Your right to update, correct or delete your information

You can update, correct, or delete personal information relating to your account with us by logging into your account on our website at any time.

If you wish to update, correct, or delete other personal information that you cannot update, correct, or delete on your account on our website, you may contact us at: contact@aresholdings.co.za .

Your right to object to the processing of your personal information

You have the right to object to the processing of your personal information where we are relying on your legitimate interests, our legitimate interests, or those of a third party to process the personal information.

You may also object generally to the processing of your personal information on reasonable grounds relating to your particular situation, for instance, where such processing negatively impacts your fundamental rights and freedoms.

If you wish to object to the processing of your personal information as described under this heading, kindly contact us at contact@aresholdings.co.za .

Storage and security of your personal information

We implement technical and organisational measures to ensure that the personal information in our possession remains confidential and secure against unauthorised or unlawful processing, and against accidental loss, destruction, or damage. Our efforts in this regard will comply with the requirements of applicable law.

You acknowledge and agree however that there are inherent risks to the security of data in the use of providing web-based transactional services. We accordingly do not guarantee that your data cannot ever be compromised, and you accept this risk by using our website.

When you have chosen or been given a password which enables you to access certain functions of our website, you are responsible for keeping that password confidential. Please do not share your password with anyone.

We will keep your personal information for only a reasonable amount of time, to enable us to use it for the purposes described in this privacy policy and in accordance with applicable law.

How we share your personal information

Subject to compliance with POPIA, we may disclose your personal information to any of our subsidiaries or third-party service providers as required to render services to you, which include without limitation the following categories of service providers:

• payment gateway service providers;
• vendors which facilitate returns and exchanges;
• marketing automation and communications vendors;
• vendors which automate and customise order document generation;
• service providers which facilitate product review automation and enhancement;
• customer relations management vendors; and
• shipping and order management vendors.

Some of our third-party service providers are also located outside of South Africa, and accordingly your personal information may be transferred outside of South Africa. We will only do so, in accordance with POPIA, (1) once we have obtained your consent, (2) in order to render services to you in terms of a contract to which you are a party or which was concluded with a third party in your interest, or (3) where the recipient of the personal information is subject to a law, binding corporate rules, or binding agreement which adequately safeguards your personal information in a manner substantially similar to POPIA.

From time to time, we may engage service providers which process personal information in countries including but not limited to Israel, Ireland, the United States, Switzerland, the United Kingdom, Canada, Denmark, and various countries within the European Economic Area ("EEA").

Information processed within the EEA is subject to the level of protection provided by the General Data Protection Regulation ("GDPR").

The level of protection afforded to information processed by service providers in countries outside of the EEA depends on the laws of that particular country as well as any applicable binding corporate rules or binding agreements to which the service provider may be subject. All non-EEA countries listed at 7.3, namely, Israel, the US, Canada, Switzerland, and the UK, have been declared by the European Commission to offer protection equivalent to that offered by GDPR.

Disclosures

On rare occasions, we may be required to disclose your personal information because of legal or regulatory requirements. In such instances, we reserve the right to disclose your personal information as required in order to comply with our legal obligations, including complying with court orders, warrants, subpoenas, service-of-process requirements, and/or discovery requests.

We may also disclose information about our users to law enforcement officers or others, in the good faith belief that such disclosure is reasonably necessary to enforce our terms of use or this privacy policy, or respond to legal claims that any content violates the rights of third parties, or to protect our intellectual property rights or our personal safety or the personal safety of our users or the general public.

How to contact the Information Regulator

Section 74(1) of POPIA provides that any person may submit a complaint to the Regulator in the prescribed manner and form alleging interference with the protection of the personal information of a Data Subject.

Contact information of the Information Regulator:

Postal Address	JD House 27 Stiemans Street Braamfontein Johannesburg 2001
Telephone Number	+27 10 023 5200
Fax Number	086 500 3351
Email Address	enquiries@inforegulator.org.za
Website	www.inforegulator.org.za