• Your shopping cart is empty!

Privacy Policy

Last updated: 30 September 2026

HD Nexus Health respects your privacy. This policy explains how we process your personal information in line with the Protection of Personal Information Act 4 of 2013 (POPIA).

1. Who we are (the responsible party)

HD Nexus Health is a business name used by [Owner full name], a sole proprietor.
Physical address: [Physical address]
Email: info@hdnexushealth.co.za
Phone: [Contact number]
Information Officer: [Owner full name], reachable at info@hdnexushealth.co.za

2. Personal information we collect

  • Identity and contact details: name, email address, phone number, and delivery and billing addresses.
  • Account details: login details (passwords are stored in encrypted form), order history, wishlists and reviews.
  • Transaction details: products purchased, amounts and payment status. We currently accept EFT payments only, so we receive your name and payment reference from our bank when your payment reflects. If we add card payments in future, these will be handled by a PCI-DSS-compliant payment gateway, and we will not see or store your full card details.
  • Technical details: IP address, browser type, device information, and pages visited, collected through cookies (see our Cookie Policy).
  • Communications: messages you send us and your marketing preferences.

3. Health information

Health information is special personal information under POPIA. We do not ask for it. If you choose to share health details with us, for example when asking for product guidance, we will use them only to answer your query and with your consent, and we will not keep them longer than necessary.

4. Why we use your information

  • To process, deliver and support your orders, including returns and warranty claims.
  • To create and manage your account.
  • To communicate with you about your orders and queries.
  • To send you marketing, only if you have opted in. You can unsubscribe at any time.
  • To prevent fraud, keep our website secure, and meet our legal, tax and accounting obligations.
  • To improve our website, products and services.

We process personal information only where it is lawful: to perform our contract with you, to comply with the law, for our legitimate interests, or with your consent.

5. Who we share it with

We do not sell your personal information. We share it only with operators who help us run the store, under written agreements that require them to keep it confidential and secure:

  • courier and delivery partners, who receive your name, address and phone number;
  • our bank and, if used in future, payment gateway providers;
  • website hosting, email and IT service providers; and
  • professional advisors, or authorities where the law requires it.

6. Cross-border transfers

Some service providers, such as email or cloud hosting, may store information outside South Africa. We transfer information across borders only as permitted by section 72 of POPIA, for example where the recipient is subject to adequate data-protection laws or an agreement that protects your information.

7. Security

We take appropriate, reasonable technical and organisational measures to protect your information. These include SSL encryption, access controls and secure payment processing. If a security breach affects your personal information, we will notify you and the Information Regulator as required by POPIA.

8. How long we keep it

We keep personal information only as long as needed for the purposes above, or as required by law (for example, tax records are kept for at least 5 years). After that, it is securely deleted or de-identified.

9. Your rights

Under POPIA you have the right to:

  • ask whether we hold your personal information and request access to it;
  • ask us to correct, update or delete it;
  • object to processing, including for direct marketing;
  • withdraw your consent at any time; and
  • lodge a complaint with the Information Regulator.

To exercise these rights, email our Information Officer at info@hdnexushealth.co.za. We may need to verify your identity first.

10. Direct marketing

We send marketing by email, SMS or WhatsApp only with your consent, or to existing customers about similar products, as permitted by section 69 of POPIA. Every message includes a free way to unsubscribe.

11. Children

Our website and products are intended for adults aged 18 and over. We do not knowingly collect personal information from children without the consent of a competent person.

12. Information Regulator

If you believe we have not handled your personal information properly, you can contact the Information Regulator (South Africa): inforegulator.org.za or POPIAComplaints@inforegulator.org.za.

13. Changes to this policy

We may update this policy from time to time. The latest version will always be available on this page.