Privacy Policy

Effective date: 21 September 2026

Coreline Commerce respects the privacy of its customers, prospective customers and website visitors.

This Privacy Policy explains what personal information Coreline Commerce may collect, why it is collected, how it may be used, how it may be shared, how it is protected and what rights may be available to you.

Coreline Commerce is a trading name associated with K2026801063 (Pty) Ltd, a South African registered business entity, directed by Ndinani Mbeki.

This Privacy Policy applies to information collected through the Coreline Commerce website, customer enquiries, purchases, project delivery, communications and related business activities.

1. Our approach to personal information

Coreline Commerce aims to collect and process personal information lawfully, fairly and transparently, and only to the extent reasonably necessary for legitimate business purposes.

Personal information is handled in accordance with applicable South African privacy and data-protection requirements, including the Protection of Personal Information Act 4 of 2013 (POPIA) where applicable.

POPIA establishes conditions for the lawful processing of personal information and provides data subjects with rights concerning their information.

2. Information we may collect

Depending on how you interact with Coreline Commerce, we may collect or receive information such as:

Contact information

This may include:

  • Name;

  • Email address;

  • Telephone or mobile number;

  • WhatsApp contact information; and

  • Other contact details you voluntarily provide.

Business and project information

When you enquire about or purchase a service, we may collect information necessary to understand and deliver the project, including:

  • Business name;

  • Business description;

  • Website information;

  • Product or service information;

  • Branding information;

  • Project requirements;

  • Project preferences;

  • Business goals relevant to the agreed service;

  • Content and files you provide; and

  • Other information reasonably necessary to perform the agreed work.

Account and access information

Depending on the service, you may provide or authorise access to third-party platforms such as:

  • Shopify;

  • Meta;

  • TikTok;

  • Google services;

  • Domain or website services; and

  • Other platforms required for the agreed project.

Coreline Commerce will seek to use appropriate account permissions or delegated access where reasonably available rather than requesting primary passwords.

Transaction information

We may process information relating to purchases and payments, including:

  • Service purchased;

  • Amount payable;

  • Payment status;

  • Payment date;

  • Transaction reference;

  • Refund information; and

  • Information required to investigate payment disputes or chargebacks.

Coreline Commerce does not intend to collect or store customers' full payment-card credentials through ordinary email or project communications.

Where a payment provider is used, payment information may be processed directly by that provider.

Technical and website information

When you use the Coreline Commerce website, certain technical or usage information may be collected through analytics and tracking technologies.

Depending on the technology in use, this may include:

  • IP address or approximate location derived from technical information;

  • Browser and device information;

  • Pages viewed;

  • Interactions with the website;

  • Referral information;

  • Approximate usage patterns; and

  • Other information generated by analytics or advertising technologies.

The exact information collected can depend on your device, browser, settings and the third-party services operating on the website.

3. How we collect information

Coreline Commerce may collect personal information:

  • Directly from you;

  • When you submit an enquiry;

  • When you communicate with us by email or WhatsApp;

  • When you purchase a service;

  • During customer onboarding;

  • When you provide project materials;

  • When you provide access to a third-party platform;

  • Through the Coreline Commerce website;

  • Through website analytics and advertising technologies; and

  • From third parties where this is permitted by applicable law.

Where applicable, POPIA generally requires personal information to be collected directly from the data subject unless an exception applies.

4. Why we use personal information

Coreline Commerce may use personal information for purposes including:

  • Responding to enquiries;

  • Providing quotations;

  • Processing purchases and payments;

  • Confirming orders;

  • Onboarding customers;

  • Communicating about projects;

  • Providing contracted services;

  • Configuring or optimising websites and stores;

  • Creating or implementing agreed creative work;

  • Providing customer support;

  • Delivering files and project materials;

  • Processing refunds;

  • Investigating payment disputes and chargebacks;

  • Maintaining business and transaction records;

  • Protecting accounts and systems;

  • Detecting or investigating suspected fraud or misuse;

  • Complying with legal obligations;

  • Sending relevant marketing communications where permitted by law; and

  • Improving our website, services and business operations.

We will not intentionally collect personal information for purposes unrelated to our legitimate business activities unless we have an appropriate lawful basis to do so.

5. Website analytics

Coreline Commerce may use Google Analytics and Shopify Analytics to understand website visits, usage and interactions, and to improve website functionality, content and performance.

These services may collect and process information according to the relevant third-party provider's privacy practices and applicable settings.

Coreline Commerce does not currently intend to use Google Tag Manager. This statement should be updated if the technology is implemented.

6. Advertising and marketing technologies

Coreline Commerce may use advertising and marketing technologies such as:

  • Meta Pixel; and

  • TikTok Pixel.

These technologies may be used to measure advertising activity, understand interactions with marketing campaigns, support advertising functionality and help us understand how visitors interact with the website.

Third-party advertising platforms may process information according to their own privacy policies and terms.

The technologies used on the website may change as Coreline Commerce's website and marketing systems develop. This policy should reflect the technologies actually active on the website.

7. Shopify customer accounts

Coreline Commerce uses Shopify as part of its website and e-commerce environment.

Where Shopify customer accounts are enabled, information associated with a customer account may be processed through Shopify's systems.

This may include account information, contact information, order information and other information necessary for account and order functionality.

Shopify operates its own privacy, security and data-processing arrangements. Customers should also review Shopify's applicable privacy documentation where relevant.

8. Email and marketing communications

Coreline Commerce uses email for customer communication and may use email marketing as part of its business activities.

Email may be used for:

  • Enquiries;

  • Quotations;

  • Onboarding;

  • Project communication;

  • Service updates;

  • Transactional messages;

  • Customer support;

  • Relevant promotional communications; and

  • Other legitimate business communications.

Where direct electronic marketing is subject to POPIA's requirements, Coreline Commerce will process personal information in accordance with applicable requirements, including consent and objection rules.

POPIA section 69 regulates direct marketing by electronic communication and provides conditions under which such marketing may be permitted. Marketing communications must provide an appropriate means for recipients to request that further communications cease, where required by law.

You may contact us at help.commercecoreline@outlook.com regarding marketing communications.

9. WhatsApp

Coreline Commerce may use WhatsApp to communicate with customers and prospective customers.

Information communicated through WhatsApp may include contact details, messages, project information, files and other information voluntarily shared during the conversation.

WhatsApp is operated by a third party, and its own terms, privacy practices and technical systems apply to information processed through the service.

Customers should avoid sending highly sensitive information through WhatsApp unless it is genuinely necessary.

10. Google Drive and Canva

Coreline Commerce may use Google Drive and Canva as part of its business and project workflow.

These services may be used to store, create, organise or collaborate on customer-provided materials and project deliverables.

Where customer information or files are processed through these services, the applicable provider's systems, terms and privacy practices may also apply.

Coreline Commerce will seek to limit access to information and files to what is reasonably necessary for the relevant business or project purpose.

11. Other third-party service providers

Coreline Commerce may use third-party providers to support its operations, website, payment processing, communications, analytics, advertising, storage, design and service delivery.

These providers may process personal information on behalf of Coreline Commerce or independently in accordance with their own terms and privacy policies.

Third-party services that may be relevant include:

  • Shopify;

  • Google Analytics;

  • Shopify Analytics;

  • Meta;

  • TikTok;

  • Google Drive;

  • Canva;

  • WhatsApp;

  • Email and email-marketing services; and

  • Payment providers.

Paystack is an intended payment provider but should not be treated as the confirmed payment provider unless it has been implemented.

The final list of third-party processors and service providers may change as the business develops.

12. Payment information

Coreline Commerce may receive information about payments and transactions necessary to administer customer purchases.

Where a payment provider processes the transaction, payment-card or other financial information may be handled directly by that provider.

Coreline Commerce does not request customers to send full payment-card numbers, CVV numbers, online-banking credentials or similar financial credentials through email or WhatsApp.

Payment providers may process personal information according to their own privacy and security practices.

13. Sharing personal information

Coreline Commerce may disclose or provide access to personal information where reasonably necessary for:

  • Providing a purchased service;

  • Operating the website;

  • Processing payments;

  • Providing communications;

  • Storing or managing project files;

  • Operating analytics;

  • Supporting advertising and marketing;

  • Investigating fraud or payment disputes;

  • Obtaining professional or technical assistance where necessary;

  • Complying with legal obligations;

  • Responding to lawful requests from authorities; or

  • Protecting the rights, property or security of Coreline Commerce, its customers or others.

Coreline Commerce does not intend to sell customers' personal information as a standalone commercial product.

14. International processing

Some third-party service providers used by Coreline Commerce may store or process information outside South Africa.

This may occur because a provider operates international infrastructure or is based outside South Africa.

Where personal information is transferred to or processed by a third party in another country, Coreline Commerce will take the steps required by applicable law in the circumstances.

International processing can depend on the services and providers actually used at the relevant time.

15. Retention of personal information

Coreline Commerce will retain personal information for as long as reasonably necessary for the purposes for which it was collected, including:

  • Providing services;

  • Maintaining customer and business records;

  • Resolving disputes;

  • Administering payments and refunds;

  • Complying with legal obligations;

  • Protecting legitimate business interests;

  • Maintaining appropriate transaction records; and

  • Dealing with security or fraud concerns.

Different categories of information may therefore be retained for different periods.

Information may also remain in third-party systems according to the applicable provider's retention practices.

Where information is no longer reasonably required and there is no legal or legitimate business reason to retain it, Coreline Commerce may securely delete, anonymise or otherwise dispose of it as appropriate.

16. Accuracy of personal information

Coreline Commerce aims to keep personal information reasonably accurate, complete and up to date.

If your information changes, you may contact us and request that relevant information be corrected or updated.

17. Your privacy rights

Subject to applicable law and any applicable limitations, you may have rights concerning your personal information, including the right to:

  • Request confirmation of whether we hold personal information about you;

  • Request access to personal information we hold about you;

  • Request correction or updating of inaccurate or incomplete information;

  • Request deletion where applicable;

  • Object to certain processing;

  • Object to certain direct marketing;

  • Withdraw consent where processing is based on consent, subject to lawful limitations;

  • Raise a complaint concerning the processing of your personal information; and

  • Exercise other rights provided by applicable law.

The Information Regulator of South Africa provides forms and procedures for requests relating to correction, deletion, objection and complaints under POPIA.

Some rights are subject to statutory conditions and exceptions. A request does not necessarily mean that Coreline Commerce must delete information where there is a lawful reason to retain it.

18. How to exercise your rights

For privacy requests, corrections, objections or questions concerning personal information, contact:

Coreline Commerce
Associated registered entity: K2026801063 (Pty) Ltd
South Africa
Email: help.commercecoreline@outlook.com

Please provide enough information for us to identify the relevant information or relationship.

Coreline Commerce may need to verify the identity of a person making a request before providing access to personal information or making certain changes.

19. Complaints

If you have a concern about how Coreline Commerce handles your personal information, please contact us first so that we have an opportunity to investigate and address the matter.

You may also have the right to lodge a complaint with the Information Regulator of South Africa, where applicable. The Regulator provides channels for POPIA complaints and related privacy matters.

20. Security compromises

Coreline Commerce takes reasonable technical and organisational measures appropriate to the circumstances to protect personal information against unauthorised access, loss, misuse, alteration or disclosure.

No electronic system or method of communication can be guaranteed to be completely secure.

If a security compromise occurs that triggers notification obligations under applicable law, Coreline Commerce will take the required steps.

Further information may be provided in the Coreline Commerce Security Policy, where available.

21. Children's information

Coreline Commerce's services are intended for businesses and general adult customers.

We do not knowingly seek to collect children's personal information unless it is necessary for a legitimate and lawful purpose and the applicable legal requirements are satisfied.

If you believe that a child has provided personal information to Coreline Commerce without the appropriate authorisation, please contact us.

22. Automated decision-making

Coreline Commerce does not currently intend to make decisions producing legal or similarly significant effects about customers solely through automated processing of their personal information.

Analytics, advertising and website technologies may nevertheless involve automated processing, measurement or profiling by third-party providers for their own purposes.

23. Cookies and similar technologies

Coreline Commerce uses, or may use, cookies and similar technologies as part of its website and analytics environment.

These may include technologies associated with:

  • Shopify;

  • Google Analytics;

  • Shopify Analytics;

  • Meta Pixel; and

  • TikTok Pixel.

Cookies and similar technologies may be used for website functionality, analytics, advertising measurement and marketing.

The specific cookies and technologies used may change as the website and its services develop.

For more information about cookies and available controls, please see the Cookie Policy.

24. Links to other websites

The Coreline Commerce website may contain links to third-party websites, platforms or services.

Coreline Commerce is not responsible for the privacy practices or content of third-party websites.

You should review the privacy policies of third-party websites before providing them with personal information.

25. Changes to this Privacy Policy

Coreline Commerce may update this Privacy Policy when its services, technology, data-processing practices, third-party providers or legal requirements change.

The version published on this website represents the current version of the policy.

Where appropriate, material changes may be communicated through the website or other reasonable communication channels.

26. Governing law

This Privacy Policy is governed by the laws of the Republic of South Africa, subject to applicable mandatory rights and protections.

Nothing in this Privacy Policy is intended to remove or limit any privacy or data-protection right that cannot lawfully be excluded or limited.

27. Contact

For privacy-related questions, requests or concerns, contact:

Coreline Commerce
Associated registered entity: K2026801063 (Pty) Ltd
South Africa
Email: help.commercecoreline@outlook.com

Policy date: 21 September 2026