Privacy Policy

This Privacy Policy explains how MTBApp / STACK’D (“we”, “us”, “our”) collects, uses and protects your personal information when you visit this website or buy a FLOWBIO Sensor from us. We are the authorised South African distributor of FLOWBIO products, and we are committed to handling your information in line with the Protection of Personal Information Act, 2013 (POPIA).

1. Information we collect

We only collect what we need to process your order and support you:

• Identity & contact details — your name, email address and phone number.
• Delivery details — the shipping address, city, postal code and province you provide at checkout.
• Order information — the products you buy, order value and order history.
• Payment information — your payment is processed securely by PayFast. We do not see, receive or store your card or banking details.
• Technical information — standard server and device information (such as browser type and IP address) collected by our hosting provider for security and performance.

2. How we use your information

• To process, fulfil and deliver your order, and to send you order confirmations and tracking.
• To provide customer support and handle returns, warranty or refund requests.
• To meet our legal, tax and accounting obligations.
• To detect and prevent fraud and to keep the website secure.
• Only with your consent, to send you occasional updates or offers — you can opt out at any time.

3. Who we share it with

We do not sell your personal information. We share it only with parties that help us deliver your order:

• PayFast (Payfast (Pty) Ltd) — to process your payment securely.
• Courier / delivery partners — to ship your order to you.
• Google Firebase — our website, database and order records are hosted on Google’s secure infrastructure.
• FLOWBIO — where necessary to fulfil a warranty claim or product support request.
• Regulators or authorities — where we are required to by law.

4. Cross-border processing

Some of our service providers (such as Google Firebase and PayFast) may store or process information on servers that operate across borders. Where this happens, we take reasonable steps to ensure your information continues to be protected to a standard consistent with POPIA.

5. How long we keep it

We keep your order and transaction records for as long as necessary to fulfil your order and to comply with South African tax and company-law retention requirements (generally at least five years). Information we no longer need is securely deleted.

6. How we protect it

We use reasonable technical and organisational measures to safeguard your information, including secure hosting, restricted access and encrypted payment processing through PayFast. No online service can be guaranteed to be completely secure, but we take your privacy seriously.

7. Your rights under POPIA

You have the right to:

• Ask what personal information we hold about you and request a copy.
• Ask us to correct or update information that is inaccurate.
• Ask us to delete information we no longer have a lawful reason to keep.
• Object to processing, or withdraw marketing consent, at any time.
• Lodge a complaint with the Information Regulator (South Africa).

To exercise any of these rights, contact us using the details below.

8. Cookies

This site uses only essential cookies and similar technologies needed to make the site and checkout work (for example, a temporary anonymous session to link your order to your payment). We do not use third-party advertising or cross-site tracking cookies.

9. Changes to this policy

We may update this policy from time to time. The latest version will always be published on this page with the “last updated” date above.