Privacy notice

Who we are

Salvagente Pty Ltd (registration 2007/023919/07), Menlyn Maine, Pegasus Building 1, 210 Amarand Avenue, Waterkloof Glen ext 2, Pretoria, 0181, decides how your personal information is used on salvagente.co. In South African law it is the “responsible party”; in European law, the “controller”. Contact: info@salvagente.co.za · +27 (0) 72 422 1967.

• Information Officer: our chief executive officer, who as head of the company is its Information Officer under the Protection of Personal Information Act. Contact: info@salvagente.co.za, marked “For the Information Officer”.

What we collect, why, and on what basis

Please don’t send us health information in a message, a chat or a delivery note. We don’t need it.

Required information. Name, email, phone and address are required to place an order. Without them, we cannot deliver or support the sauna.

Marketing. We do not use your name, email address, phone number or address for marketing, and we do not give customer lists to advertising platforms. If you accept advertising cookies, Google and Meta may show you our adverts on other websites and apps. No automated decisions with legal or similarly significant effects are made about you.

Who receives it, and where

We store order and contact details on Amazon Web Services servers in Cape Town, South Africa. Our website is delivered through Amazon’s content delivery network, which may handle technical data at the location nearest you.

To email you about your order or enquiry (order confirmations, bank-transfer instructions and replies to your messages), we send your name, contact details, delivery address and order details through Amazon Simple Email Service in Ireland, in the European Union. Amazon handles this information only for us and on our instructions, under a written data processing agreement, and is bound by the EU General Data Protection Regulation.

Other recipients:

• Our mailboxes and customer records. Our mailboxes (info@salvagente.co.za) are on Salvagente Pty Ltd’s own Google Workspace account. Google hosts them as our service provider, under its data processing terms, in the United States and other countries. Enquiries are moved into our customer-relationship system, HubSpot, under HubSpot’s data processing agreement. HubSpot stores this data in the United States. We keep no copy of form submissions on the website.
• WhatsApp. If you message us on WhatsApp, including photos, your message goes through WhatsApp, a Meta service, under WhatsApp’s own terms and privacy policy. We keep it on our business phone and may move it into our customer-relationship system. If you prefer, email us instead.
• HubSpot (cookie banner, chat and visit counts). When our cookie banner and chat window are shown, they are provided by HubSpot, which acts for us under its data processing agreement and stores data in the United States. HubSpot receives your IP address, browser details and the page you are on, so that it can show the banner and record your choice; what you type in the chat; and, if you accept analytics cookies, the pages you view. If you then give us your email address, for example in the chat, HubSpot may link the pages you viewed to your enquiry. We have switched off HubSpot’s use of our website data for its own products.
• Google, only if you accept. Google Analytics (analytics cookies) is provided by Google acting for us, under Google’s data processing terms. Google Ads (advertising cookies) measures our adverts and shows them to people who have visited our site; for this, Google also uses the information for its own purposes, as an independent controller, under its privacy policy (opens in a new tab) ↗. Google LLC is in the United States; for visitors in the European Economic Area and Switzerland, the Google company responsible is Google Ireland Limited.
• Meta, only if you accept advertising cookies. The Meta Pixel tells Meta (Facebook and Instagram) which pages you view on our site, so that we can measure our adverts and show them to people who have visited. Meta uses this information for its own purposes as well, under its privacy policy (opens in a new tab) ↗. Meta processes it in the United States and other countries.
• Where these never run. No analytics or advertising tags run on our checkout and order pages, and no advertising tags run on our Knowledge Centre or studies pages.
• Card payments. Your name, email, billing address, order amount and card details go to Stripe (United States). Stripe is the payment service used by Memutar Inc (Delaware, United States), which receives card payments on our behalf. Your card number goes straight from your browser to Stripe; we never see or store it. Stripe also uses payment data for its own purposes, such as fraud prevention, under its own privacy policy.
• Delivery partners in South Africa and, for export orders, in your country receive your name, phone and delivery address.
• Accounting. Invoices and payment records (name, contact details, order and payment details) are kept in our accounting system, Sage, which stores them in South Africa.
• Our professional advisers, and authorities where the law requires it.

We do not sell your personal information.

Sending information outside South Africa. We transfer your information outside South Africa only to recipients bound by law or by contract to protect it to a standard substantially similar to South African law, and where the transfer is needed to complete your order or answer your enquiry, or where you have agreed to it, for example by accepting analytics or advertising cookies.

Protection for EU and UK data. For information about people in the EU or UK, recipients outside those areas are covered either by an adequacy decision (including the EU–US Data Privacy Framework, for certified US recipients) or by standard contractual clauses in their data processing terms.

Outlet map (Google Maps)

How the map works.

• Our outlets page shows a globe drawn by your browser from our own outlet list.
• The map loads nothing from Google, and sends nothing to Google, until you choose a country on the globe. Choosing a country opens a street map provided by Google. (Google Analytics and Google Ads are separate: they load only if you accept those cookies. See “Cookies” below.)

What Google receives. When you choose a country, your browser loads Google Maps directly from Google’s servers: maps.googleapis.com and maps.gstatic.com and related Google servers, and, for the map’s lettering, fonts.googleapis.com and fonts.gstatic.com.

Google then receives:

• your IP address;
• information about your device and browser (such as browser type, language, screen size and operating system);
• the address of the page you are on;
• what you do on the map (the area you look at, how far you zoom, and which markers you open).

Google may also set cookies or store similar identifiers in your browser.

We do not send Google your name, your contact details or anything you have typed on our site, and we do not ask for or receive your location.

Google is responsible for its own use of this information.

• Google processes this information for its own purposes as an independent controller (in South Africa, “responsible party”), under Google’s own privacy policy, not on our instructions.
• We receive from Google only a count of how often the map was loaded.
• You can read how Google uses the information, and your choices, at policies.google.com/privacy (opens in a new tab) ↗.
• For visitors in the European Economic Area and Switzerland, Google’s privacy policy names Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) as the Google company responsible. For visitors in the United Kingdom, it names Google LLC (1600 Amphitheatre Parkway, Mountain View, California 94043, USA). For other visitors, including South Africa and Australia, Google’s privacy policy says it applies to the services offered by Google LLC and its affiliates.

If you are in South Africa:

• Choosing a country sends the information above to Google in the United States and other countries where Google operates.
• We rely on your consent, given by that choice, for this transfer (Protection of Personal Information Act, section 72(1)(b)). Google is also bound by its published data-protection terms and, for its European company, by the EU General Data Protection Regulation (section 72(1)(a)).
• If you do not want this, do not choose a country on the globe.

If you are in the European Union, the EEA, Switzerland or the United Kingdom:

• We load Google Maps only with your consent, which you give by choosing a country on the globe after the notice beside it (GDPR Article 6(1)(a); UK GDPR Article 6(1)(a); the e-Privacy rules on storing information on your device).
• Your consent lasts only while you stay on that page. We do not record it, and we do not set a cookie to remember it.
• Closing the page withdraws it for the future. It does not undo what Google has already received.
• Some of this information is processed by Google LLC in the United States. Google LLC is certified under the EU–US Data Privacy Framework and its UK Extension, which the European Commission and the UK government have recognised as providing adequate protection.

If you are in Australia: by choosing a country on the globe, you agree that the information above is disclosed to Google, which is located in the United States and other countries. You acknowledge that we have no control over how Google handles it, and that the Australian Privacy Principles may not apply to Google’s handling of it.

Directions. Each outlet has a “Directions” link. It opens Google Maps in a new browser tab, with the outlet’s coordinates as the destination. We do not send your location. If Google asks for it, that is Google’s own request on Google’s site, under Google’s privacy policy.

Cookies

Analytics and advertising cookies are set only if you accept them in our cookie banner. You can change your choice at any time from “Cookie settings” at the foot of the page. Changing it does not undo what was collected while you had accepted.

You can delete or block cookies in your browser. The cart and checkout won’t work without their cookies.

Our cookie banner treats a Global Privacy Control signal from your browser as a refusal of analytics and advertising cookies. Our site does not respond to the older “Do Not Track” signal. If you accept advertising cookies, Google and Meta may recognise you on other websites and apps. Google may also do so once you open the outlet map.

Meta Pixel in the EU, EEA and UK. We and Meta are jointly responsible for collecting information through the Meta Pixel and sending it to Meta, under Meta’s controller terms. Meta alone is responsible for what it does with the information afterwards. You can exercise your rights with us or with Meta.

How long we keep it

Your rights

You can ask us to:

• give you a copy of your information;
• correct it;
• delete it;
• stop or limit using it;
• object to how we use it.

Email info@salvagente.co.za. We reply within 30 days. Information we must keep by law, such as invoices, can’t be deleted until its period ends.

• In the EU and UK you also have the right to data portability, and to withdraw consent at any time. Withdrawal does not affect earlier use. You may complain to the data protection authority where you live, or, in the UK, to the Information Commissioner’s Office (opens in a new tab) ↗.

Security

The site uses encrypted connections, and access to customer data is limited to the people who need it. Card numbers never reach our servers.

Children

Our site is not meant for anyone under 18. We do not knowingly collect children’s information.

Changes

If we change this notice, the date at the top changes too. We will tell customers about significant changes by email.