Privacy Policy

This policy explains how Rhema Conference Centre, trading as Rhema Merch (“we”), collects and processes your personal information when you use rhemamerch.co.za. Our Information Officer is Stavros Kartapanis, contactable at steve@rhema.co.za.

Providing this information is voluntary, but without the essentials (name, email, payment) we cannot process an order. We do not knowingly collect children’s information; accounts are for users 18+.

We never see or store your card details — payment is handled entirely by our payment processor. We do not sell or rent your personal information to anyone, and we do not run advertising or retargeting trackers. We use essential cookies (sign-in sessions, your cart, and remembering you’ve seen a promotional pop-up) and website analytics (see below) to understand and improve the site.

We use Microsoft Clarity to understand how visitors use our site — which pages are viewed, where people click, and anonymised recordings of on-site browsing sessions. This runs for every visitor, whether or not you have an account, so we can see how the site performs for guests as well as members. Typed input (names, addresses, phone numbers and similar) is masked in recordings by default — we don’t see what you type. If you sign in, your session is tagged with your account so we can understand the member experience specifically; it is never linked to a guest’s identity. We do not use this data for advertising, and it is not shared with or sold to any third party beyond Microsoft acting as our processor.

Your information is stored and processed by trusted service providers acting as our operators under POPIA: Supabase (database and account authentication), Vercel (website hosting), Resend (transactional and marketing email), Paystack (payments), and Microsoft Clarity (website analytics). Some of these providers store data on servers outside South Africa; where that happens, POPIA’s cross-border transfer safeguards (section 72) apply — your information is protected by equivalent contractual and legal protections. Order and collection information is also visible to authorised Rhema Merch staff, strictly on a role-restricted, need-to-know basis.

We send promotional emails (“new merch updates”) only if you opt in — at signup or in your account. Every marketing email includes an unsubscribe link, and you can switch marketing off in Account → Subscription at any time. Transactional emails (order confirmations, collection notices, returns and support correspondence) are sent regardless, as they’re necessary to serve you.

We protect your information with encryption in transit, role-based access controls in our admin systems, and secured cloud infrastructure. We retain order records for as long as needed for warranty, tax, and legal purposes; account information is kept while your account is active. You may request account deletion — we will delete or de-identify your information except what we must lawfully retain (e.g. financial records of past orders).

You have the right to: be told when your information is collected or accessed; request a copy of the information we hold about you; ask us to correct or delete it; object to processing, including any direct marketing; complain to the Information Regulator; and not be subject to solely automated decisions with legal effect.

To exercise any of these, contact our Information Officer, Stavros Kartapanis, at steve@rhema.co.za, or via Account → Help & support. Information Regulator (South Africa): complaints.IR@justice.gov.za · inforegulator.org.za.

We may update this policy from time to time; the latest version, with its date, will always be published on this page.