Privacy policy

Company Particulars

Registered name: Grrowl Nutrition Brands (Pty) Ltd

Registration number: 2021/672012/07

Trading and physical address: Unit 6 & 7 City Deep Mini Park, 120 – 124 Outspan Road, City Deep, Johannesburg, South Africa

Telephone: +27 60 789 6495 / +27 76 185 2844

Email: info@grrowl.co.za

Website: www.grrowl.co.za

Last updated: 31 August 2026

1. Who we are

Grrowl Nutrition Brands (Pty) Ltd (registration number 2021/672012/07) is the responsible party for the personal information we collect through our Website, as contemplated in the Protection of Personal Information Act 4 of 2013 ("POPIA"). Our address, telephone number and email address are set out under Company Particulars above.

Information Officer: Ridhwaan Motalib, info@grrowl.co.za

2. What personal information we collect

We collect the following categories of personal information: your name and surname; your email address and contact telephone number; your delivery and billing address; your order history and communications with us; and technical information such as your IP address, browser type and pages visited on the Website. Where you pay by card, your card details are collected and processed directly by Payfast (Pty) Ltd; we do not receive or store your full card number or CVV.

3. Why we process your personal information

We process your personal information in order to: accept and process your order; take payment through Payfast; deliver your order and communicate with you about it; handle returns, refunds and queries; comply with our legal obligations, including tax and record-keeping obligations; detect and prevent fraud; and, where you have agreed to it, send you marketing about our products.

4. Lawful basis

We process your personal information because it is necessary to conclude or perform the contract with you, because we are required to do so by law, because it is necessary for our legitimate interests in running and protecting our business, or because you have given consent. Where processing is based on consent, you may withdraw that consent at any time.

5. Direct marketing

We will only send you electronic direct marketing where you have consented to receive it or where you are an existing customer and the marketing relates to similar products. Every marketing message includes an unsubscribe facility, and you may opt out at any time at no cost by using that facility or by emailing us.

6. Who we share your information with

We share personal information only as necessary with: Payfast (Pty) Ltd for payment processing; our courier and delivery partners for the purpose of delivering your order; our website, hosting and IT service providers; and our professional advisers and regulators where required by law. We do not sell your personal information. Each operator we appoint is required to process your information only on our instructions and to keep it secure.

7. Cross-border transfers

Some of our service providers may host or process data outside South Africa. Where this happens, we take reasonable steps to ensure that the recipient is subject to laws, binding rules or a contract that provide an adequate level of protection substantially similar to POPIA.

8. Security

We take appropriate, reasonable technical and organisational measures to protect personal information against loss, damage or unauthorised access, including encrypted connections on the Website, access controls, and the use of a PCI-DSS compliant payment provider. No transmission over the internet can be guaranteed to be completely secure, and you provide information at your own risk.

9. How long we keep your information

We keep your personal information only for as long as necessary for the purposes set out above, or for as long as we are required to keep records by law (including a period of five years for tax and accounting records), after which it is deleted or de-identified.

10. Your rights

You have the right to ask us what personal information we hold about you, to ask us to correct or delete information that is inaccurate, irrelevant, excessive, out of date or unlawfully obtained, to object to the processing of your information in certain circumstances, and to withdraw consent. To exercise any of these rights, please contact our Information Officer at the address above. We may ask you to verify your identity before acting on a request.

11. Cookies

Our Website uses cookies and similar technologies to keep your shopping basket working, remember your preferences and understand how the Website is used. You can block or delete cookies through your browser settings, but some parts of the Website may not function properly if you do.

12. Complaints

If you are not satisfied with how we have handled your personal information, please contact us first. You also have the right to lodge a complaint with the Information Regulator (South Africa), JD House, 27 Stiemens Street, Braamfontein, Johannesburg, 2001, email complaints.IR@justice.gov.za.

13. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. The current version is always available on the Website and is effective from the date shown under Company Particulars.