Legal
Privacy Policy
Last updated:
RégimA (Pty) Ltd ("RégimA", "we", "us", or "our") is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit regima.com (the "Site"). It applies to all visitors, users, and others who access the Site.
This policy is drafted in compliance with the General Data Protection Regulation (GDPR) (EU) 2016/679 and the Protection of Personal Information Act (POPIA) 4 of 2013 (South Africa). By using the Site, you consent to the practices described in this policy.
1Who We Are (Responsible Party / Data Controller)
RégimA (Pty) Ltd is the responsible party (POPIA) and data controller (GDPR) for personal information collected through this Site.
RégimA (Pty) Ltd — Information Officer
50 Van Buuren Road, Bedfordview, 2008, Gauteng, South Africa
Email: info@regima.com
Tel: +27 11 615 2869
2Information We Collect
We collect personal information in the following ways:
2.1 Information You Provide Directly
- Contact form submissions — your name, email address, and message when you use our contact form.
- Enquiries — any additional information you voluntarily provide when contacting us.
2.2 Information Collected Automatically
- Usage data — pages visited, time spent on pages, referring URLs, browser type, device type, and operating system.
- IP address — collected in truncated form (last octet removed) for security and analytics purposes. We do not store full IP addresses.
- Cookies and similar technologies — see Section 5 below.
2.3 Information We Do Not Collect
We do not collect payment card details, government identification numbers, or special categories of personal information (such as health data, race, or religious beliefs) through this Site.
3How We Use Your Information
We use the personal information we collect for the following purposes:
| Purpose | Legal Basis (GDPR) | POPIA Condition |
|---|---|---|
| Respond to your enquiries and contact form submissions | Legitimate interests / Contract | Purpose specification |
| Improve and optimise the Site | Legitimate interests | Purpose specification |
| Analyse website traffic and user behaviour (Google Analytics) | Consent | Purpose specification |
| Ensure the security and integrity of the Site | Legitimate interests | Security safeguards |
| Comply with legal obligations | Legal obligation | Accountability |
4Sharing Your Information
We do not sell, trade, or rent your personal information to third parties. We may share your information with:
- Service providers — trusted third-party companies that assist us in operating the Site and conducting our business (e.g. hosting providers, analytics providers), subject to confidentiality obligations.
- Legal authorities — where required by law, court order, or governmental authority.
- Business transfers — in the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.
All third-party service providers are required to handle your personal information in accordance with applicable data protection laws.
5Cookies and Tracking Technologies
We use cookies and similar tracking technologies to enhance your experience on the Site. A cookie is a small text file placed on your device.
5.1 Types of Cookies We Use
| Cookie Type | Purpose | Provider |
|---|---|---|
| Strictly necessary | Session management, security (admin authentication) | RégimA (first-party) |
| Analytics | Measure website traffic and user behaviour | Google Analytics (GA4) |
| Functional | Remember your cookie consent preference | RégimA (first-party) |
5.2 Your Cookie Choices
You may withdraw consent for non-essential cookies at any time using the cookie preference controls on the Site. You can also configure your browser to refuse cookies; however, some features of the Site may not function correctly if cookies are disabled.
For more information about Google Analytics cookies, visit Google's Privacy Policy. To opt out of Google Analytics tracking, install the Google Analytics Opt-out Browser Add-on.
6Third-Party Services
6.1 Google Analytics (GA4)
We use Google Analytics 4 to understand how visitors interact with the Site. Google Analytics collects anonymised usage data including pages visited, session duration, and device information. IP addresses are anonymised before transmission. Data is processed by Google LLC in accordance with their Privacy Policy. Google Analytics is only loaded after you have given consent via our cookie banner.
6.2 Contact Form (Inbox)
Our contact form is powered by an integrated messaging service. When you submit the form, your name, email address, and message are transmitted securely and stored to enable us to respond to your enquiry. We do not use this information for marketing without your explicit consent.
6.3 Hosting and Infrastructure
The Site is hosted on GoDaddy infrastructure. GoDaddy may process technical data (such as server logs and IP addresses) as part of providing hosting services. For details, see GoDaddy's Privacy Policy.
7International Data Transfers
RégimA operates globally, with offices and distributors in South Africa, the United Kingdom, Europe, Canada, Australia, and Africa. Your personal information may be transferred to and processed in countries outside of South Africa and the European Economic Area (EEA).
Where we transfer personal information internationally, we ensure appropriate safeguards are in place, including:
- Standard Contractual Clauses (SCCs) approved by the European Commission
- Adequacy decisions by the relevant data protection authority
- Binding corporate rules or other approved transfer mechanisms
8Data Retention
We retain your personal information only for as long as necessary to fulfil the purposes for which it was collected, or as required by law.
| Data Type | Retention Period |
|---|---|
| Contact form submissions | 3 years from date of submission, or until the enquiry is resolved |
| Analytics data (Google Analytics) | Up to 14 months (as configured in GA4) |
| Server logs and security data | 90 days |
| Admin session tokens | 8 hours (auto-expiry) |
| Cookie consent records | 1 year |
After the applicable retention period, personal information is securely deleted or anonymised.
9Your Rights
Depending on your location, you have the following rights regarding your personal information:
Right of access
GDPR & POPIARequest a copy of the personal information we hold about you.
Right to rectification
GDPR & POPIARequest correction of inaccurate or incomplete personal information.
Right to erasure
GDPR & POPIARequest deletion of your personal information ("right to be forgotten"), subject to legal retention obligations.
Right to restrict processing
GDPRRequest that we limit how we use your personal information in certain circumstances.
Right to data portability
GDPRReceive your personal information in a structured, machine-readable format.
Right to object
GDPR & POPIAObject to processing based on legitimate interests or for direct marketing purposes.
Right to withdraw consent
GDPR & POPIAWithdraw consent at any time where processing is based on consent (e.g. analytics cookies).
Right to lodge a complaint
GDPR & POPIALodge a complaint with your local data protection authority (see Section 11).
To exercise any of these rights, please contact us using the details in Section 10. We will respond within 30 days (POPIA) or one month (GDPR). We may need to verify your identity before processing your request.
10Security of Your Information
We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, disclosure, alteration, or destruction. These measures include:
- HTTPS encryption for all data transmitted to and from the Site
- HTTP security headers (including Content Security Policy, HSTS, and X-Frame-Options)
- Rate limiting and honeypot protection on contact forms
- IP address truncation (last octet removed before storage)
- Secure, httpOnly session cookies with 8-hour expiry for admin access
- Regular security scanning and vulnerability assessments
Despite these measures, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security but are committed to protecting your information to the best of our ability.
11Supervisory Authorities
If you believe we have not handled your personal information in accordance with applicable law, you have the right to lodge a complaint with the relevant supervisory authority:
European Union (GDPR)
Your local EU Data Protection Authority. A full list is available at:
edpb.europa.eu12Children's Privacy
The Site is not directed at children under the age of 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us immediately and we will take steps to delete such information.
13Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will update the "Last updated" date at the top of this page. We encourage you to review this policy periodically.
Continued use of the Site after any changes constitutes your acceptance of the updated policy.
14Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our handling of your personal information, please contact our Information Officer:
RégimA (Pty) Ltd — Information Officer
50 Van Buuren Road, Bedfordview, 2008, Gauteng, South Africa
Email: info@regima.com
Tel: +27 11 615 2869
You may also submit a query via our Contact Us page.