Privacy Policy

Introduction

This Privacy Policy explains how ANIMEX collects, uses, stores, shares, protects, and deletes personal information in compliance with POPIA, PAIA where relevant, and applicable Information Regulator guidance. By using the Platform, you confirm that you have read and understood this Privacy Policy.

Information We Collect

ANIMEX may collect: identity information (name, surname, date of birth, ID or passport number); contact information (email, phone, address); verification documents; profile information; transactional and Listing information; Animal photographs; communications and support tickets; adoption applications and dispute evidence; device information, IP address, and session data; usage and analytics data; payment references and bank verification details; risk and fraud signals; welfare documentation; and admin audit logs.

Special Personal Information and Children's Information

ANIMEX does not intentionally collect children's personal information except where legally provided by a parent or guardian. ANIMEX may process special personal information (as defined in POPIA) only where required for identity verification, legal compliance, fraud prevention, safety, or another lawful basis under section 26 of POPIA.

Lawful Grounds for Processing

ANIMEX processes personal information on the following lawful grounds under section 11 of POPIA:

Contract necessity: processing required to perform a transaction or service you have requested, or to take steps prior to entering such a transaction;
Legal obligation: processing required to comply with an obligation imposed by law, including POPIA, FICA, the CPA, tax legislation, the ECT Act, or a court order;
Legitimate interests: processing necessary to pursue ANIMEX's legitimate interests - including fraud prevention, platform security, welfare risk management, payment risk, dispute handling, and product improvement - where such interests are not overridden by your rights;
Consent: processing based on your freely given, specific, and informed consent. Where ANIMEX relies on consent, it will be requested clearly and separately, and may be withdrawn at any time without affecting the lawfulness of prior processing.

Purposes of Processing

ANIMEX processes personal information to create and manage accounts; verify Users; operate Listings; process payments; operate Secure Checkout; release Seller funds; handle refunds and Disputes; verify identity, ownership, and welfare status; prevent fraud and money laundering; protect Animal welfare and report welfare risks; comply with legal obligations; respond to support requests; maintain audit logs; send platform notices; send marketing communications where consented under section 69 of POPIA; and improve the Platform.

Direct Marketing

ANIMEX may only send direct marketing communications where you have provided specific, informed, and unambiguous consent under section 69 of POPIA. You may withdraw your consent to direct marketing at any time by clicking the unsubscribe link in any marketing email, adjusting your in-app notification preferences, or contacting info@animexofficial.co.za. Withdrawal does not affect the lawfulness of direct marketing sent before withdrawal. Transactional and service notices are not direct marketing and may be sent without consent.

Sharing of Personal Information

ANIMEX does not sell personal information. ANIMEX may share personal information with: the Payment Provider; identity and bank verification providers; cloud hosting, infrastructure, and support providers; analytics and fraud prevention tools; legal advisers and auditors; regulators, law enforcement, and courts; welfare organisations, veterinarians, and SPCA branches where relevant to Animal welfare; Buyers and Sellers where necessary for a specific transaction; and a successor entity in a merger or acquisition under equivalent privacy protections.

Operators and Service Providers

Where a third-party service provider processes personal information on ANIMEX's behalf, ANIMEX will use reasonable contractual measures to require confidentiality, security, lawful processing, breach reporting, and deletion or return of data. Such operators are bound by the requirements of section 21 of POPIA.

Cross-Border Transfers

Some service providers may process personal information outside South Africa. Where cross-border transfers occur, ANIMEX will ensure appropriate safeguards as required by section 72 of POPIA, including binding contractual commitments providing equivalent protection to that afforded by POPIA.

Security

ANIMEX implements reasonable technical and organisational measures including access controls, role-based permissions, encryption where appropriate, audit logging, secure infrastructure, monitoring, least-privilege access, and periodic security reviews. No digital system is absolutely secure and ANIMEX cannot guarantee absolute security of information transmitted over the internet.

Data Breach Notification

Where there are reasonable grounds to believe personal information has been accessed or acquired by an unauthorised person, ANIMEX will comply with section 22 of POPIA by: notifying the Information Regulator as soon as reasonably possible after becoming aware of the compromise; and notifying affected data subjects as soon as reasonably possible, unless notification is delayed by a law enforcement or regulator direction. Notification will include the nature of the compromise, categories of information affected, steps ANIMEX is taking, and recommended steps for data subjects.

Retention

ANIMEX retains personal information only as long as reasonably necessary for the purpose collected. Specific retention periods are set out in ANIMEX's Records Retention Schedule (Section 21 of this pack). When information is no longer required, ANIMEX will delete, destroy, or de-identify it in accordance with POPIA and the Retention Schedule.

Your Rights

You may request: access to your personal information (confirming whether ANIMEX holds it and receiving a copy); correction of inaccurate, incomplete, or outdated information; deletion where processing is no longer authorised, subject to legal retention obligations; objection to processing based on legitimate interest; restriction of processing where appropriate; withdrawal of consent where consent is the lawful basis; and complaint escalation.

Submit requests to info@animexofficial.co.za. ANIMEX will verify your identity before processing and will respond within 30 (thirty) calendar days unless a lawful extension applies.

Information Officer

Information Officer: Yusuf Cassim (Director and head of ANIMEX (Pty) Ltd)

Email: info@animexofficial.co.za

Address: 37 8th Avenue, Houghton, Gauteng, 2198, South Africa

For privacy enquiries and requests to exercise your rights, contact the Information Officer using the details above.

Complaints

Contact ANIMEX first at info@animexofficial.co.za. If unresolved within 30 (thirty) calendar days, you may contact the Information Regulator of South Africa: Website: www.inforegulator.org.za | Email: POPIAComplaints@inforegulator.org.za | Address: Woodmead North Office Park, 54 Maxwell Drive, Woodmead, Johannesburg, 2191.