Privacy Policy

1. Introduction

NewJack respects your privacy and is committed to protecting your personal information.

This Privacy Policy explains how we collect, use, store, share and protect personal information when you:

• Visit our website (www.newjack.co.za);
• Purchase our products;
• Contact us;
• Join our mailing list or WhatsApp community;
• Attend a NewJack event or activation;
• Interact with us on social media; or
• Participate in competitions, promotions or surveys.

This policy applies in accordance with the Protection of Personal Information Act 4 of 2013 (POPIA).

2. Information We Collect

We may collect the following categories of information:

Information you provide:

• Full name & surname;
• Email address;
• Mobile phone & WhatsApp number;
• Billing and delivery address (including PEP PAXI store codes where applicable);
• Order and transaction details;
• Clothing size and product preferences;
• Communications and inquiries sent to NewJack;
• Competition or event registration details;
• Photographs, videos or testimonials submitted with your explicit permission.

Information collected automatically:

When you use our website, we may collect:

• IP address;
• Browser type and settings;
• Device type and operating system;
• Website usage information and pages viewed;
• Referring website URLs;
• Cookies and similar technologies.

Payment information:

Payments may be processed by trusted third-party payment providers (e.g. PayFast, Paystack, manual EFT bank transfer).

NewJack does not ordinarily store your complete debit-card or credit-card details on our servers. Payment information is handled according to the payment provider's own high-security and privacy requirements (PCI-DSS compliance).

3. How We Use Your Information

We may process your personal information to:

• Process, fulfill, and deliver your streetwear orders;
• Confirm payments and issue digital receipts;
• Provide responsive customer support via email or WhatsApp;
• Manage returns, size exchanges, and refunds;
• Send order tracking and delivery status notifications;
• Administer customer accounts and Tribe membership perks;
• Operate popup activations, launches, competitions, and community events;
• Improve our website performance, product catalog, and user experience;
• Prevent fraud, security compromises, and misuse;
• Comply with statutory legal, accounting, and tax obligations;
• Send marketing messages where legally permitted or consented to;
• Create customer features or promotional content where consent has been obtained.

We will only process personal information where we have a lawful and reasonable basis for doing so under POPIA.

4. Marketing Communications

We may send you promotional communications by email, SMS, WhatsApp or another approved channel where:

• You have explicitly opted in or consented;
• You are an existing customer and the communication relates to similar NewJack products or drops; or
• The communication is otherwise permitted by South African law.

You may unsubscribe from promotional marketing at any time by:

• Using the unsubscribe link provided at the bottom of our emails;
• Replying “STOP” to WhatsApp or SMS messages where applicable; or
• Contacting NewJack directly at newjackrsa@gmail.com.

Please note: Transactional messages relating to an active order (such as delivery updates or receipts) will still be sent after you unsubscribe from marketing broadcasts.

5. Cookies & Tracking Technologies

Our website may use cookies to:

• Keep the website functioning smoothly;
• Remember your cart items and currency preferences;
• Maintain your shopping cart state across browser tabs;
• Analyze overall website traffic and performance;
• Measure marketing activity effectiveness;
• Enhance and personalize your browsing experience.

You may disable non-essential cookies through your browser settings. Some website features may not function correctly if essential functional cookies are disabled.

6. Sharing Personal Information

We may share relevant, minimized information with trusted third-party service providers who assist us in operating our business, including:

• Payment processors (PayFast, Paystack);
• Courier and delivery services (The Courier Guy, PEP PAXI);
• Website-hosting and database providers (Vercel, Neon Postgres);
• E-commerce platforms and email infrastructure providers (Resend, Nodemailer);
• Accountants, auditors, and professional legal advisers;
• Technology, infrastructure, and monitoring security providers;
• Government or regulatory authorities where legally required by South African courts or legislation.

Service providers may only receive the specific information reasonably required to perform their contracted functions.

NewJack NEVER sells, rents, or trades customer personal information to third parties.

7. Cross-Border Processing

Some of our technical service providers (such as cloud hosting or global communication APIs) may process or store information on secure servers located outside of South Africa.

Where personal information is transferred internationally, NewJack takes reasonable steps to ensure that appropriate contractual, legal, or technical security safeguards apply in line with POPIA Section 72 regulations.

8. Information Security

NewJack implements reasonable technical and organizational safeguards to protect personal information against loss, unauthorized access, misuse, alteration, destruction, or unlawful disclosure.

While we maintain strong technical controls, no online platform can guarantee 100% absolute security. Customers must also safeguard their own account passwords, devices, and credentials.

9. Data Retention

We retain personal information only for as long as reasonably necessary to:

• Fulfill the purpose for which it was originally collected;
• Maintain financial, order, and tax audit records required by SARS;
• Resolve disputes and enforce legal agreements; or
• Comply with applicable legal obligations.

Information that is no longer required will be securely deleted, destroyed, or anonymized where reasonably possible.

10. Your Data Subject Rights (POPIA)

Subject to applicable law, you have the right to:

• Request confirmation of whether NewJack holds your personal information;
• Request access to the personal records we hold about you;
• Request correction or updating of inaccurate, incomplete, or out-of-date information;
• Request deletion of information that NewJack may no longer lawfully retain;
• Request restriction of certain processing activities;
• Withdraw your consent at any time;
• Object to direct marketing processing; and
• Request details regarding third parties who have received your information.

We may require proof of identity before verifying and executing a data subject access request.

11. Children's Information

Our website is not intended to collect personal information directly from children under the age of 18 without appropriate consent from a parent or legal guardian.

Where a person under 18 years of age makes a purchase, the order should be completed or authorized by a parent or legal guardian.

12. Security Incidents

Where NewJack becomes aware of a security compromise affecting personal information, we will promptly investigate the incident and issue required legal notifications to the Information Regulator and affected individuals in accordance with POPIA requirements.

13. Third-Party Links

Our website may contain links to external third-party websites, payment portals, or social platforms (e.g. Instagram, TikTok). NewJack is not responsible for the privacy policies, security controls, or content practices of third-party platforms.

14. Changes to This Policy

We may update this Privacy Policy from time to time. The latest version will always be published on our website with the updated effective date at the top.

15. Contact Us & Information Officer

For privacy-related enquiries, data requests, or complaints, please reach out to us:

You also have the right to lodge a complaint with the Information Regulator of South Africa at inforegulator.org.za if you believe your personal information has been processed unlawfully.