Privacy policy

THE FIT CARTEL PRIVACY POLICY

Last updated: 17 September 2026

Introduction / Scope

The Fit Cartel, operated by House of Koka (“The Fit Cartel”, “we”, “us” or “our”), operates this online store and related services.

Our store is powered by Shopify, which provides the e-commerce platform that enables us to offer our products and services online.

This Privacy Policy explains how we collect, use, store and disclose your personal information when you visit our website, create an account, place an order, make a payment, communicate with us or otherwise use our services.

For purposes of South Africa's Protection of Personal Information Act 4 of 2013 (“POPIA”), House of Koka is the responsible party for personal information processed for our business purposes.

If there is a conflict between our Terms of Service and this Privacy Policy concerning the processing of personal information, this Privacy Policy applies to that processing.

Personal Information We Collect or Process

“Personal information” has the meaning given to it under POPIA and generally includes information relating to an identifiable person.

Depending on how you interact with us, we may process:

Contact information: your name, email address, telephone number, billing address and delivery address.

Order and transaction information: products viewed, items placed in your cart, purchases, order history, returns, exchanges, cancellations and transaction details.

Account information: account credentials, preferences and settings where you create an account.

Customer communications: information you provide when contacting us regarding orders, returns, products or customer support.

Device and usage information: IP address, browser type, device information, cookie identifiers and information about how you navigate and interact with our website.

Payment information: payments are processed through FNB and relevant payment infrastructure. Your card information is submitted to the secure payment environment used to process your transaction. The Fit Cartel does not directly store your complete payment-card details.

Personal Information Sources

We may collect personal information directly from you when you place an order, create an account or contact us; automatically through our Shopify store, cookies and similar technologies; and from service providers involved in payments, fraud prevention, website operation, analytics, marketing and order fulfilment.

We may also receive information from other third parties where permitted by applicable law.

How We Use Your Personal Information

We process personal information where reasonably necessary and permitted under POPIA to:

process payments and fulfil purchases;
source, manage and deliver orders;
administer returns, exchanges and refunds;
provide customer service and order updates;
maintain and secure customer accounts;
detect and prevent fraud or misuse;
operate, analyse and improve our online store;
maintain appropriate business and transaction records;
comply with legal, tax and regulatory obligations; and
send permitted marketing communications.

We may send promotional emails or SMS messages where permitted by POPIA. You can unsubscribe or object to direct marketing using the method provided in the communication. The Information Regulator's current guidance confirms that data subjects can object to direct marketing and that processing for that purpose must cease following a valid objection.

Cookies

Our Shopify store uses cookies and similar technologies to operate the website, remember preferences, maintain shopping-cart functionality, improve security and understand how customers use our store.

We may also use cookies for analytics and marketing where appropriate.

You can manage certain cookies through your browser or any cookie controls provided on our website. Blocking essential cookies may affect the operation of certain store features.

How We Disclose Personal Information

We only disclose personal information where reasonably necessary for our business, to provide services you request, or where permitted or required by law.

Personal information	Who it may be shared with	Purpose
Contact, account and order information	Shopify	Hosting and operating our online store
Payment and transaction information	FNB and relevant payment providers	Processing and securing payments
Name, telephone number and delivery address	Bob Go and its allocated courier partners	Delivering your order
Order information	Suppliers/service providers where necessary	Sourcing and fulfilling orders
Device, cookie and usage information	Shopify and analytics/marketing providers we use	Website operation, analytics and permitted marketing
Customer communications	Relevant support providers	Customer service
Information legally required	Courts, regulators or public authorities	Compliance with legal obligations

We do not sell personal information as part of our ordinary business operations.

Relationship with Shopify

Shopify hosts our online store and processes information necessary to provide its platform and related services.

Information submitted through our store may therefore be processed by Shopify and its service providers. Shopify may also process certain information for its own purposes in accordance with its privacy terms.

You can read Shopify's Consumer Privacy Policy for more information about Shopify's processing practices.

Because Shopify is an international technology provider, information processed through Shopify's infrastructure may be processed or stored outside South Africa. Where personal information is transferred outside South Africa, we will handle such transfers in accordance with applicable requirements of POPIA.

User Generated Content

If you submit a product review, photograph, comment or other content intended for publication, that content may become publicly visible.

Do not include information in public reviews or posts that you do not want others to see.

Third Party Websites and Links

Our website may contain links to third-party websites, social-media platforms or other services.

Those third parties operate under their own privacy practices. The Fit Cartel is not responsible for the privacy practices of independent third-party websites merely because our website links to them.

Children's Data

Our store is intended for persons 18 years and older. We do not knowingly collect children's personal information for the purpose of allowing children to independently purchase products through our store.

If we become aware that children's personal information has been processed in circumstances not permitted under POPIA, we will take appropriate steps in accordance with applicable law.

Security and Retention of Your Information

We take reasonable technical and organisational measures to safeguard personal information against loss, unauthorised access, interference, misuse, alteration or disclosure.

However, no online system or electronic transmission method can guarantee absolute security.

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, to fulfil contractual obligations, maintain legitimate business records, resolve disputes, or comply with legal, tax and regulatory requirements. Personal information that is no longer required will be deleted, destroyed or de-identified where appropriate and subject to applicable law.

Your Rights

Subject to POPIA and applicable legal limitations, you may have the right to:

request confirmation of whether we hold personal information about you and request access to it;
request correction of inaccurate, incomplete, misleading or outdated personal information;
request deletion or destruction of personal information where POPIA permits;
object to certain processing of your personal information;
withdraw consent where processing is based on consent;
object to or unsubscribe from direct marketing; and
lodge a complaint with the Information Regulator of South Africa.

These rights are not absolute and some requests may be limited where we are legally required or permitted to retain or process the information. The Information Regulator specifically recognises rights concerning access, correction/deletion, objection, withdrawal of consent and complaints.

We may take reasonable steps to verify your identity before responding to a request involving your personal information.

Complaints

If you have concerns about how The Fit Cartel processes your personal information, please contact us so that we can investigate the matter.

You also have the right to lodge a POPIA complaint with the Information Regulator of South Africa. Its official eServices portal currently provides a dedicated service for submitting POPIA complaints.

Information Regulator of South Africa