Privacy Policy

Last updated: May 2025

MiBuoy is committed to protecting your privacy and handling your personal information responsibly. This policy explains what information we collect, how we use it, and your rights as a user of our website. As a South African business, we comply with the Protection of Personal Information Act (POPIA).

Who We Are

MiBuoy is a South African business based in Knysna, Western Cape. Our website is hosted by Xneelo in Cape Town, South Africa. You can contact us regarding any privacy matters via our contact page at www.mibuoy.com/contact.

What Information We Collect

Information you provide directly:

Your name, email address, phone number and delivery address when placing an order or creating an account
Payment information processed securely through Yoco Payments — we do not store your card details on our servers
Messages submitted through our contact form
Your email address if you subscribe to our newsletter

Information collected automatically:

Browsing behaviour, pages visited, time on site and device information collected via Google Analytics and Google Tag Manager
Session recordings, heatmaps and user behaviour data collected via Hotjar
Cookie and tracking data collected via Facebook Pixel and TikTok Pixel for advertising purposes

How We Use Your Information

We use the information we collect for the following purposes:

To process and fulfil your orders and send order confirmations and shipping updates
To respond to enquiries submitted through our contact form
To send marketing emails and product updates where you have opted in via Mailchimp
To analyse website traffic and improve the user experience using Google Analytics, Google Tag Manager and Hotjar
To serve relevant advertising on Facebook and TikTok using their respective tracking pixels
To comply with our legal obligations

Third Party Services

Your data may be shared with the following third party services in order to operate our website and business. Each of these services has their own privacy policy governing how they handle your data:

Google Analytics & Google Tag Manager — website analytics and tag management (Google LLC, USA)
Hotjar — user behaviour analytics and session recording (Hotjar Ltd, Malta)
Mailchimp — email marketing platform (Intuit Inc, USA)
Yoco Payments — payment processing (Yoco Technologies, South Africa)
Facebook Pixel — advertising and retargeting (Meta Platforms Inc, USA)
TikTok Pixel — advertising and retargeting (TikTok Inc, USA)
Xneelo — website hosting (Xneelo, Cape Town, South Africa)
WooCommerce — ecommerce platform and order management (Automattic Inc, USA)

We do not sell your personal information to any third party.

Cookies

Our website uses cookies to improve your browsing experience and to enable our analytics and advertising tools to function. When you first visit our website, you will be presented with a cookie consent banner allowing you to accept or decline non-essential cookies.

The types of cookies we use include:

Essential cookies — required for the website and shop to function correctly
Analytics cookies — Google Analytics and Hotjar, used to understand how visitors use our site
Marketing cookies — Facebook Pixel and TikTok Pixel, used to serve relevant advertising
Functional cookies — used by Google Tag Manager to manage the above

You can update your cookie preferences at any time through your browser settings.

Email Marketing

If you subscribe to our mailing list, your email address and name will be stored and managed through Mailchimp. We will only send you marketing communications where you have given us explicit consent to do so. You can unsubscribe at any time by clicking the unsubscribe link at the bottom of any email we send, or by contacting us directly

Data Retention

We retain your personal information only for as long as is necessary to fulfil the purposes outlined in this policy, or as required by law. Order information is retained for a minimum of five years for accounting and legal compliance purposes. You may request deletion of your data at any time subject to these obligations.

Your Rights Under POPIA

As a data subject under the Protection of Personal Information Act, you have the right to:

Know what personal information we hold about you
Request access to your personal information
Request correction of inaccurate information
Request deletion of your personal information where legally permissible
Object to the processing of your personal information
Lodge a complaint with the Information Regulator of South Africa

To exercise any of these rights, please contact us via www.mibuoy.com/contact.

Security

We take reasonable technical and organisational measures to protect your personal information against unauthorised access, loss or misuse. Our website is hosted on South African servers via Xneelo and all transactions are processed securely through Yoco Payments.

Changes to This Policy

We may update this privacy policy from time to time. Any changes will be posted on this page with an updated date at the top. We encourage you to review this policy periodically.

Contact Us

If you have any questions about this privacy policy or how we handle your personal information, please get in touch via www.mibuoy.com/contact.