Effective Date: 1 January 2025

Thank you for visiting Sacred Plant Integrations (“SPI”, “we”, “our”, “us”). We respect your privacy and are committed to protecting the personal information you share with us. This Privacy Policy explains how we collect, use, disclose and secure your information when you visit or make a purchase from www.sacredplantintegrations.com (the “Site”). It also describes your choices and rights under South Africa’s Protection of Personal Information Act 4 of 2013 (POPIA) and other applicable laws.


1  Who we are

Sacred Plant Integrations is a privately‑owned South African wellness brand offering education, coaching and wellness products—including herbal smoke blends—via ecommerce, workshops and retreats. Our principal place of business is Montagu, Western Cape, South Africa.


2  Personal information we collect

We collect the minimum information necessary to operate our Site and fulfil your orders:

Category Examples Purpose
Identification Full name, email address, phone number, billing & shipping address, date‑of‑birth (age verification for 18+ smoke products) • Process orders  • Age‑restrict content  • Customer support
Transaction Products purchased, order value, payment method, courier tracking number • Fulfil contracts  • Accounting  • Fraud prevention
Technical IP address, browser type, device ID, referring URL, pages visited, time spent • Site security  • Analytics  • Service improvement
Marketing (optional) Newsletter opt‑ins, survey responses, product reviews • Send updates & promotions (with consent)

We do not collect or store your payment‑card details; transactions are securely processed by our payment gateway (PayFast / PayPal / EFT, depending on your selection).


3  How we use your information

We process personal information only when we have a lawful basis to do so:

  • Contract – to confirm, ship and support your purchase.
  • Legitimate interest – to maintain and improve our Site, prevent fraud and keep records.
  • Consent – for optional marketing emails, SMS or WhatsApp updates (you may withdraw at any time).
  • Legal obligation – to satisfy tax, accounting or regulatory requirements.

We never sell your personal data.


4  Sharing and disclosure

We share information only with:

  1. Service providers – couriers, payment processors, email and cloud hosting partners who help us run the business and who are bound by confidentiality agreements.
  2. Law‑enforcement or regulators if required by subpoena, court order or applicable law.
  3. Business successors – in the unlikely event of a merger or asset sale, provided the new entity honours this Policy.

All third‑party processors are vetted for POPIA compliance and may use your data only for the agreed purpose.


5  International transfers

Our Site is hosted on secure servers that may reside outside South Africa. Where personal information is transferred cross‑border, we ensure suitable protection via standard contractual clauses or another lawful mechanism under POPIA chapter 9.


6  Cookies & analytics

We use first‑party cookies and similar technologies (e.g. local storage) to:

  • keep you logged in;
  • remember cart contents; and
  • measure Site traffic via Google Analytics 4 (IP‑anonymised).

You can disable cookies in your browser, but some Site features may not work correctly.


7  Data retention

We retain personal information only as long as necessary:

  • Orders & invoices – 5 years (SARS requirement).
  • Customer accounts – until you request deletion or 5 years of inactivity.
  • Newsletter lists – until you unsubscribe.
  • Analytics logs – 26 months, then aggregated.

8  Your POPIA rights

You may:

  • Access the personal information we hold about you.
  • Correct inaccurate or incomplete data.
  • Delete or de‑identify your personal information.
  • Object to processing for direct marketing.
  • Withdraw consent at any time.

Send requests to privacy@sacredplantintegrations.com. We will respond within 20 business days.


9  Data security

We employ:

  • SSL/TLS encryption;
  • secure off‑site backups;
  • role‑based staff access;
  • two‑factor authentication on admin accounts; and
  • routine malware and vulnerability scans.

However, no system is 100 % secure; transmission is at your own risk.


10  Age restriction & sensitive products

  • The Site sells 18+ herbal smoke products. We verify age at checkout (ID number or birth date) and again on delivery if required by courier.
  • We do not knowingly collect data from children under 18. If we learn that a minor has provided personal information, we will delete it immediately.

11  Third‑party links

Our Site may link to external websites. We are not responsible for their privacy practices. Review their policies before submitting information.


12  Changes to this Policy

We may update this Privacy Policy from time to time. Material changes will be announced on the Site or via email. Continued use after a revision signifies acceptance.


13  Contact us

Questions, requests or complaints?
Data Protection Officer
Sacred Plant Integrations
Montagu, Western Cape, South Africa
Email: hello@sacredplantintegrations.com

If you believe we have not handled your request satisfactorily, you may lodge a complaint with the Information Regulator (South Africa): complaints.IR@justice.gov.za.


Last updated: 22 June 2025