Privacy policy

Privacy Policy

Bio Boost | Effective Date: June 2026

1. Introduction

Bio Boost ("we", "us", "our") is committed to protecting your personal information and respecting your right to privacy. This Privacy Policy explains how we collect, use, store, share, and protect your personal information when you visit our website ("Site") or purchase our products.

This policy is governed by the Protection of Personal Information Act 4 of 2013 (POPIA) of South Africa and applies to all personal information processed by Bio Boost.

By using our Site or providing us with your personal information, you consent to the collection and use of your information as described in this policy. If you do not agree, please do not use our Site.

2. Who We Are (Responsible Party)

Under POPIA, Bio Boost is the Responsible Party — meaning we determine the purpose and means of processing your personal information.

Bio Boost
Contact: Use our Contact Us page to get hold of us.
Website: www.bioboost.co.za
Country: South Africa

3. What Personal Information We Collect

We collect only the personal information necessary to provide our products and services. This may include:

3.1 Information You Provide Directly

  • Full name
  • Email address
  • Delivery address and billing address
  • Phone number
  • Payment information (processed securely via third-party payment providers — we do not store card details)
  • Order history and purchase details
  • Communications you send to us (e.g., support queries, refund requests)
  • Product reviews or feedback you voluntarily submit

3.2 Information Collected Automatically

When you browse our Site, we may automatically collect:

  • IP address
  • Browser type and version
  • Device type and operating system
  • Pages visited and time spent on the Site
  • Referring website or source
  • Cookie data (see Section 9)

3.3 Special Personal Information

Some of our products relate to personal health and wellness. If you voluntarily share health-related information with us (for example, in a support query or refund request), we treat this as special personal information under POPIA and apply the highest level of protection to it. We will never ask for more health information than is strictly necessary.

4. How We Use Your Personal Information

We use your personal information only for lawful purposes, including:

  • Processing and fulfilling your orders
  • Communicating with you about your orders, queries, and refund requests
  • Sending you transactional emails (order confirmations, shipping updates)
  • Sending you marketing communications, only if you have opted in (you can opt out at any time)
  • Improving our Site, products, and customer experience
  • Complying with legal obligations
  • Preventing fraud and protecting the security of our Site
  • Enforcing our Terms of Service and other policies

We will not use your personal information for any purpose incompatible with the reason it was collected without your consent.

5. Legal Basis for Processing

Under POPIA, we process your personal information on the following lawful grounds:

  • Contract performance — to fulfil your order and deliver your products
  • Legitimate interests — to improve our Site, prevent fraud, and manage our business
  • Legal obligation — to comply with applicable South African law
  • Consent — for marketing communications and non-essential cookies

6. How We Share Your Personal Information

We do not sell, rent, or trade your personal information. We may share it only in the following limited circumstances:

6.1 Service Providers (Operators)

We share personal information with trusted third-party service providers who assist us in operating our business, including:

  • Payment processors (to handle transactions securely)
  • Courier and logistics companies (to deliver your orders)
  • Email and marketing platforms (to send communications)
  • Website hosting and technology providers

These third parties are contractually required to keep your information confidential, use it only for the purposes we specify, and comply with POPIA.

6.2 Legal Requirements

We may disclose your personal information if required to do so by law, court order, or regulatory authority, or if we believe disclosure is necessary to protect our rights or the safety of others.

6.3 Business Transfers

In the event of a merger, acquisition, or sale of Bio Boost's assets, your personal information may be transferred to the acquiring entity, subject to the same privacy protections as this policy.

We will never share your personal information with third parties for their own marketing purposes.

7. How We Store and Protect Your Personal Information

We take reasonable technical and organisational measures to protect your personal information from unauthorised access, loss, misuse, disclosure, or destruction. These measures include:

  • Secure (HTTPS) encryption on our Site
  • Restricted access to personal data on a need-to-know basis
  • Use of reputable, POPIA-compliant third-party processors

However, no method of transmission over the internet or electronic storage is completely secure. While we strive to protect your information, we cannot guarantee absolute security.

8. How Long We Keep Your Personal Information

We retain your personal information only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. In general:

  • Order and transaction records: retained for 5 years in line with South African accounting and tax requirements
  • Marketing preferences: retained until you unsubscribe or request deletion
  • Support communications: retained for 2 years after the matter is resolved

When personal information is no longer required, we will securely delete or anonymise it.

9. Cookies

Our Site uses cookies — small text files stored on your device — to enhance your browsing experience and analyse Site usage.

Types of cookies we may use:

  • Essential cookies — necessary for the Site to function (e.g., shopping cart, session management)
  • Analytics cookies — help us understand how visitors use the Site (e.g., Google Analytics)
  • Marketing cookies — used to deliver relevant advertising (only if you have consented)

You can control or disable cookies through your browser settings. Note that disabling essential cookies may affect the functionality of the Site.

By continuing to use our Site without adjusting your cookie settings, you consent to our use of non-essential cookies.

10. Your Rights Under POPIA

As a data subject under POPIA, you have the following rights:

  • Right to access — you may request a copy of the personal information we hold about you.
  • Right to correction — you may request that we correct inaccurate or incomplete information.
  • Right to deletion — you may request that we delete your personal information, subject to legal retention requirements.
  • Right to object — you may object to the processing of your personal information for direct marketing purposes at any time.
  • Right to withdraw consent — where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.
  • Right to complain — you have the right to lodge a complaint with the Information Regulator of South Africa if you believe your rights have been violated.

Information Regulator (South Africa)
Website: www.inforegulator.org.za
Email: inforeg@justice.gov.za

To exercise any of the above rights, contact us at [your support email]. We will respond within a reasonable timeframe and no later than 30 days.

11. Direct Marketing

We will only send you marketing emails or promotions if you have explicitly opted in to receive them. Every marketing communication we send will include an easy way to unsubscribe. Once you unsubscribe, we will stop sending marketing communications promptly.

We do not engage in unsolicited direct marketing (spam).

12. Links to Third-Party Websites

Our Site may contain links to third-party websites. This Privacy Policy applies only to our Site. We are not responsible for the privacy practices of any third-party websites and encourage you to read their policies before providing any personal information.

13. Children's Privacy

Our Site and products are not directed at children under the age of 18. We do not knowingly collect personal information from minors. If you believe we have inadvertently collected information from a minor, please contact us immediately and we will delete it.

14. Changes to This Policy

We may update this Privacy Policy from time to time. The updated version will be posted on this page with a revised effective date. We encourage you to review this policy periodically. Your continued use of the Site after changes are posted constitutes your acceptance of the updated policy.

15. Contact Us

For any privacy-related questions, requests, or complaints, please contact us on our Contact Us page.

Last updated: June 2026