Privacy Policy

1. Who We Are (Responsible Party)

For the purposes of the Protection of Personal Information Act 4 of 2013 (POPIA), the Responsible Party is:

Evora Health
Trading as: Evora Health
Country: Republic of South Africa
Email: admin@evorahealth.co.za
WhatsApp: 082 233 3529

The Information Officer responsible for POPIA compliance at Evora Health can be contacted at the above email address.

2. Information We Collect

2.1 Information You Provide Directly

• Account and order information: Name, email address, phone number, delivery address, order history.
• Payment information: Payment is processed by PayFast. Evora Health does not store your card or banking details.
• Communications: Messages you send us via email, WhatsApp, or any contact form.
• Community participation: Content you post or share in community channels.
• Newsletter sign-ups: Email address and any preferences you provide.
• Reseller applications: Business details, identity information, and bank details provided during application.

2.2 Information Collected Automatically

• Website usage data: IP address, browser type, device information, pages visited, time on site. This is collected via cookies and analytics tools.
• Device health data: If you use our app or connected devices, biometric and health metrics (see Section 6).

3. How We Use Your Information

We use your personal information for the following purposes:

• Processing and fulfilling your orders, including delivery arrangements.
• Communicating order confirmations, shipping updates, and support responses.
• Sending community newsletters, product updates, and wellness content (with your consent).
• Improving our products, website, and community based on usage data.
• Detecting and preventing fraud or unauthorised account access.
• Complying with our legal obligations under South African law.
• Managing reseller and affiliate relationships.

We will not use your personal information for purposes other than those stated above without obtaining your prior consent.

4. Legal Basis for Processing (POPIA)

Under POPIA, we process your personal information on the following grounds:

• Performance of a contract: To process your orders and deliver your products.
• Legitimate interest: To operate our business, prevent fraud, and improve our services.
• Consent: For marketing communications and newsletter subscription. You may withdraw this consent at any time.
• Legal obligation: Where required by South African law (e.g., tax records, fraud prevention).

5. Sharing Your Information

Evora Health does not sell, rent, or trade your personal information to third parties.

We share your information only with the following categories of service providers, strictly for the purposes described:

• PayFast, payment processing. Subject to PayFast's own privacy policy.
• Courier/logistics providers, your name and delivery address, for the purpose of delivering your order.
• Avolvia, our email and community marketing platform, used to send newsletters and community communications. We share only your email address and relevant tags (e.g., "community", "founding-member").
• Firebase (Google), used for secure authentication and data storage in the member portal (my.evorahealth.co.za). Subject to Google's Data Processing Terms.

We require all third-party service providers to maintain appropriate security standards and to process your information only for the purposes we specify.

We may disclose your information if required to do so by law or by a court order from a South African court of competent jurisdiction.

6. Health and Biometric Data

Evora Health Products collect biometric and health-related data (HRV, body composition metrics, sleep data, etc.). Under POPIA, this constitutes special personal information and is subject to heightened protections.

We collect this data only with your explicit consent, obtained when you set up your device and account. This data is:

• Used only to provide you with health insights and personalised analytics within the Evora app.
• Not shared with third parties for commercial purposes.
• Not used to make automated decisions that significantly affect you without your knowledge.
• Encrypted in transit and at rest.
• Retained for as long as you maintain an active account, and deleted upon your written request.

7. Cookies and Tracking

Our website uses cookies and similar technologies to:

• Ensure the website functions correctly (essential cookies).
• Analyse website traffic and user behaviour (analytics cookies).
• Remember your cart and preferences (functional cookies).

You can control cookies through your browser settings. Disabling certain cookies may affect website functionality. By continuing to use our website, you consent to our use of cookies as described above.

8. Data Storage and Security

Your personal information is stored on secure servers located within or outside South Africa (Firebase/Google infrastructure). Where data is processed outside South Africa, we ensure that appropriate safeguards are in place as required by POPIA.

We implement appropriate technical and organisational security measures to protect your personal information against unauthorised access, loss, destruction, or alteration. These include encryption, access controls, and regular security assessments.

Despite our best efforts, no data transmission or storage system is completely secure. If you have reason to believe your interaction with us is no longer secure, please contact us immediately at admin@evorahealth.co.za.

9. Data Retention

We retain your personal information for as long as necessary to:

• Provide our products and services to you.
• Comply with our legal obligations (tax records: 5 years from date of transaction).
• Resolve disputes and enforce our agreements.

When personal information is no longer required, we will securely delete or anonymise it.

10. Your Rights Under POPIA

As a data subject under POPIA, you have the following rights:

To exercise any of these rights, email admin@evorahealth.co.za. We will respond within 30 days.

You may also lodge a complaint with the Information Regulator of South Africa:
Website: www.justice.gov.za/inforeg
Email: complaints.IR@justice.gov.za

11. Children's Privacy

Our Products and Website are not directed at children under the age of 18. We do not knowingly collect personal information from children under 18. If we become aware that we have collected personal information from a child under 18 without appropriate parental consent, we will take steps to delete that information.

12. Third-Party Links

Our Website may contain links to third-party websites (e.g., PayFast, social media). We are not responsible for the privacy practices of these websites and encourage you to review their privacy policies.

13. Changes to This Policy

We may update this Privacy Policy from time to time. The updated version will be posted on this page with a revised effective date. Material changes will be communicated to registered community members via email.

14. Contact and Complaints

For any privacy-related queries, requests, or complaints:

Information Officer, Evora Health
Email: admin@evorahealth.co.za
WhatsApp: 082 233 3529
Country: Republic of South Africa

We are committed to resolving any privacy concerns promptly and fairly.