Privacy

Draft — under review. I'm having these checked; until then they describe how I already work.

I keep only what I need to sell you something, deliver it and answer your messages. This is what that is, and what you can ask me to do with it.

Who's responsible

Responsible party: Johan's Audio — sales@johansaudio.co.za, +27 82 650 9253
Information officer: Johan — on the same email and phone as above

What I keep

When you order: your name, email address, phone number and delivery address, what you bought, what it cost and how the order is going.
When you send a message: your name, email address, your phone number if you give it, the topic and what you wrote.
When you give me a testimonial: the words and the name you agree to, which appear publicly on the About page until you ask me to take them down.
When I manage the shop: a log of the changes I make to listings and orders, so I can see what happened to an order later.
To stop abuse: a scrambled form of your internet address, and of your email address when an order receipt is sent, made with a secret key so it can't be turned back into the address, used only to count how many orders and messages come from one internet address, and how many receipts go to one email address, in a short time. I don't store the addresses themselves in that count, and each count covers only a short window — 15 minutes to a day — after which it starts again; a count that's no longer needed is deleted within the hour. A scrambled form of your internet address, made the same way, is also kept with an unpaid order, so no one address can hold more than 6 pieces at once; it's wiped as soon as the order is paid, cancelled or lapses.

What I don't do

There are no tracking, analytics or advertising cookies on this site. Your basket lives in your own browser's storage and isn't sent to me until you place an order — the site only checks the pieces in it against current stock and prices. The only cookies are the two that keep me signed in to manage the shop and recognise my own devices; they're set only when I sign in, never for customers. I never sell or rent your details.

Why I keep it

To take, deliver and support your order — including the warranty and returns — because you've asked me to sell you something.
To answer the messages you send me.
To keep the sales records the law requires.
To keep the site working and stop it being abused.

Who sees it

The courier, for a delivered order: your name, phone number and delivery address, so they can reach you on the day.
Cloudflare, who host the site, its database and photos, and send its email. Their request logs record the internet address of each visit for a short time; my own log lines mask email addresses.

How long I keep it

Orders: 5 years from the day you ordered, for the sales records the law asks me to keep; then I delete it. An order still waiting on payment or delivery stays until it's settled.
Messages: A year from the last message in the conversation, then I delete it. A message the form held back as possible spam goes after 14 days.
Shop change log: A year, then it's deleted.

Your rights

Under the Protection of Personal Information Act you can ask me what I hold about you, ask me to correct it or delete it, and object to how I use it. Email sales@johansaudio.co.za and I'll answer. Some order records I may have to keep for as long as the law requires; I'll tell you if that applies.

If you're unhappy with how I've handled your information, you can complain to the Information Regulator.