1. Introduction

This POPIA Addendum explains how Lesotho Wine complies with the Protection of Personal Information Act, 4 of 2013 (“POPIA”) when processing personal information of individuals in South Africa.

This Addendum should be read together with our Privacy Policy.

2. Scope of This Addendum

This Addendum applies to all personal information processed in South Africa, including:

  • Customers collecting orders or purchases in South Africa
  • Users engaging with our website or marketing from South Africa
  • Event attendees at cross-border or South African-linked operations
  • Wine Club members in South Africa
  • Users interacting with our support and marketing systems

3. Responsible Party

For the purposes of POPIA, Lesotho Wine is the Responsible Party for personal information collected through our platforms and services.

4. Personal Information We Process

We may process the following personal information:

  • Name and surname
  • Contact details (email, phone number)
  • Physical address (including Ladybrand collection point details)
  • Payment and transaction data (via third-party processors)
  • Purchase history
  • Event attendance records
  • Device and usage data
  • Marketing and communication preferences

5. Purpose of Processing

We process personal information to:

  • Provide and fulfil orders (wine, merchandise, tickets)
  • Manage Wine Club subscriptions
  • Facilitate collections and deliveries
  • Process payments via Payfast, Yoco, EFT, and cashless systems
  • Communicate with customers and provide support
  • Conduct marketing (where consent is given)
  • Improve services and customer experience
  • Comply with legal and regulatory obligations

6. Legal Basis for Processing

We process personal information under POPIA based on:

  • Consent (e.g. marketing communications)
  • Contractual necessity (order fulfilment and services)
  • Legal obligations (tax, accounting, regulatory compliance)
  • Legitimate interests (fraud prevention, analytics, service improvement)

7. Sharing of Personal Information

We may share personal information with:

  • Payment processors (including Payfast and Yoco)
  • Logistics providers (Courier Guy, DHL, Pick n Pay Pickup, and others)
  • Retail partners (including Liquor City Ladybrand)
  • Email marketing platforms (Mailchimp)
  • Analytics providers (Google, Meta)
  • Event service providers and contractors

All third parties are required to process information securely and lawfully.

8. Cross-Border Transfers

Personal information may be transferred outside South Africa, including to Lesotho and other jurisdictions where service providers operate.

We ensure appropriate safeguards are in place to protect personal information in accordance with POPIA requirements.

9. Security Safeguards

We implement reasonable technical and organisational measures, including:

  • Secure servers and hosting environments
  • Access control restrictions
  • Encryption where applicable
  • Secure third-party processing agreements

Despite these measures, no system is completely secure.

10. Data Subject Rights

Under POPIA, you have the right to:

  • Request access to your personal information
  • Request correction or deletion of personal information
  • Object to processing of personal information
  • Withdraw consent for marketing communications
  • Lodge a complaint with the Information Regulator of South Africa

11. Direct Marketing

We may send marketing communications where:

  • You have provided consent, or
  • You are an existing customer (subject to POPIA conditions)

You may opt out at any time using unsubscribe links or by contacting us directly.

12. Retention of Personal Information

We retain personal information only for as long as necessary to:

  • Fulfil contractual obligations
  • Comply with legal and tax requirements
  • Resolve disputes
  • Maintain legitimate business operations

13. Operator Agreements

Where third-party service providers process personal information on our behalf, they do so under written agreements requiring compliance with POPIA and appropriate security standards.

14. Incident Response (Security Breaches)

In the event of a security compromise involving personal information, we will:

  • Take reasonable steps to contain the incident
  • Investigate the breach
  • Notify affected individuals where required
  • Comply with reporting obligations under POPIA

15. Contact Information

Lesotho Wine

Email: info@lesothowine.co.ls
Support: support@lesothowine.co.ls
Phone: +266 2232 4621

Address:
62 Moshoeshoe Road
Industrial Area
Maseru 100
Lesotho