Privacy Policy for R2M Legends

Last Updated: September 17, 2026

1. Introduction

This Privacy Policy explains how R2M Legends (“we,” “us,” or “our”) collects, uses, shares, and protects your personal information when you visit or use r2mlegends.com (the “Website”).

We are committed to protecting your privacy and complying with the Protection of Personal Information Act, 2013 (Act No. 4 of 2013) (“POPIA”) and the Electronic Communications and Transactions Act, 2002 (Act No. 25 of 2002) (“ECT Act”) . This Policy should be read together with our Website Terms and Conditions .

2. Who We Are (Responsible Party)

For the purposes of POPIA, R2M Legends is the “Responsible Party” who determines the purpose and means of processing your personal information.

Responsible Party: R2M Legends
Website: r2mlegends.com
Email: info@r2mlegends.com

3. Information Officer

In terms of POPIA, we have appointed an Information Officer who is responsible for ensuring compliance with POPIA.

Email: info@r2mlegends.com

4. What Personal Information We Collect

We may collect the following categories of personal information:

4.1 Information You Provide Voluntarily

• Identity Information: Name, surname, username, password

• Contact Information: Email address, telephone number, physical address

• Transaction Information: Payment details, billing information, purchase history

• Communication Information: Messages you send to us via contact forms or email

4.2 Information Collected Automatically

When you visit the Website, we may automatically collect:

• Technical Information: IP address, browser type and version, device identifiers, operating system

• Usage Information: Pages visited, time spent on pages, click patterns, referring website addresses

• Cookie Data: Information collected through cookies and similar technologies (see Section 8)

5. How We Use Your Personal Information

We process your personal information only for specific, explicitly defined, and lawful purposes:

• To provide, operate, and maintain the Website

• To process transactions and send related information (invoices, confirmations)

• To respond to your comments, questions, and requests

• To send you technical notices, updates, and security alerts

• To communicate with you about products, services, and promotions (where you have consented)

• To monitor and analyse usage patterns to improve the Website

• To detect, prevent, and address technical issues or security breaches

• To comply with legal obligations

6. Legal Basis for Processing

We process your personal information based on one or more of the following lawful grounds under POPIA:

• Consent: You have given clear consent for us to process your personal information for a specific purpose

• Contract: Processing is necessary for the performance of a contract with you

• Legal Obligation: Processing is necessary for compliance with a legal obligation

• Legitimate Interest: Processing is necessary for our legitimate interests, provided your rights are not overridden

7. Sharing Your Personal Information

We do not sell, rent, or trade your personal information. We may share your information with:

• Service Providers: Third-party vendors who assist in operating the Website (hosting providers, payment processors, analytics providers)

• Legal Authorities: When required by law, court order, or to protect our legal rights

• Business Transfers: In connection with a merger, acquisition, or sale of assets

All third-party service providers are required to process your personal information only for the purposes we specify and in accordance with POPIA .

8. Cookies and Similar Technologies

We use cookies and similar tracking technologies to enhance your experience on the Website. Under POPIA, cookies that collect personal information (including online identifiers) are subject to data protection requirements .

8.1 Types of Cookies We Use

• Strictly Necessary Cookies: Required for the Website to function. These cannot be disabled.

• Analytics Cookies: Help us understand how visitors interact with the Website.

• Functional Cookies: Remember your preferences and settings.

• Marketing Cookies: Used to deliver relevant advertisements (if applicable).

8.2 Managing Cookies

Where we rely on consent for non-essential cookies, you may accept or reject them via our cookie notice. You can also manage cookies through your browser settings. Please note that disabling certain cookies may affect Website functionality.

9. International Data Transfers

Your personal information may be transferred to and processed in countries outside of South Africa where our service providers are located. Where we transfer personal information outside South Africa, we will ensure that:

• The recipient is subject to a law, binding corporate rules, or contractual clauses that provide an adequate level of protection substantially similar to POPIA ; or

• You have consented to the transfer; or

• Another exception under section 72 of POPIA applies.

10. Security of Your Personal Information

We implement appropriate, reasonable technical and organisational measures to secure the integrity of your personal information and prevent loss, damage, or unauthorised access . These measures include:

• Encryption of sensitive data in transit and at rest

• Regular security assessments

• Access controls limiting who can access personal information

• Secure payment processing systems compliant with industry standards 

However, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.

11. Retention of Personal Information

We retain your personal information only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. When personal information is no longer needed, we will destroy, delete, or de-identify it in a secure manner .

12. Your Rights Under POPIA

As a data subject, you have the following rights:

• Right to Access: Request confirmation of whether we hold personal information about you and receive a copy of that information

• Right to Correction: Request correction or deletion of inaccurate, irrelevant, excessive, misleading, or unlawfully obtained information

• Right to Deletion: Request deletion of personal information that we are no longer authorised to retain

• Right to Object: Object to processing based on legitimate interests or for direct marketing purposes

• Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent

• Right to Complain: Lodge a complaint with the Information Regulator

To exercise any of these rights, please contact our Information Officer using the details in Section 3. We will respond to your request within a reasonable time, not exceeding 30 days .

13. Children’s Privacy

We do not knowingly collect personal information from children under 18 without the consent of a parent or guardian. If you believe we have collected information from a child without proper consent, please contact us immediately .

14. Security Breach Notification

In the event of a security compromise where your personal information has been accessed or acquired by an unauthorised person, we will notify the Information Regulator and affected data subjects as soon as reasonably possible, in accordance with section 22 of POPIA . Notification will be provided in writing via email or a prominent notice on the Website.

15. Direct Marketing

We will only send you direct marketing communications if you have consented to receiving them, or if you are an existing customer and the marketing relates to similar products or services. You may opt out of direct marketing at any time using the unsubscribe link in our communications or by contacting us .

16. Third-Party Links

The Website may contain links to third-party websites. We are not responsible for the privacy practices of those sites. We encourage you to review the privacy policies of any third-party site you visit .

17. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated “Last Updated” date. We encourage you to review this Policy periodically. Material changes will be communicated via a notice on the Website or email.

18. Contact Us and Complaints

If you have questions or concerns about this Privacy Policy or our data processing practices, please contact our Information Officer:

Email: [insert email]
Address: [insert physical address]

Information Regulator (South Africa)

If you believe your personal information has been processed unlawfully, you may lodge a complaint with the Information Regulator:

Website: inforegulator.org.za
Email: complaints.IR@justice.gov.za
Address: JD House, 27 Stiemens Street, Braamfontein, Johannesburg, 2001