Privacy Policy

1. Who We Are

RebelRain (trading as RebelRain, referred to as “we”, “our”, or “us”) is a South African e-commerce business selling filtered shower products, including the RebelRain Filtered Showerhead and PureFlow Filter Cartridge.

Business name: Elevate Marketing T/A RebelRain
Registration number:
Physical address:4 Tarentaal Road, Van Riebeeckstrand, Cape Town, South Africa, 7441
Email address: info@rebelrain.co.za
Website: www.rebelrain.co.za

We are the Responsible Party for the personal information we collect, as defined by the Protection of Personal Information Act 4 of 2013 (POPIA).

2. Information We Collect

2.1 Information you give us directly

When you place an order, create an account, or contact us, we may collect:

• Full name and surname
• Email address
• Delivery address (street, suburb, city, province, postal code)
• Phone number
• Order history and product preferences
• Payment information (processed securely by our payment provider — we do not store full card details)
• Any messages or correspondence you send us

2.2 Information collected automatically

When you visit our website, we automatically collect:

• IP address and general location (country/city level)
• Browser type and device information
• Pages visited and time spent on site
• Referring website (where you came from)
• Cookies and similar tracking data (see Section 6)

2.3 Information from third parties

We may receive information about you from:

• Meta (Facebook/Instagram) — if you interact with our ads or click through to our site
• Google — if you arrive via Google Ads or organic search
• Our payment processor — transaction confirmation and fraud-check data

3. How We Use Your Information

We use the personal information we collect for the following purposes:

3.1 Order fulfilment

• Processing and confirming your order
• Arranging delivery to your address
• Sending order confirmation and shipping notifications
• Handling returns, exchanges, and refunds

3.2 Customer service

• Responding to your queries and support requests
• Sending product installation guides and filter replacement reminders
• Resolving complaints

3.3 Marketing communications

• Sending email updates about new products, promotions, and helpful content — only if you have opted in or have an existing customer relationship with us
• You can unsubscribe from marketing emails at any time using the link at the bottom of every email

3.4 Improving our business

• Analysing website usage to improve the shopping experience
• Understanding which products and pages perform well
• Measuring advertising effectiveness (via Google Analytics, Meta Pixel)

3.5 Legal and compliance

• Complying with our legal obligations under South African law
• Fraud prevention and security
• Record-keeping for tax and accounting purposes

4. Legal Basis for Processing (POPIA)

Under the Protection of Personal Information Act 4 of 2013 (POPIA), we process your personal information on the following grounds:

• Contract performance: Processing necessary to complete your purchase, arrange delivery, and manage your customer account.
• Legal obligation: Processing required by South African law, including tax records and consumer protection compliance.
• Legitimate interest: Processing for fraud prevention, website security, and improving our service — where these interests are not overridden by your rights.
• Consent: Marketing emails (you may withdraw consent at any time by unsubscribing).

5. Sharing Your Information

We do not sell your personal information to third parties. We share your information only in the following circumstances:

5.1 Service providers

We share data with trusted third parties who help us operate our business:

• Delivery / courier services — your name, address, and phone number to fulfil your delivery
• Payment processor ([e.g., PayFast / PayGate / Yoco]) — your payment information is processed securely by them; we do not handle or store your card details
• Email marketing platform ([e.g., Klaviyo / Mailchimp]) — your name and email address for transactional and marketing communications
• Google Analytics / Google Ads — anonymised usage data and conversion events for advertising and analytics purposes
• Meta (Facebook/Instagram) — hashed customer data and conversion events for advertising optimisation via Meta Pixel and Conversions API
• WooCommerce / WordPress hosting provider – Xneelo, Woocommerce, WordPress — platform and data hosting

All third-party service providers are required to keep your data secure and use it only for the specific purpose we share it for.

5.2 Legal requirements

We may disclose your information if required to do so by law, court order, or a South African government authority.

5.3 Business transfers

If RebelRain is sold or merged with another business, your data may be transferred to the new owner as part of that transaction. You will be notified if this occurs.

6. Cookies and Tracking Technologies

Our website uses cookies — small text files stored on your device — and similar tracking technologies to improve your experience and measure our advertising performance.

6.1 Types of cookies we use

• Essential cookies: Required for the website and shopping cart to function. Cannot be disabled without affecting your shopping experience.
• Analytics cookies: Google Analytics collects anonymised data about how visitors use our site (pages visited, time on site, device type). This helps us improve the website.
• Advertising cookies: Meta Pixel and Google Ads tags track whether a website visit or product view results in a purchase. This helps us measure the effectiveness of our ads and show relevant advertising to people who have visited our site.
• Functional cookies: Remember your preferences (e.g., items left in your cart).

6.2 Managing cookies

You can control cookies through your browser settings. Note that disabling certain cookies may affect the functionality of our website, including your shopping cart. Most browsers allow you to:

• View and delete stored cookies
• Block third-party cookies
• Set preferences for specific websites

You can also opt out of Google Analytics using the Google Analytics Opt-out Browser Add-on, and opt out of Meta advertising data collection via your Facebook Ad Preferences.

7. Data Storage and Security

Your personal information is stored on secure servers. We implement reasonable technical and organisational measures to protect your data against unauthorised access, loss, or misuse, including:

• SSL/TLS encryption for all data transmitted through our website (HTTPS)
• Secure payment processing through a PCI-DSS compliant payment provider
• Password protection and access controls on our systems
• Regular security reviews of our platform

7.1 International data transfers

Some of our service providers (such as Google and Meta) are based outside South Africa. When your data is transferred internationally, we ensure appropriate safeguards are in place as required by POPIA, including reliance on the data protection standards of the receiving country or binding contractual commitments.

8. How Long We Keep Your Data

We keep your personal information only for as long as necessary for the purpose it was collected, or as required by law:

• Order and customer records: 5 years from date of purchase (SARS tax record requirements)
• Email marketing contact: Until you unsubscribe or request deletion
• Website analytics data: 14 months (Google Analytics default) or 26 months (for trend analysis)
• Inactive accounts: Customer accounts with no activity for 3 years may be deleted

When data is no longer required, we securely delete or anonymise it.

9. Your Rights Under POPIA

The Protection of Personal Information Act grants you the following rights regarding your personal information:

• Right of access: You can request a copy of the personal information we hold about you.
• Right to correction: You can request that we correct inaccurate or incomplete information.
• Right to deletion: You can request that we delete your personal information, subject to any legal obligations we have to retain it.
• Right to object: You can object to the processing of your information for direct marketing purposes.
• Right to withdraw consent: Where processing is based on your consent, you can withdraw it at any time. This does not affect processing already completed.
• Right to complain: You have the right to lodge a complaint with the Information Regulator of South Africa (see Section 12).

To exercise any of these rights, contact us at info@rebelrain.co.za. We will respond within 30 days. We may ask you to verify your identity before fulfilling a request.

10. Children’s Privacy

Our products and website are not directed at children under the age of 18. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us immediately at info@rebelrain.co.za and we will delete the information promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or business operations. When we make significant changes, we will:

• Update the “Last updated” date at the top of this page
• Post a notice on our website
• Notify you by email if the changes materially affect how we process your data

We encourage you to review this policy periodically. Continued use of our website after changes are posted constitutes your acceptance of the updated policy.

12. Contact Us and Complaints

Contact us directly

For any privacy-related questions, requests, or concerns:

Email: info@rebelrain.co.za
Subject line: POPIA Privacy Request
Response time: Within 30 business days

Information Regulator of South Africa

If you are not satisfied with our response, you have the right to lodge a complaint with the Information Regulator:

Website: inforegulator.org.za
Email: inforeg@justice.gov.za
Address: JD House, 27 Stiemens Street, Braamfontein, Johannesburg, 2001