Privacy Policy

This Privacy Policy governs the manner in which FRMD Activewear ("FRMD", "we", "our", or "us") collects, processes, stores, uses, transfers, and protects Personal Information obtained from users of our website, customers, subscribers, and individuals engaging with our products, services, communications, marketing activities, and digital platforms.

FRMD is committed to protecting your privacy and processing your Personal Information lawfully, fairly, and transparently in accordance with the Protection of Personal Information Act, 4 of 2013 ("POPIA"), other applicable South African legislation, and where applicable, the General Data Protection Regulation ("GDPR").

By accessing or using our website, creating an account, purchasing products, subscribing to communications, participating in promotions, or otherwise interacting with FRMD, you acknowledge that you have read and understood this Privacy Policy and agree to the collection, processing, and disclosure of your Personal Information as described herein.

FRMD Activewear currently operates as an independent business and brand and has not yet been incorporated as a registered company.

References throughout this Privacy Policy to "FRMD", "we", "our", or "us" refer to FRMD Activewear and its authorised representatives.

Should the business subsequently be incorporated or restructured, this Privacy Policy may be amended to reflect the relevant legal entity.

For purposes of POPIA, FRMD Activewear acts as the Responsible Party responsible for determining the purpose and means of processing Personal Information collected through its website, products, services, communications, and marketing activities.

FRMD Activewear Pretoria East, Gauteng Email: info@frmd.co.za Website: www.frmd.co.za

For purposes of this Privacy Policy:

"Personal Information" shall bear the meaning assigned to it under POPIA and includes information relating to an identifiable natural person or juristic person where applicable.

"Processing" includes the collection, receipt, recording, organisation, storage, updating, retrieval, consultation, use, dissemination, transmission, distribution, transfer, destruction, deletion, or disposal of Personal Information.

"Data Subject" means the person to whom the Personal Information relates.

"Operator" means a third party that processes Personal Information on behalf of FRMD in accordance with a contract or mandate.

FRMD may collect and process the following categories of Personal Information:

Identity Information

• Full name and surname

• Date of birth (where voluntarily supplied)

• Gender (where voluntarily supplied)

Contact Information

• Email address

• Mobile number

• Billing address

• Delivery address

Transaction Information

• Purchase history

• Product selections

• Returns and exchanges

• Order details

• Payment confirmations

Account Information

• Account credentials

• Saved preferences

• Account settings

Technical Information

• IP address

• Device information

• Browser type

• Operating system

• Website usage data

• Analytics information

• Cookie information

Marketing Information

• Newsletter subscriptions

• Competition entries

• Survey responses

• Product interests

• Communication preferences

FRMD commits to processing Personal Information according to the eight lawful processing conditions established under POPIA.

4.1 Accountability

FRMD shall take reasonable and appropriate measures to ensure compliance with POPIA and all applicable data protection obligations.

4.2 Processing Limitation

Personal Information shall only be processed when:

• Consent has been obtained;

• Processing is necessary to fulfil a contract;

• Processing complies with legal obligations;

• Processing protects a legitimate interest of the Data Subject;

• Processing serves the legitimate interests of FRMD.

Personal Information collected shall be adequate, relevant, and not excessive in relation to the purpose for which it is processed.

4.3 Purpose Specification

Personal Information shall be collected for specific, explicitly defined, and lawful purposes, including:

• Processing and fulfilling orders;

• Delivering products;

• Providing customer support;

• Administering customer accounts;

• Marketing and communications;

• Managing competitions, promotions, and surveys;

• Improving products and services;

• Complying with legal obligations.

4.4 Further Processing Limitation

Any further processing of Personal Information shall be compatible with the purpose for which it was originally collected.

4.5 Information Quality

FRMD shall take reasonable measures to ensure that Personal Information is complete, accurate, not misleading, and updated where necessary.

4.6 Openness

FRMD shall maintain transparency regarding:

• The Personal Information collected;

• The purpose of collection;

• The manner in which Personal Information is used;

• Data Subject rights under applicable laws.

4.7 Security Safeguards

FRMD shall implement reasonable technical and organisational measures designed to secure Personal Information against:

• Loss;

• Damage;

• Unauthorised access;

• Unlawful processing;

• Unauthorised disclosure;

• Destruction or misuse.

4.8 Data Subject Participation

Data Subjects have the right to access, correct, update, object to, or request deletion of Personal Information subject to applicable legal limitations.

Your account credentials, including usernames and passwords, are intended for your personal use only.

You undertake not to disclose your login credentials to any third party and acknowledge responsibility for activities performed under your account.

FRMD employs reasonable administrative, technical, and physical safeguards to maintain the security and integrity of our website and systems.

You agree not to:

• Upload malicious software;

• Introduce viruses or harmful code;

• Attempt unauthorised access to our website or systems;

• Interfere with website functionality;

• Engage in activities that compromise website security.

Any attempt to compromise the security of the website may result in legal action and prosecution.

While FRMD endeavours to protect all Personal Information submitted through the website, no transmission of information over the internet can be guaranteed as completely secure. Users acknowledge and accept this inherent risk.

FRMD may use Personal Information to:

• Process and fulfil orders;

• Arrange product delivery;

• Communicate order updates;

• Respond to enquiries;

• Verify identity where necessary;

• Prevent fraud and abuse;

• Improve customer experience;

• Conduct business analytics;

• Send marketing communications where permitted;

• Comply with legal obligations.

By visiting our website, creating an account, placing an order, subscribing to communications, or contacting us electronically, you consent to receiving communications from FRMD electronically.

Such communications may include:

• Order confirmations;

• Invoices and receipts;

• Delivery notifications;

• Security notifications;

• Service announcements;

• Customer support communications;

• Promotional communications where consent has been provided;

• Legally required notices and disclosures.

You may opt out of marketing communications at any time using the unsubscribe facility provided or by contacting FRMD directly.

In accordance with POPIA, FRMD shall not send unsolicited electronic direct marketing communications without an appropriate lawful basis.

Where consent is required, FRMD will:

• Obtain voluntary, specific, and informed consent;

• Keep records of consent where required;

• Provide a clear opt-out mechanism;

• Honour unsubscribe requests promptly.

You may withdraw consent for marketing at any time without affecting the lawfulness of prior processing.

To purchase products through the website, users may register an account or complete purchases as guest customers.

To facilitate purchases and delivery, FRMD may collect:

• Full name;

• Email address;

• Contact details;

• Billing information;

• Delivery information.

Users are responsible for ensuring the accuracy of information supplied.

Registered users may access and update account information at any time.

FRMD may use cookies, web beacons, pixels, and similar technologies to:

• Improve website functionality;

• Remember user preferences;

• Analyse traffic and usage trends;

• Enhance customer experience;

• Measure advertising effectiveness.

Users may disable cookies via browser settings, although doing so may affect website functionality.

FRMD does not sell, lease, or trade Personal Information to third parties.

Personal Information may be shared with trusted service providers and Operators assisting with:

• Payment processing;

• Website hosting;

• Courier and delivery services;

• Marketing services;

• Customer support functions;

• Analytics services.

Third parties shall only process information in accordance with written agreements and applicable privacy laws.

FRMD may also disclose Personal Information where:

• Required by law;

• Required by court order;

• Requested by authorised regulatory authorities;

• Necessary to protect legal rights;

• Necessary to investigate fraud or unlawful activity.

FRMD does not knowingly collect or process Special Personal Information as contemplated in POPIA unless:

• Required by law;

• Explicit consent has been obtained;

• Processing is otherwise legally authorised.

Should Special Personal Information be inadvertently received, FRMD shall take reasonable measures to process such information lawfully and securely.

FRMD shall retain Personal Information only for as long as reasonably necessary to:

• Achieve the purpose for which it was collected;

• Comply with legal obligations;

• Resolve disputes;

• Enforce agreements;

• Maintain legitimate business records.

Once retention is no longer necessary, information shall be securely destroyed, de- identified, anonymised, or deleted.

Personal Information may be transferred to and processed in jurisdictions outside South Africa where cloud hosting providers, payment processors, software providers, or operational partners are located.

FRMD shall only transfer Personal Information where:

• Adequate protection exists;

• Appropriate contractual safeguards are in place;

• Consent has been obtained where required;

• The transfer is otherwise permitted under POPIA.

Subject to applicable law, Data Subjects have the right to:

Right of Access

Request confirmation regarding whether FRMD holds Personal Information relating to them.

Right to Correction

Request correction of inaccurate, misleading, outdated, or incomplete information.

Right to Deletion

Request deletion or destruction of Personal Information where retention is not legally required.

Right to Object

Object to the processing of Personal Information on reasonable grounds.

Right to Restrict Processing

Request limitation of specific processing activities.

Right to Data Portability

Where applicable, request Personal Information in a structured electronic format.

Right to Withdraw Consent

Withdraw consent where processing is based on consent.

Right to Lodge a Complaint

Submit complaints regarding privacy or data protection matters to the Information Regulator.

FRMD may request reasonable proof of identity before responding to any request.

In the event of a data breach or security compromise affecting Personal Information, FRMD shall:

• Investigate the incident promptly;

• Take reasonable measures to mitigate harm;

• Notify affected Data Subjects where required by law;

• Notify the Information Regulator where legally required;

• Implement corrective measures to prevent recurrence.

FRMD reserves the right to modify, suspend, or discontinue any portion of the website, products, or services without prior notice.

This Privacy Policy may be amended periodically to reflect legal, operational, or technological changes. The updated version shall be posted on the website and shall become effective upon publication.

If any provision of this Privacy Policy is found to be invalid or unenforceable, the remaining provisions shall remain in full force and effect.

No waiver by FRMD of any right or provision shall be deemed a continuing waiver of such right or provision.

This Privacy Policy shall be governed by and interpreted in accordance with the laws of the Republic of South Africa.

Any dispute arising from this Privacy Policy, the website, or the processing of Personal Information shall first be referred to good-faith negotiations.

Should a dispute remain unresolved, it may be referred to confidential arbitration in South Africa in accordance with the rules of the Arbitration Foundation of Southern Africa (AFSA).

Complaints relating to the processing of Personal Information may be directed to:

The Information Regulator (South Africa) Website: https://www.justice.gov.za/inforeg/ Email: complaints.IR@justice.gov.za

For privacy-related requests, data access requests, corrections, objections, withdrawals of consent, or complaints, contact:

FRMD Activewear Pretoria East, Gauteng Email: info@frmd.co.za Website: www.frmd.co.za

By creating an account, subscribing to communications, submitting information through forms, participating in surveys or promotions, purchasing products, or otherwise interacting with FRMD, you voluntarily consent to the collection, processing, storage, and use of your Personal Information for the purposes described in this Privacy Policy and as permitted by applicable law. Your Personal Information will be processed in accordance with POPIA and other applicable privacy legislation.