Privacy policy
PRIVACY POLICY
Last updated: May 25, 2026
FAB ASIAN FOOD TEA & BEVERAGE ("we", "us", or "our") operates this store and website, including all related information, content, features, tools, products and services (the "Services").
This Privacy Policy explains how we collect, use, disclose, store, and protect your personal information when you visit, use, or make a purchase through the Services, or otherwise communicate with us.
This Privacy Policy is drafted in accordance with the Protection of Personal Information Act, 4 of 2013 ("POPIA") of South Africa, as well as applicable international data protection laws where relevant.
If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy will prevail with respect to the processing of personal information.
By accessing or using the Services, you acknowledge that you have read and understood this Privacy Policy.
1. Personal Information We Collect
"Personal information" means information relating to an identifiable, living natural person or juristic person, as defined under POPIA.
Depending on how you interact with the Services, we may collect or process the following categories of personal information:
- Contact details: Name, billing address, shipping address, telephone number, email address
- Financial information: Payment card details, bank or financial account information, transaction references, and payment confirmations (processed securely by third-party payment providers)
- Account information: Username, password, preferences, and account settings
- Transaction information: Products viewed, added to cart or wishlist, purchased, returned, exchanged, or cancelled
- Communications: Information you provide when contacting us for support or enquiries
- Device and technical data: IP address, browser type, device identifiers, operating system, and network information
- Usage and behavioural data: Interactions with the Services, pages visited, time spent, clicks, browsing behaviour, and activity logs
- Advertising data: Ad interactions, conversion events, and audience segment data collected via third-party advertising platforms
- Cookie and tracking data: Data collected through cookies, pixels, tags, and similar technologies as described in Section 5 below
We do not knowingly collect special personal information unless required by law or provided voluntarily with appropriate safeguards.
2. Sources of Personal Information
We collect personal information from the following sources:
- Directly from you when you place orders, create an account, subscribe to communications, complete forms, or contact us
- Automatically through cookies, pixels, tags, and similar tracking technologies when you use the Services
- From our service providers who process information on our behalf, including Shopify, payment gateways, and delivery partners
- From advertising and analytics platforms, including Google LLC, Meta Platforms Inc., and TikTok Inc., as described in this Policy
- From third parties or partners where permitted by law
3. Cookies and Tracking Technologies
We use cookies, pixels, tags, and similar technologies to operate and improve the Services, personalise your experience, and deliver relevant advertising.
Types of Cookies We Use
| Type | Purpose |
|---|---|
| Essential cookies | Required for the Services to function (e.g. cart, checkout, login sessions) |
| Analytics cookies | Help us understand how visitors use the Services |
| Advertising cookies | Used to deliver and measure targeted advertising |
| Functional cookies | Remember your preferences and settings |
Third-Party Tracking Technologies
We use the following third-party tools that set cookies or collect data when you visit our site:
Google Analytics 4 (GA4) We use GA4 to analyse how users interact with the Services. GA4 collects data such as pages visited, session duration, device type, and approximate location. This data is processed by Google LLC and may be used to improve our Services and inform advertising decisions.
- Opt out: https://tools.google.com/dlpage/gaoptout
- Google Privacy Policy: https://policies.google.com/privacy
Google Tag Manager (GTM) We use GTM to manage and deploy tracking tags on our website. GTM itself does not collect personal information but facilitates the collection of data by the tags it fires, including GA4, Google Ads, and other tools described in this section.
Google Ads We use Google Ads to run advertising campaigns and measure conversions. Google Ads uses cookies and the Google Ads conversion tag to track when users who clicked our ads complete a purchase or other action. We may also use Google's remarketing features to show ads to previous visitors across the Google Display Network and YouTube.
- Opt out: https://adssettings.google.com
Meta Pixel (Facebook & Instagram Ads) We use the Meta Pixel, operated by Meta Platforms Inc., to measure the effectiveness of our advertising on Facebook and Instagram, build audiences for retargeting, and track conversion events such as purchases and add-to-cart actions. The Meta Pixel collects data including your IP address, browser information, and actions taken on our site.
- Opt out: https://www.facebook.com/adpreferences
- Meta Privacy Policy: https://www.facebook.com/policy
TikTok Pixel (TikTok Ads) We use the TikTok Pixel, operated by TikTok Inc. (and its affiliates), to measure ad performance, track conversions, and build audiences for advertising on TikTok. The TikTok Pixel collects data including device identifiers, IP addresses, and behavioural data from your interactions with our Services. Please note that TikTok may transfer data to servers located in the United States, Singapore, and other jurisdictions including the People's Republic of China, subject to TikTok's data transfer and storage policies.
Cookie Consent and Managing Preferences
When you first visit our Services, you will be asked to provide consent for non-essential cookies via our cookie consent banner. You may withdraw or adjust your consent at any time by:
- Clicking the "Cookie Preferences" link in the footer of our website
- Adjusting your browser settings to block or delete cookies
- Using the opt-out links provided above for each platform
Please note that disabling certain cookies may affect the functionality of the Services.
4. Lawful Basis for Processing (POPIA Section 11)
We process personal information only where there is a lawful basis to do so, including:
- Your consent, where required (e.g. marketing communications, non-essential cookies)
- Performance of a contract with you (e.g. fulfilling and delivering orders)
- Compliance with legal obligations under applicable law
- Legitimate business interests, provided these do not override your rights and freedoms (e.g. fraud prevention, improving our Services, advertising)
5. How We Use Personal Information
We use personal information to:
Provide and Improve the Services
- Process orders and payments
- Deliver products and manage returns or exchanges
- Create and manage customer accounts
- Personalise your shopping experience
- Maintain accurate business records
- Improve website functionality and user experience
Marketing and Advertising
- Send promotional communications where you have consented or where we have a legitimate interest
- Deliver targeted and retargeted advertising through Google Ads, Meta Ads, and TikTok Ads
- Build custom and lookalike audiences on advertising platforms using anonymised or hashed data
- Measure the effectiveness of our advertising campaigns
- You may opt out of marketing communications at any time by clicking "unsubscribe" in any email or contacting us directly
Analytics
- Understand how customers use the Services
- Track conversions and website performance
- Conduct market research and product development
Security and Fraud Prevention
- Verify identity and protect accounts
- Detect and prevent fraud, abuse, or unlawful activity
Customer Support
- Respond to queries, complaints, and returns
- Maintain our relationship with customers
Legal and Compliance Purposes
- Comply with applicable laws and regulations
- Enforce our Terms of Service
- Respond to lawful requests from authorities
6. Remarketing and Custom Audiences
We may use your personal information, in hashed or anonymised form where possible, to create custom audiences and lookalike audiences on the following platforms:
- Google Ads (Customer Match)
- Meta Ads (Custom Audiences)
- TikTok Ads (Custom Audiences)
This means that if you have previously visited our site or made a purchase, you may see our advertisements when using these platforms. You can opt out of this type of advertising using the platform controls listed in Section 3 above.
7. Disclosure of Personal Information
We may disclose personal information:
- To Shopify Inc. and other service providers acting as operators under POPIA
- To payment processors, couriers, and IT providers who assist in delivering the Services
- To advertising and analytics platforms, including Google LLC, Meta Platforms Inc., and TikTok Inc., for the purposes described in this Policy
- To marketing partners where lawful and permitted
- Where you direct or consent to disclosure
- To comply with legal obligations or to protect our rights
- In connection with a business transfer or restructuring
All operators and third-party processors are required to process personal information subject to appropriate confidentiality and security obligations.
8. Relationship with Shopify
Our Services are hosted by Shopify Inc., which processes personal information to provide and improve the Services. Shopify is responsible for certain processing activities and responds to data subject requests relating to its own processing.
More information is available in the Shopify Consumer Privacy Policy at: https://privacy.shopify.com/en
9. International Transfers
Personal information may be transferred outside of South Africa to jurisdictions where our service providers and advertising partners operate, including but not limited to:
| Recipient | Country | Purpose |
|---|---|---|
| Shopify Inc. | Canada / USA | Hosting and e-commerce infrastructure |
| Google LLC | USA | Analytics, advertising, and tag management |
| Meta Platforms Inc. | USA | Advertising and audience targeting |
| TikTok Inc. | USA / Singapore / China | Advertising and audience targeting |
| Payment processors | Various | Payment processing |
Where such transfers occur, we ensure that:
- The recipient country provides an adequate level of protection; or
- Appropriate contractual safeguards are in place (e.g. Standard Contractual Clauses); or
- You have consented to the transfer,
as required under POPIA Section 72.
10. Third-Party Websites
The Services may contain links to third-party websites. We are not responsible for the privacy practices or content of those sites. You should review their privacy policies independently.
11. Children's Information
The Services are not intended for children under the age of 18.
We do not knowingly collect personal information of children under 18 without the consent of a parent or legal guardian, as required by POPIA. If such information is identified, it will be deleted upon request.
12. Security and Retention
We implement reasonable technical and organisational measures to safeguard personal information against loss, unauthorised access, disclosure, alteration, or destruction.
While we strive to protect your data, no system is completely secure. You are responsible for maintaining the confidentiality of any account credentials.
Personal information is retained only for as long as necessary to:
- Fulfil the purposes outlined in this Policy
- Comply with legal and regulatory obligations
- Resolve disputes or enforce agreements
When personal information is no longer required, it is securely deleted or anonymised.
13. Your Rights Under POPIA
Subject to applicable law, you have the right to:
- Access your personal information held by us
- Request correction of inaccurate or incomplete information
- Request deletion of your personal information (subject to legal retention requirements)
- Object to processing on reasonable grounds
- Object to direct marketing at any time, without giving reasons
- Request restriction of processing in certain circumstances
- Data portability where technically feasible
We will not discriminate against you for exercising any of these rights.
To exercise your rights, please contact us using the details in Section 15. We may require identity verification before processing your request and will respond within a reasonable timeframe as required by law.
14. Information Officer
In accordance with POPIA, we have appointed an Information Officer responsible for ensuring compliance with this Policy and applicable data protection law:
Information Officer: FAB ASIAN FOOD TEA & BEVERAGE 📧 benson@fabasian.co.za
15. Complaints
If you believe we have not complied with POPIA or this Privacy Policy, please contact us in the first instance so we can attempt to resolve the matter.
You also have the right to lodge a complaint with the Information Regulator of South Africa:
- Website: https://www.justice.gov.za/inforeg
- Email: inforeg@justice.gov.za
16. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. The latest version will always be available on our website with the updated date shown at the top of this Policy.
We encourage you to review this Policy periodically.
17. Contact Us
If you have questions about this Privacy Policy, wish to exercise your rights, or have any concerns about how your personal information is handled, please contact us:
📧 benson@fabasian.co.za 🏢 FAB ASIAN FOOD TEA & BEVERAGE
This Privacy Policy is governed by the laws of the Republic of South Africa.