Privacy Policy

Legacy Geckos ("we", "us", "our") operates this website and the Legacy Geckos online store from Atlasville, Boksburg, Gauteng, South Africa. We are the "responsible party" for the personal information you provide to us, as that term is used in the Protection of Personal Information Act, 2013 (POPIA).

We only collect personal information that is necessary for the purposes set out below. This may include:

• Identity & contact details: your name, email address, and phone number, provided when you create an account, place an order, or contact us.
• Order & delivery information: billing and shipping address, and the details of the products you order.
• Payment information: we do not store full card details. Card payments are processed by our payment provider under their own secure, PCI-compliant systems.
• Communication records: messages you send us via WhatsApp, email, or the contact form.
• Technical data: basic device and browsing information collected through cookies and analytics to keep the site working and secure.

We process your personal information only for specific, lawful purposes, including:

• Processing and fulfilling your orders, including delivery and order tracking.
• Communicating with you about your orders, your account, and your enquiries.
• Keeping accurate breeding and sales records for the animals we sell.
• Preventing fraud and keeping the site and its users secure.
• Meeting legal, tax, and regulatory obligations.

We process on the lawful bases of the contract with you, our legitimate interests in running the business, and our legal obligations. Where we rely on consent (for example, for marketing), you may withdraw it at any time.

We do not sell your personal information. We share it only with service providers who help us operate, each under a duty to keep it secure and use it only for the purpose we give them:

• Payment processors, to take and refund payments.
• Couriers and shipping services, to deliver your order.
• Hosting and analytics providers, to keep the site online and understand how it is used.

We may also disclose information where required by law or to protect our rights, safety, or the safety of others.

Some of our service providers may process information outside South Africa. Where that happens, we ensure the transfer is made with appropriate safeguards consistent with POPIA and, where relevant, the GDPR.

We keep your personal information only for as long as we need it for the purposes above, or as required by law (for example, tax and animal-movement record-keeping). After that, we delete it or anonymise it.

POPIA gives you the right, subject to lawful limits, to:

• Access the personal information we hold about you.
• Ask us to correct inaccurate or out-of-date information.
• Ask us to delete your information, where lawful.
• Object to, or ask us to restrict, certain processing.
• Withdraw consent where processing is based on consent.
• Lodge a complaint with the Information Regulator (South Africa) if you believe we have mishandled your information.

To exercise any of these rights, contact us through the contact page. We will respond within a reasonable time, and no later than the period required by POPIA.

We take appropriate technical and organisational measures to protect your personal information against loss, theft, unauthorised access, and misuse. No method of transmission or storage is completely secure, but we work to protect your information using industry-standard safeguards.

This site is not directed at children under 18, and we do not knowingly collect personal information from them. If you believe a child has provided us with information, please contact us so we can delete it.

We use essential cookies to keep the site working and optional analytics cookies to understand usage. You can control cookies through your browser settings; disabling them may affect some features of the site.

We may update this policy from time to time. We will revise the "last updated" date above when we do. Material changes will be highlighted on the site where appropriate.

For any privacy question, request, or complaint, contact us via the contact page or by WhatsApp at +27 71 678 5507. If you are not satisfied with our response, you may complain to the Information Regulator (South Africa) at inforegulator.org.za.