DokKit Privacy and Cookies Policy

Responsible party

DokKit (Pty) Ltd, registration number 2026/470231/07, is the responsible party for personal information processed for the Website and DokKit’s business purposes.

Physical address: 177 Springbok Road, Bloemfontein, Free State, 9301, South Africa. Privacy contact and Information Officer: Mr Elzano André Cox, elzano@dokkit.co.za, +27 83 976 0291. General support: support@dokkit.co.za.

Scope

This policy applies when you browse the Website, use the cart, place an order, pay through PayFast, download a Product, contact support, change your privacy choices or interact with DokKit’s online marketing.

Personal information DokKit processes

Depending on the interaction, DokKit may process your name, business name, email address, telephone number, billing or order details, selected Products, order amount, payment status and reference, policy acceptance, download and security events, support correspondence, consent preferences, IP address, browser and device information, and analytics or advertising identifiers where consent permits.

DokKit does not ask you to send full payment-card details, passwords or one-time PINs. PayFast processes payment credentials under its own privacy practices.

Where information comes from

Information comes directly from you, from your device or browser, from PayFast’s payment confirmation, and from the service providers used to host, protect, measure and operate the Website.

Why DokKit processes information

DokKit processes personal information to provide the cart and checkout; create and verify orders; receive payment status; deliver and restore secure access; enforce the Template Licence; prevent fraud and abuse; respond to support, privacy and refund requests; keep financial and transaction records; maintain security; improve the Website; measure marketing where consent permits; and comply with legal obligations.

The applicable justification may include performance of a contract, compliance with law, consent, protection of legitimate interests or a combination permitted by the Protection of Personal Information Act.

Essential browser storage

Essential storage supports the cart, secure checkout, payment confirmation, download security and saved privacy choice. It operates because the Website cannot provide those requested functions reliably without it.

Google Analytics 4

DokKit may load the Google tag with analytics storage denied. Before permission, Google may receive limited consent and cookieless measurement signals without setting analytics cookies. If you enable analytics, Google Analytics 4 may record page views and shop events such as product views, cart additions, checkout starts and completed purchases.

DokKit must not intentionally send customer document contents, checkout names, email addresses, telephone numbers, payment credentials or secure download tokens to Google Analytics.

Meta measurement

If you enable marketing measurement, Meta Pixel and Conversions API may measure visits and shopping actions connected with Facebook and Instagram campaigns. Browser and server events may use matching event identifiers to reduce duplicate reporting.

DokKit must not intentionally send customer document contents, payment credentials or secure download tokens to Meta. Technical identifiers such as IP address, browser information and permitted cookies may be processed only in accordance with the consent choice and applicable law.

Service providers and recipients

DokKit may share the minimum necessary information with PayFast; hosting, database, secure file-storage and email-delivery providers; security and technical-support providers; Google and Meta when the corresponding consent allows; professional advisers; and public authorities where lawfully required.

These providers act under their own legal duties or as operators that process information for DokKit. DokKit does not sell personal information.

Cross-border processing

Some service providers or their systems may be located outside South Africa. Where personal information is transferred across borders, DokKit will use a basis and safeguards permitted by section 72 of the Protection of Personal Information Act.

Security

DokKit uses reasonable technical and organisational safeguards appropriate to its size, systems and risks, including access controls, secure payment processing, restricted download tokens, service-provider controls, backups and security monitoring.

No internet system is completely secure. If DokKit has reasonable grounds to believe personal information was accessed or acquired by an unauthorised person, it will investigate and notify the Information Regulator and affected data subjects where required by law.

Retention

DokKit keeps personal information only as long as reasonably needed for the purpose, a legal requirement, a dispute or a legal hold. Order, payment, licence-acceptance and transaction records are generally retained for five years after the order. Download and security records are generally retained for the 12-month access-support period unless needed longer for security or a dispute.

Support correspondence is retained only as long as reasonably required, normally no longer than three years after closure. Consent records are kept while needed to demonstrate the choice. At the end of a retention period, information is deleted, destroyed or de-identified where reasonably practicable.

Your rights

Subject to applicable law, you may ask whether DokKit holds your personal information; request access; request correction or deletion of inaccurate, irrelevant, excessive, outdated, incomplete, misleading or unlawfully obtained information; object to processing in permitted circumstances; withdraw consent for future optional processing; and lodge a complaint.

Email elzano@dokkit.co.za or support@dokkit.co.za. DokKit may request reasonable identity verification before acting.

Direct marketing

DokKit will use electronic direct marketing only where permitted by law. Marketing messages will identify the sender and provide a practical way to opt out. An opt-out stops future marketing through that channel but does not stop essential order, payment, download, licence, security or support messages.

Children

The Website and Products are intended for business users and are not directed at children. DokKit does not knowingly invite a child to place an order without the involvement of a competent adult.

Privacy complaints

Please contact DokKit first so the issue can be investigated. You may also lodge a complaint with the Information Regulator (South Africa). Current contact and complaint information is available at https://inforegulator.org.za/.

Changes to this policy

DokKit may update this policy when systems, providers, laws or practices change. The Website will display the effective date and current version. A material change affecting an existing order will not remove rights already acquired.

Privacy-control requirements

• Essential storage may operate without optional analytics or marketing consent.
• Analytics and marketing choices must be separate, clear and changeable.
• Turning an optional category off must stop new events in that category.
• The Website must not place secure download tokens or direct identifiers in analytics payloads or page URLs.
• The live vendor list and retention settings must match this policy.