Privacy Notice

The responsible party for your personal information is:

Information Officer: our Information Officer can be reached at info@rippleffectinc.com. Please use this address for any privacy question, request or complaint.

• Account: name, email address, password (stored hashed), phone number and, if you sign in with Google, the name, email address and profile picture Google shares with us.
• Orders: the products you buy, order value, order history and your invoices.
• Delivery: recipient name, delivery address, phone number and courier tracking events.
• Payment: card details are entered on Yoco's secure hosted payment page and are never stored by us. We only receive a payment reference and the payment status from Yoco.
• Contact form and support: your name, email address and the content of your message, including WhatsApp messages you send us.
• Newsletter: your email address, if you subscribe.
• Analytics: with your consent, pages viewed, device and browser type, approximate location and interactions such as adding to cart, collected by Google Analytics.

One account for our services. Your store login (your email address and password, or Google sign-in) also works on RS0, our training and coaching platform at readyset0.com, because both use the same sign-in system. Signing in is what they share. We keep store information (orders, addresses and your store profile) separate from training information (such as workouts, body measurements and nutrition logs). We do not use training or health information to market or sell store products, and the store's admin tools show store information only. Shopping on the store does not create a training profile, and we will only send you marketing about RS0 if you have agreed to receive it.

• Performing our contract with you: creating your account, processing payment, delivering your order, sending order confirmations and delivery updates, and handling returns.
• Complying with the law: keeping invoices and transaction records for tax purposes, and responding to lawful requests from authorities.
• Our legitimate interests: keeping the store secure, preventing fraud, answering your enquiries and improving our products and service.
• Your consent: sending marketing emails and using analytics cookies. You can withdraw consent at any time (see sections 8 and 10).

We share personal information only with service providers ("operators" under POPIA) who process it on our behalf and under our instructions:

• Yoco (South Africa): card payment processing.
• BobGo and its courier partners (South Africa): parcel delivery and tracking notifications.
• Resend (United States): sending transactional emails such as order confirmations and password resets.
• Google: Firebase hosting, database and Cloud Functions in the European Union (region europe-west1), and Google Analytics.
• Sage (South Africa): accounting and invoicing.

We may also disclose personal information where the law requires it, or to protect our rights, property or safety. We do not sell your personal information.

Some of your personal information is stored and processed outside South Africa: on Google Cloud infrastructure in the European Union, and by Resend in the United States for email delivery. These transfers are made under section 72 of POPIA on the basis of contractual safeguards with each provider that require a level of protection substantially similar to POPIA. Our courier, payment and accounting providers process information in South Africa.

• Orders and invoices: 5 years from the end of the tax year, as required by tax law.
• Account details: until you delete your account or ask us to delete it.
• Contact messages: 12 months after the enquiry is resolved.
• Newsletter: until you unsubscribe.
• Analytics: according to the data retention period configured in Google Analytics.

When information is no longer needed we delete it or anonymise it.

We protect your information with encrypted connections (HTTPS), access controls so that only authorised staff can see customer data, database security rules that keep each customer's data separate, and by never handling your card details ourselves. No system is completely secure; if we become aware of a breach that affects you we will notify you and the Information Regulator as POPIA requires.

Under sections 23 and 24 of POPIA you have the right to:

• Access: ask whether we hold personal information about you and receive a copy of it.
• Correction: ask us to correct or update inaccurate or incomplete information.
• Deletion: ask us to delete information we no longer need or are not entitled to keep.
• Objection: object to processing based on our legitimate interests, and to direct marketing.
• Withdraw consent: withdraw consent for marketing or analytics at any time, without affecting processing that took place before withdrawal.

To exercise any of these rights, email our Information Officer at info@rippleffectinc.com. We may ask you to verify your identity. We will respond within 30 days. You can also update most account details yourself on your account page, and unsubscribe from marketing using the link in any marketing email.

If you are not satisfied with how we handle your personal information, you have the right to lodge a complaint with the Information Regulator (South Africa):

We use two categories of cookies and similar storage:

• Strictly necessary: keep you signed in, remember your cart and your cookie choice. These are needed for the store to work and do not require consent.
• Analytics: Google Analytics, via Firebase, to understand how the store is used. These are only set if you accept them on the cookie banner.

You can change your choice at any time using the "Cookie settings" link in the footer, or by clearing this site's data in your browser, which will show the banner again.

Our products and services are intended for adults. We do not knowingly sell to, or collect personal information from, anyone under 18 without the consent of a parent or guardian (a competent person, as sections 34 and 35 of POPIA require). If you believe a child has given us personal information, contact us at info@rippleffectinc.com and we will delete it.

We may update this notice from time to time. The date at the top shows when it was last changed. If the changes are significant we will let you know by email or by a notice on the site.

Questions about this notice or your personal information: info@rippleffectinc.com.