1. Introduction
We are committed to protecting your privacy under the Protection of Personal Information Act, 4 of 2013 (“POPIA”), and other South African laws. By using this website or providing your personal information, you:
- Agree to this Privacy Policy and authorize us to process your personal information as described herein.
- Consent to Biogen SA, Dis-Chem, our service providers, and necessary third parties processing your personal information for the purposes outlined below.
This policy may change without prior notice. Updates will be posted at www.biogen.co.za/terms/privacy-policy, and continued use implies acceptance. Please review it regularly.
2. Collection of Personal Information
We collect personal information (as defined by POPIA as information relating to an identifiable person) in various ways:
- Directly: When you register an account, place an order, sign up for newsletters, or contact us (e.g., via online@biogen.co.za).
- During Our Relationship: Through order processing, customer support, or account management.
- Automatically: Via cookies, web beacons, or analytics tools tracking website usage.
- Third Parties: From Dis-Chem Pharmacies (as fulfillment partner), couriers, payment gateways, or other partners.
- Public Sources: Where legally permissible.
- CCTV: If you visit Dis-Chem facilities linked to Biogen SA order fulfillment.
Types of Information Collected:
- Identity: Name, ID number (if required).
- Contact: Email, phone number, delivery address.
- Financial: Payment details (processed via third-party gateways, not stored).
- Transaction: Order details, history, Dis-Chem order reference numbers.
- Technical: IP address, browser type, device info.
- Usage: Pages visited, preferences.
- Location: Delivery address or inferred from IP.
- Marketing: Communication preferences, survey responses.
- Health-Related: Voluntary data (e.g., fitness goals) tied to Biogen SA product use.
3. Legal Basis for Processing
We process your personal information based on:
- Consent: Where you explicitly agree (e.g., marketing opt-in).
- Contract: To fulfill Biogen SA orders or manage your account.
- Legitimate Interests: For fraud prevention, website improvement, or operational efficiency.
- Legal Obligation: To comply with tax laws, POPIA, or regulatory requests.
4. Purposes of Processing
We use your personal information primarily for the purpose it was collected, and for compatible secondary purposes, including:
- Order Fulfillment: Processing, delivering, and tracking Biogen SA orders.
- Customer Service: Responding to inquiries (e.g., via 0860 347 243).
- Marketing: Sending newsletters or promotions about Biogen SA products (opt-in required unless you’re an existing customer; see “Direct Marketing”).
- Website Management: Improving functionality, analyzing usage, personalizing content.
- Fraud Prevention: Verifying payments and account activity.
- Compliance: Meeting legal or regulatory requirements.
- Security: Protecting our systems and rights.
5. Sharing of Personal Information
We share your personal information only as necessary:
- Dis-Chem Pharmacies (Pty) Ltd: As our fulfillment partner, for order processing, returns, and customer support.
- Service Providers: Couriers (e.g., for shipping), third-party payment gateways (e.g., for transactions), IT providers (e.g., hosting), and analytics firms (e.g., Google Analytics). These parties are bound by contracts ensuring POPIA-compliant protection.
- Partners: Limited data with entities like Informed Choice/Informed Sport for Biogen SA supplement certification, anonymized where possible.
- Legal Authorities: If required by law, court order, or to protect the rights, property, or safety of Biogen SA or Dis-Chem.
We do not sell your personal information. Third-party operators must use reasonable security measures equivalent to ours.
6. International Transfer of Personal Information
We primarily process data within South Africa. If transferred outside (e.g., to cloud providers), we ensure recipients are subject to laws or agreements providing POPIA-equivalent protection.
7. Data Security
We use appropriate technical and organizational measures to protect your personal information against loss, alteration, or unauthorized access, including:
- SSL encryption (https://) for data transmission.
- PCI-DSS compliant payment pages hosted in a secure DMZ, with 3D Secure authentication where applicable.
- Restricted access to data within systems managed by Biogen SA and Dis-Chem.
No credit card data is stored by us; it’s handled securely by third-party gateways. While we strive to protect your data, no system is immune to breaches beyond our control.
8. Data Retention
We retain your personal information only as long as necessary:
- Order Data: 5 years post-purchase for tax/consumer law compliance, unless deletion is requested (subject to legal exceptions).
- Account Data: Until account deletion or 2 years of inactivity.
- Marketing Data: Until you opt out.
Longer retention applies if required by law or with your consent. Data is then deleted or anonymized.
9. Data Accuracy and Minimization
- Accuracy: You’re responsible for providing accurate, up-to-date information and notifying us of changes (e.g., via info@biogen.co.za).
- Minimization: We limit processing to data sufficient for its purpose.
10. Your Rights
Under POPIA, you have the right to:
- Be Notified: If we collect your data or if it’s breached (e.g., hacked).
- Access: Request what data we hold about you.
- Correct: Update inaccurate information.
- Delete: Request removal (where no legal basis for retention exists).
- Object: Challenge processing (e.g., for marketing).
- Avoid Automation: Not be subject to solely automated decisions affecting you.
- Complain: Contact the Information Regulator if your rights are violated.
To exercise these rights, email info@biogen.co.za or call 0860 347 243 (Monday–Friday, 08:00–16:30). We’ll respond within 30 days after verification.
11. Direct Marketing
We may send marketing communications about Biogen SA products if:
- You opt in explicitly (e.g., newsletter signup).
- You’re an existing customer, and it’s relevant to prior purchases.
Unsubscribe anytime via email links or by contacting us at online@biogen.co.za. Administrative messages (e.g., order updates) will continue as needed.
12. Children’s Privacy
This website is for users 18+. We do not knowingly collect data from children without guardian consent. Contact us at info@biogen.co.za if you suspect otherwise.
13. Cookies and Tracking
We use cookies and similar technologies to:
- Essential: Enable core functions (e.g., checkout).
- Functional: Remember preferences (e.g., login).
- Performance: Analyze site usage (e.g., page visits).
- Targeting: Deliver relevant ads (via third parties).
Cookies may be first-party (ours) or third-party (e.g., advertisers). Manage them via browser settings, though disabling may limit functionality. See the table below for examples:
Type | Purpose | Duration |
---|---|---|
Essential Cookies
|
Enable site functions (e.g., cart)
|
Session
|
Functional Cookies
|
Save preferences (e.g., login)
|
Persistent (until deleted)
|
Performance Cookies
|
Track visits (anonymous)
|
Varies (e.g., 1 year)
|
Targeting Cookies
|
Personalize ads
|
Varies (e.g., 6 months)
|
14. Contact Details
For privacy inquiries related to Biogen SA:
- Email: info@biogen.co.za
- Phone: 0860 347 243 (Monday–Friday, 08:00–16:30; operated by Dis-Chem Careline)
- Additional Support: careline@dischem.co.za (Dis-Chem Careline)
- Information Officer: popia@dischem.co.za
- Information Regulator:
- Tel: 012 406 4818,
- Email: inforeg@justice.gov.za,
- Website: https://www.justice.gov.za/inforeg/
15. Governing Law
This Privacy Policy is governed by South African law, with disputes under SA court jurisdiction.