 Types of Cookies We Use

Cookie TypePurposeProvider
Strictly necessarySession management, security (admin authentication)RégimA (first-party)
AnalyticsMeasure website traffic and user behaviourGoogle Analytics (GA4)
FunctionalRemember your cookie consent preferenceRégimA (first-party)

5.2 Your Cookie Choices

You may withdraw consent for non-essential cookies at any time using the cookie preference controls on the Site. You can also configure your browser to refuse cookies; however, some features of the Site may not function correctly if cookies are disabled.

For more information about Google Analytics cookies, visit Google's Privacy Policy. To opt out of Google Analytics tracking, install the Google Analytics Opt-out Browser Add-on.

6Third-Party Services

6.1 Google Analytics (GA4)

We use Google Analytics 4 to understand how visitors interact with the Site. Google Analytics collects anonymised usage data including pages visited, session duration, and device information. IP addresses are anonymised before transmission. Data is processed by Google LLC in accordance with their Privacy Policy. Google Analytics is only loaded after you have given consent via our cookie banner.

6.2 Contact Form (Inbox)

Our contact form is powered by an integrated messaging service. When you submit the form, your name, email address, and message are transmitted securely and stored to enable us to respond to your enquiry. We do not use this information for marketing without your explicit consent.

6.3 Hosting and Infrastructure

The Site is hosted on GoDaddy infrastructure. GoDaddy may process technical data (such as server logs and IP addresses) as part of providing hosting services. For details, see GoDaddy's Privacy Policy.

7International Data Transfers

RégimA operates globally, with offices and distributors in South Africa, the United Kingdom, Europe, Canada, Australia, and Africa. Your personal information may be transferred to and processed in countries outside of South Africa and the European Economic Area (EEA).

Where we transfer personal information internationally, we ensure appropriate safeguards are in place, including:

  • Standard Contractual Clauses (SCCs) approved by the European Commission
  • Adequacy decisions by the relevant data protection authority
  • Binding corporate rules or other approved transfer mechanisms

8Data Retention

We retain your personal information only for as long as necessary to fulfil the purposes for which it was collected, or as required by law.

Data TypeRetention Period
Contact form submissions3 years from date of submission, or until the enquiry is resolved
Analytics data (Google Analytics)Up to 14 months (as configured in GA4)
Server logs and security data90 days
Admin session tokens8 hours (auto-expiry)
Cookie consent records1 year

After the applicable retention period, personal information is securely deleted or anonymised.

9Your Rights

Depending on your location, you have the following rights regarding your personal information:

Right of access

GDPR & POPIA

Request a copy of the personal information we hold about you.

Right to rectification

GDPR & POPIA

Request correction of inaccurate or incomplete personal information.

Right to erasure

GDPR & POPIA

Request deletion of your personal information ("right to be forgotten"), subject to legal retention obligations.

Right to restrict processing

GDPR

Request that we limit how we use your personal information in certain circumstances.

Right to data portability

GDPR

Receive your personal information in a structured, machine-readable format.

Right to object

GDPR & POPIA

Object to processing based on legitimate interests or for direct marketing purposes.

Right to withdraw consent

GDPR & POPIA

Withdraw consent at any time where processing is based on consent (e.g. analytics cookies).

Right to lodge a complaint

GDPR & POPIA

Lodge a complaint with your local data protection authority (see Section 11).

To exercise any of these rights, please contact us using the details in Section 10. We will respond within 30 days (POPIA) or one month (GDPR). We may need to verify your identity before processing your request.

10Security of Your Information

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, disclosure, alteration, or destruction. These measures include:

  • HTTPS encryption for all data transmitted to and from the Site
  • HTTP security headers (including Content Security Policy, HSTS, and X-Frame-Options)
  • Rate limiting and honeypot protection on contact forms
  • IP address truncation (last octet removed before storage)
  • Secure, httpOnly session cookies with 8-hour expiry for admin access
  • Regular security scanning and vulnerability assessments

Despite these measures, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security but are committed to protecting your information to the best of our ability.

11Supervisory Authorities

If you believe we have not handled your personal information in accordance with applicable law, you have the right to lodge a complaint with the relevant supervisory authority:

South Africa (POPIA)

Information Regulator (South Africa)

www.inforegulator.org.za

inforeg@justice.gov.za

European Union (GDPR)

Your local EU Data Protection Authority. A full list is available at:

edpb.europa.eu

United Kingdom (UK GDPR)

Information Commissioner's Office (ICO)

ico.org.uk

12Children's Privacy

The Site is not directed at children under the age of 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us immediately and we will take steps to delete such information.

13Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will update the "Last updated" date at the top of this page. We encourage you to review this policy periodically.

Continued use of the Site after any changes constitutes your acceptance of the updated policy.

14Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our handling of your personal information, please contact our Information Officer:

RégimA (Pty) Ltd — Information Officer

50 Van Buuren Road, Bedfordview, 2008, Gauteng, South Africa

Email: info@regima.com

Tel: +27 11 615 2869

You may also submit a query via our Contact Us page.