Last updated 25 August 2026
ForgeFi is committed to protecting your personal information. This policy explains what we collect, why we collect it, what we do with it and what rights you have. It is written to comply with the Protection of Personal Information Act 4 of 2013 (POPIA).
Who we are
ForgeFi operates the online store at forgefi.co.za from Pinelands, Cape Town, South Africa. For any question about this policy or about your personal information, contact us at Admin@forgefi.co.za.
What we collect
When you place an order or contact us, we collect only what is needed to fulfil that order:
- Your name and surname
- Your email address
- Your delivery address, suburb, city and postal code
- Your contact telephone number
- Your order history and any notes you add to an order
- Technical information generated automatically by your visit, including your IP address, browser type and the pages you view
We never collect or store your card details. All card payments are processed directly by Yoco Technologies (Pty) Ltd on their own secure systems. Your card number never reaches our website or our records.
Why we collect it
- To process, pack and deliver your order
- To send you order confirmations, delivery updates and collection details
- To handle returns, refunds and warranty claims
- To answer your questions when you contact us
- To keep the accounting and tax records that South African law requires us to keep
- To detect and prevent fraudulent orders
- To understand which products and pages are popular so we can improve the store
Our lawful basis for processing
We process your information because it is necessary to perform the contract between us when you buy something, because we have a legal obligation to keep certain records, and, where neither of those applies, because you have given us your consent. You may withdraw consent at any time.
Who we share it with
We do not sell your personal information, and we do not share it for marketing purposes. We share only what is necessary, only with the following parties, and only so that your order can be completed:
- Yoco Technologies (Pty) Ltd — to process your payment securely
- Our courier partner — your name, delivery address and contact number, so that your parcel reaches you
- Our website hosting provider — which stores the site and its database on our behalf
If we are ever required by law, by a court order or by a regulator to disclose information, we will comply, and we will tell you unless we are legally prevented from doing so.
Cookies
Our website uses a small number of cookies that are strictly necessary for it to work. These remember what is in your basket, keep you signed in to your account if you have one, and hold any discount code you have applied. If you block these cookies, the basket and checkout will not function. We do not use advertising or cross-site tracking cookies.
How long we keep it
We keep order and invoice records for five years from the end of the tax year in which the order was placed, because the Tax Administration Act 28 of 2011 requires it. Enquiries that do not result in an order are deleted within twelve months. Account details are kept until you ask us to close your account.
Where it is stored
Your information is stored on servers operated by our hosting provider and by Yoco. Where any information is processed outside South Africa, it is only with parties who are subject to laws or binding agreements that provide protection substantially similar to POPIA.
How we protect it
The entire website runs over an encrypted HTTPS connection. Access to the store administration is restricted to authorised people and protected by strong, unique passwords. Payment data is never held by us at all. No system can be guaranteed perfectly secure, but if a breach ever affects your personal information we will notify you and the Information Regulator as POPIA requires.
Your rights
Under POPIA you have the right to:
- Ask what personal information we hold about you, and receive a copy of it
- Ask us to correct anything that is inaccurate or incomplete
- Ask us to delete information we no longer have a lawful reason to keep
- Object to us processing your information in a particular way
- Withdraw any consent you have given
- Lodge a complaint with the Information Regulator
To exercise any of these rights, email Admin@forgefi.co.za. We will respond within 30 days. There is no charge, unless a request is repetitive or excessive.
Contacting the Information Regulator
If you are not satisfied with how we have handled your information, you may complain to the Information Regulator of South Africa:
- Email: complaints.IR@justice.gov.za
- Website: inforegulator.org.za
- Post: JD House, 27 Stiemens Street, Braamfontein, Johannesburg, 2001
Changes to this policy
If we change this policy we will update the date at the top of this page. Where a change materially affects your rights, we will tell you by email before it takes effect.
Contact us
ForgeFi
Pinelands, Cape Town, South Africa
Email: Admin@forgefi.co.za