Privacy policy

Last updated: 24 October 2026

This policy explains how personal information connected with the FullyKitted store is handled when you browse, contact us, or place an order.

Information we handle

Depending on how you use the store, information may include your name, contact details, enquiry contents, order and delivery details, and transaction or payment-status information. Store and advertising services may also process technical, device, cookie, or interaction information.

How we use it

We use information to answer enquiries, take and fulfil orders, arrange delivery, process or reconcile payments, operate and protect the store, meet applicable record-keeping duties, and measure advertising where those tools are enabled.

We need the contact details and enquiry information you provide to respond to a message. We need relevant order, delivery and payment information to process and fulfil an order. If required information is missing, we may be unable to respond or complete the requested service.

Service providers

Shopify hosts and operates the store. Payfast supports payment services. Aramex supports delivery. Meta Pixel and Conversions API support advertising measurement when enabled. These services may process information needed for their functions.

Shopify and Network Intelligence

Shopify stores this store's data in the United States. Network Intelligence is enabled for this store. Shopify may use information from your interactions with this store and other Shopify merchants to improve Shopify products and support advertising targeting and personalization. Shopify is responsible for processing information for these Network Intelligence purposes.

For Shopify's handling of information and rights related to these features, read the Shopify Consumer Privacy Policy or use the Shopify Privacy Portal.

Cookies and advertising

Shopify and advertising services may use cookies or similar technologies for store features, security, and advertising measurement. You can adjust cookie settings in your browser. Browser controls may not stop all processing by these services.

Contact email verification

We use Cloudflare Turnstile on the Contact page to help prevent automated abuse. When you request the email address, Turnstile processes signals such as your IP address and browser or network information. Our verification service checks the challenge result before revealing the address. Cloudflare also uses Turnstile signals to improve bot detection. Read Cloudflare's Turnstile Privacy Addendum and Cloudflare's Privacy Policy.

Storage and transfers

We keep information for as long as it is needed for the purposes described here and for applicable legal or operational requirements. The period depends on the type of record. When information is no longer needed, it will be deleted or made non-identifiable where appropriate.

We take reasonable technical and organisational steps to protect personal information against loss, unauthorised access, use or disclosure. No method of storage or transmission can be guaranteed completely secure.

Some service providers may process information outside South Africa. Where a cross-border transfer is subject to POPIA, the required legal conditions must be met.

Your rights

Subject to applicable law, you may ask to access or correct your personal information, request deletion where permitted, and object to or withdraw consent for processing where the law gives you that choice. You may object to direct marketing. Use the Contact page to make a request or ask a question. We may need to verify your identity before acting on a request.

Complaints

You may complain to the Information Regulator of South Africa. Its official contact details are at inforegulator.org.za/contact-us/.

Changes

We may update this policy when our practices or legal requirements change. The current version will appear on this page with its effective date.