Privacy Policy

Last updated: 13 May 2026

This Privacy Policy explains how Wonder Technology (Pty) Ltd ("we", "us", "our") collects, uses, shares, and protects your personal information when you use wondertech.co.za. It is published in compliance with the Protection of Personal Information Act, 2013 ("POPIA").

1. Responsible Party

Wonder Technology (Pty) Ltd is the Responsible Party for the personal information collected through this website.

Company Registration No.: 2016/319894/07
Unit 10, Plot 42 Gemsbok Street, Quaggafontein, Bloemfontein, 9301, South Africa
Telephone: 051 492 5627
Information requests: wondertech.co.za/contact

2. Operators (data processors)

We use the following third parties to operate this website on our behalf. Each operates under contractual obligations to protect your information and to use it only for the purposes we direct.

Sudowan — provides the technical platform on which this website is built and runs (hosting, application code, deployment, monitoring, back-office automation). Sudowan acts as an Operator as defined in POPIA.
The Courier Guy — fulfils delivery of physical orders. Receives your name, delivery address, telephone number, and order details.
PayFast (Pty) Ltd — processes online card and EFT payments. Receives your name, email, and the payment amount; receives card details directly under their own privacy policy (we do not see or store card details).
Anthropic, PBC — provides the AI assistant integrated on this website. When you use the chat, message content is transmitted to Anthropic for processing. We do not send your account identity to Anthropic; chat is associated with a session-only identifier.
Typesense — provides product search. Holds product catalogue data only; no customer personal information.
Grafana / Prometheus — internal analytics and monitoring. Aggregated usage data only; not used to identify individuals.

3. What information we collect

We collect the following categories of personal information:

Account information: name, email address, phone number, password (stored as a one-way hash), business name and registration if applicable.
Order information: products ordered, delivery address, billing address, order history.
Communications: messages you send via contact forms, chat, or email; quote requests, dealer applications, supplier-partnership applications.
Browsing information: products you view, categories you click, search terms (used to power product recommendations).
Device and technical information: IP address, browser type, device type, pages visited, timestamps; necessary cookies for session management.

4. Why we collect it (lawful basis and purposes)

We process your personal information for the following purposes, on the lawful basis indicated:

To fulfil orders and contracts (POPIA s. 11(1)(b)) — accepting orders, taking payment, arranging delivery, providing support, handling returns.
To comply with legal obligations (POPIA s. 11(1)(c)) — tax record-keeping, consumer-protection compliance, fraud prevention.
For our legitimate interests (POPIA s. 11(1)(d) and (f)) — operating and securing the website, preventing abuse, analytics and product recommendations, internal record-keeping, communication with you about your account or orders.
With your consent (POPIA s. 11(1)(a)) — newsletter subscriptions, marketing communications, optional cookies and tracking. You can withdraw consent at any time by emailing us or using the unsubscribe link in any marketing email.

5. Sharing your information

We share your personal information only:

with the Operators listed in clause 2, to the extent necessary for them to perform their services for us;
with the South African Revenue Service or other regulators where required by law;
with our legal advisers, auditors, and insurers in the conduct of our business;
with a successor entity in the event of a merger, acquisition, or sale of all or part of our business, on the condition that the successor agrees to honour this Privacy Policy.

We do not sell your personal information to third parties for marketing purposes.

6. Cross-border transfers

Some of our Operators (notably Anthropic, PBC) are based outside of South Africa. Where personal information is transferred outside of South Africa, we ensure that the recipient is bound either by:

laws substantially similar to POPIA;
binding corporate rules or a similar enforceable instrument; or
your explicit consent to the transfer.

7. How long we keep it

We retain your personal information only for as long as necessary to fulfil the purposes set out above. Specifically:

Account and order records: 7 years from the last interaction (tax-record requirements).
Marketing consent records: until withdrawn, plus 12 months for proof.
Browsing history used for recommendations: 14 days rolling.
Chat transcripts: 90 days from the conversation closing, unless attached to an open order or support case.

Information may be retained longer if required to defend or pursue a legal claim, or where required by law.

8. Security

We protect your personal information with reasonable technical and organisational measures, including encrypted connections (HTTPS), hashed passwords, role-based access control, audit logging, regular backups, and ongoing security review. No system is perfectly secure; if you suspect that your account has been compromised, contact us immediately.

9. Your rights under POPIA

You have the right to:

be notified that we hold your personal information (this Policy serves that purpose);
access the personal information we hold about you;
request correction or deletion of inaccurate, outdated, or unlawfully obtained information;
object to the processing of your personal information on reasonable grounds;
withdraw your consent to processing that is based on consent, at any time;
submit a complaint to the Information Regulator (South Africa) — inforegulator.org.za.

To exercise any of these rights, contact us at /contact with sufficient detail for us to identify your records.

10. Cookies

We use cookies and similar technologies for the following purposes:

Strictly necessary — session management (login state, shopping cart). These cannot be disabled.
Functional — remembering your preferences (currency, region, dealer status).
Analytics — measuring how customers use the site so we can improve it. Aggregated; not used to identify you.

You can control cookies via your browser settings. Disabling necessary cookies will prevent the website from working correctly.

11. Children

This website is not intended for use by children under 18. We do not knowingly collect personal information from children. If you become aware that a child has provided us with personal information, please contact us and we will delete it.

12. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be notified via a notice on the website or by email to account holders.

13. Contact

For any privacy-related question or request:

Wonder Technology (Pty) Ltd
Unit 10, Plot 42 Gemsbok Street, Quaggafontein, Bloemfontein, 9301
Telephone: 051 492 5627
Web: wondertech.co.za/contact