Privacy Policy
Effective date: 17 September 2026. Drelvek (Pty) Ltd respects personal information and handles it under the Protection of Personal Information Act (POPIA).
1. Scope
This policy covers drelvek.info, order enquiries, phone confirmations and customer communications. It explains what information we use, why we use it, who may receive it and how to contact us. It applies to visitors, customers and people who communicate with our team.
2. Information collected
We may collect a name, telephone number, delivery address, email address, order details and communication records. Technical information such as browser type, approximate location, referring page and access time may be recorded for security and site operation.
3. Purpose
Information is used to receive and confirm orders, arrange delivery, answer questions, maintain records, prevent abuse and improve the website. We do not sell customer lists. We use only information reasonably connected to these purposes.
4. Lawful basis
Processing may be based on consent, steps requested before an agreement, fulfilment of an order, legal obligations or a legitimate operational interest. Where consent is requested, it may be withdrawn by contacting us. Withdrawal does not invalidate processing already completed lawfully.
5. Retention
Order and tax records are retained for seven years where required for accounting and legal compliance. Support correspondence is normally retained for 24 months after the matter closes. Cookie preferences may remain for 12 months, while security logs are generally retained for 90 days.
6. Sharing
Information may be shared with courier partners, hosting providers, payment and communications vendors, professional advisers and public authorities where required. Each supplier receives information appropriate to its task. Vendors are expected to protect confidentiality and use information only for the instructed service.
7. Transfers
Some hosting or technology providers may process information outside South Africa. Drelvek seeks suitable contractual, technical and organisational safeguards and considers whether the receiving service offers an appropriate level of protection before using it.
8. Rights
You may ask for access, correction, deletion where lawful, an explanation of processing, or restriction where applicable. Send a written request to [email protected] with enough detail to identify the request. We may verify identity before releasing information.
9. Security
We use access controls, secure connections, limited permissions and practical monitoring. No online system can promise absolute security. If we become aware of a material incident, we will assess it and communicate where the law requires.
10. Complaints
First contact Drelvek at 271 Pretorius Street, Pretoria Central, 0001 Pretoria, Gauteng, or [email protected]. We aim to acknowledge requests within five business days and respond within 30 days, subject to complexity. You may also contact the Information Regulator of South Africa.
11. Children
This website is not directed at children. We do not knowingly request personal information from a child without appropriate consent. If you believe a child has provided information, contact us so that we can review and remove it where appropriate.
12. Changes
Version 1.0 was published on 17 September 2026. We may update this policy to reflect operational or legal changes. The current version will appear on this page, and material changes may be highlighted through a website notice.
Requests about personal information can be sent to [email protected] or by post to Drelvek (Pty) Ltd, 271 Pretorius Street, Pretoria Central, 0001 Pretoria, Gauteng. Please include enough detail to identify the request, but do not send unnecessary identity documents or payment information by email. We aim to acknowledge a request within five business days and provide a substantive response within 30 days, subject to lawful extensions and the complexity of the request. Where identity must be checked, we will explain the minimum verification needed.
Typical retention periods are based on purpose. Order and delivery records are generally retained for seven years after the relevant transaction where needed for accounting, tax, consumer or dispute records. Uncompleted order enquiries are ordinarily deleted or anonymised after 24 months of inactivity unless a longer period is reasonably required for a complaint or legal matter. Consent records and preference history may be retained for up to 24 months after the relevant interaction so that choices can be demonstrated.
Service providers may receive limited information under written or operational safeguards. These may include a hosting provider, website security provider, email service, telephone or messaging provider, delivery partner and professional advisers handling accounting or legal administration. Providers receive only what is needed for their function and are not authorised to use customer lists for their own marketing. Drelvek remains responsible for selecting suppliers and reviewing their handling arrangements.
Some providers may process technical or order information outside South Africa. Where this occurs, Drelvek will use contractual, organisational or other safeguards required by POPIA and will consider the destination country's protection framework. Information is not transferred simply because a visitor opens a page; a transfer depends on the service used, such as hosting, communications or delivery coordination. Visitors may request general information about relevant recipient categories.
Rights may include asking for access, correction, deletion where lawful, restriction or objection to a particular use, and withdrawal of consent where processing relies on consent. Withdrawal does not undo processing already carried out lawfully and may mean that an order enquiry cannot be completed. A complaint should first be sent to Drelvek with the relevant dates and correspondence; unresolved complaints may be referred to the Information Regulator of South Africa through its official channels. This policy was last reviewed on 17 September 2026, and material revisions will be dated on publication.
Practical privacy details
Information may be collected directly when a visitor submits an order request, calls +27 12 123 4601, emails [email protected] or asks about delivery. The website may also receive limited technical data needed to protect pages from abuse and understand whether a request can be delivered correctly. Drelvek does not ask visitors to send passwords, card PINs, identity numbers or unrelated sensitive information through an ordinary order form.
Order and delivery records are ordinarily retained for up to seven years where accounting, tax, consumer or dispute obligations make that period relevant. An enquiry that does not become an order is generally reviewed for deletion or anonymisation after 24 months of inactivity. Consent and cookie-choice records may be retained for up to 24 months so that a preference can be respected and demonstrated. A legal hold or unresolved complaint can require a relevant record to remain longer, after which access is restricted and the record is securely deleted or anonymised.
Operational recipients may include website hosting, security monitoring, email, telephone or messaging, delivery, accounting and legal service providers. Each recipient should receive only the information needed for its task, such as a delivery name, phone number and address rather than unrelated browsing history. Providers may operate in South Africa or another country, and Drelvek considers contractual and organisational safeguards for international processing. Visitors may ask for the categories of recipients used for a particular enquiry.
To exercise a POPIA-related request, write to Drelvek (Pty) Ltd, 271 Pretorius Street, Pretoria Central, 0001 Pretoria, Gauteng, and describe the request clearly. Drelvek aims to acknowledge requests within five business days and respond within 30 days, subject to lawful extensions, identity checks and request complexity. If a request is refused or limited, the reason and available next step will be explained. A person may also contact the Information Regulator of South Africa through its official complaint channels after raising the matter with Drelvek.
This page was reviewed on 17 September 2026. A future material change will be accompanied by a revised date and a short explanation of the affected processing. Earlier versions may be retained for governance and audit purposes, but they will not be used to revive an expired consent choice.