Privacy Policy

1. Compliance with POPIA

At Deep Breath Co., we process your personal information in accordance with the Protection of Personal Information Act, 4 of 2013 (“POPIA”). Our legal bases for processing include:

  • Consent: Clear, informed, and voluntary permission provided by you.

  • Contractual Necessity: Necessary to fulfill your order for an Inhale Device.

  • Legal Obligation: Compliance with tax laws and regulatory record-keeping.

  • Legitimate Interests: Improving our services and preventing fraud.

2. What Personal Information We Collect

  • Directly from You: Basic contact details (name, address, phone, email), order information, payment confirmation, and customer support communications.

  • Automatically (Cookies): Usage data including IP address, browser type, and interaction with our Site.

  • Third Parties: Information from service providers like Shopify and our payment processors.

3. Your Rights (Data Subject Rights)

Under POPIA, you have the following rights:

  • Right of Access: Request confirmation of the data we hold about you.

  • Right to Correction: Request updates to inaccurate or incomplete data.

  • Right to Deletion: Request destruction of data where no lawful basis for retention exists.

  • Right to Object: Object to processing based on reasonable grounds.

  • Right to Withdraw Consent: Withdraw permission at any time.

  • Right to Lodge a Complaint: Contact the Information Regulator (https://www.inforegulator.org.za) if you believe your rights have been infringed.

4. International Data Transfers

In compliance with Section 72 of POPIA, we will only transfer personal information across South African borders if the recipient is subject to laws providing adequate protection, you have provided explicit consent, or the transfer is necessary for your contract (e.g., international cloud hosting).

5. Security and Safeguards

We implement technical and organizational measures under Section 19 of POPIA to protect your data:

  • Technical: Data encryption, secure firewalls, and regular software updates.

  • Organizational: Staff training, confidentiality agreements, and access controls.

6. Direct Marketing (CPA Compliance)

In accordance with Section 11 of the Consumer Protection Act (“CPA”), you have the right to opt out of direct marketing. We only send marketing materials if you have consented or are an existing customer. You may "unsubscribe" at any time via the link in our emails.

7. Disclosure of Personal Information

We share your information with trusted third parties to facilitate our services, including:

  • Payment Processors: To secure your transaction.

  • Shipping Partners: To deliver your Inhale Device within South Africa.

  • IT/Hosting Providers: To maintain Site security and functionality.

  • Marketing Partners: Only as permitted by your preferences.

8. Cookies

We use cookies to improve your user experience and analyze site traffic. You can manage cookie settings through your browser, though some features of the Inhale Device store may not function correctly if cookies are blocked.