Nationwide courier delivery · Secure Payfast checkout

Procom Solutions

Privacy Policy

Last updated: 28 September 2026

1. Who we are

This policy explains how Lapanza (trading as Procom Solutions) (“Procom”, “we”, “us”) collects, uses, and protects your personal information when you use www.procomsolutions.co.za or buy from us, in line with South Africa's Protection of Personal Information Act (POPIA).

Lapanza is a partnership owned and operated by Johan Barkhuizen and Linandi Barkhuizen. Johan Barkhuizen is our Information Officer — the person responsible for POPIA compliance and your point of contact for any privacy question or request.

2. What we collect, and why

We only collect what we actually need to run the shop, talk to you, and keep the site working. Here's every point personal information reaches us:

Placing an order

Name, email, phone number, delivery address, and any order notes you add. Used to process and deliver your order, send order emails and your invoice, and (for large items) send you a delivery quote.

Optional customer account. You can check out as a guest, or create an account. If you do, we keep your name, email, phone, saved delivery details, whether you asked to receive emails about specials and new products, and a record of your orders and invoices, so you can see them when you log in. Your password is never stored in readable form (only as a one-way cryptographic hash). You can ask us to delete your account at any time; your order and invoice records are kept as described under "How long we keep it".

Newsletter (specials and new products). We only send marketing emails if you asked for them: either by signing up with your email address and then clicking the link in our confirmation email, or by ticking the box on your customer account. We keep your email address, when and where you opted in (for example, the website footer) and when you confirmed, as a record of your consent. Every newsletter has a one-click unsubscribe link; once you unsubscribe we keep your address on a do-not-email list so you aren't emailed again, unless you sign up again yourself. Newsletters are sent through Gmail (see section 4), and we don't track whether you open them.

Promo codes. If you use a promo code, we record it against your order and count how often it has been used (including per email address) to apply its limits.

Payment

Card, wallet and Instant EFT payments are handled entirely by Payfast — we never see or store your card or banking details. We do receive and keep a record of the payment confirmation Payfast sends us (amount, payment method, and a payment reference) against your order, for accounting and fraud/dispute purposes.

Contact form and WhatsApp

If you use our contact form, we collect your name, email, phone (optional) and your message, and use them to answer you. If you message us on WhatsApp, we receive your phone number and the messages you send, and use them to answer your question or handle your order.

Website security

Like most websites, our server keeps basic technical logs (such as IP address, browser type and the pages requested) to keep the site secure and fix problems. We don't use these logs for marketing.

3. Cookies & similar technology

We keep this deliberately minimal — we don't use advertising cookies, third-party tracking or third-party analytics, so we don't run a cookie-consent banner. Here's exactly what's used:

  • Session cookies — one keeps staff logged in to our admin area; another keeps you logged in to your customer account if you create one and log in (it lasts up to 30 days or until you log out). Both are strictly necessary, contain no readable personal information (just a random session token), and aren't set for shoppers who don't log in.
  • Local browser storage (not a cookie, but similar) — used to remember your shopping cart, the checkout details you've entered, and your light/dark theme preference. This stays on your device and isn't sent to us unless you check out.
  • Our own visitor statistics (first-party, no cookies) — to see which pages and products are popular and where shoppers drop off, your browser keeps a random visitor number in local storage (it isn't a cookie and contains nothing about you). With each page you open, it sends us that number, the page, the product, category or shop search on it, and the name of the website that linked you here (not the full link); adding an item to your cart or starting checkout is noted the same way. We also note whether you're on a phone, tablet or computer and whether you're logged in, but we don't store your IP address or browser details, don't link these statistics to your name, email or orders, and don't share them with anyone. Detailed records are deleted after 12 months (only daily totals are kept). If your browser sends a “Do Not Track” or “Global Privacy Control” signal, nothing is sent at all; clearing your browser's site data removes the visitor number.
  • Google Maps — if you choose to collect your order, the checkout shows a Google map of the collection point, which loads from Google's servers and so receives your device's IP address. It isn't loaded unless you choose collection.
  • Google Fonts — this site loads typefaces directly from Google's servers, which as a normal part of serving a font receives your device's IP address. We don't control what Google does with that; see Google's own privacy policy for detail.

4. Who we share your information with

We use a small number of trusted service providers to run the business — we don't sell or rent your information to anyone, ever. Each of the following only receives what it needs to do its job:

  • Our warehouse partner — most orders ship directly from our supplier's warehouse, so they receive your name, phone number, delivery address and the items ordered, to pack and dispatch your parcel.
  • Courier services — receive your name, phone number and delivery address, to deliver your parcel and send you delivery updates.
  • Payfast — processes your payment. Receives your name, email, and order amount to complete the transaction.
  • Google (Gmail) — we send order confirmations and notification emails through Gmail's infrastructure, so your email address and the email content (which may include your name and order details) passes through Google's systems as part of sending it.
  • Meta (WhatsApp) — if you contact us on WhatsApp, your phone number and messages pass through Meta's WhatsApp platform.

Some of these providers (Google, Meta) may process or store information on servers outside South Africa as part of their normal global infrastructure. Where that happens, it's only for the specific purposes listed above, with those providers' own standard security and data-protection commitments in place — we don't otherwise transfer your information out of South Africa or share it with anyone for their own marketing purposes.

We may also disclose information where required by law, to comply with a legal process, or to protect our rights, safety, or property.

5. How long we keep it

We keep personal information for as long as we reasonably need it: for as long as needed to fulfil an order and handle any warranty/returns period after it, and beyond that where we're legally required to keep financial/accounting records (currently five years for tax purposes). Website backups are kept on a rolling basis — only the most recent ones are kept, and older ones are automatically removed. Copies of these backups are also stored in a private Google Drive folder as an off-site safety copy (Google acts only as our storage provider); they are sent over an encrypted connection and stored encrypted by Google, and are kept on the same rolling basis. If you'd like your personal information removed sooner, contact us and we'll action it, subject to anything we're legally required to keep on record (e.g. completed order/financial history).

6. How we protect it

Our admin area requires a separate authenticated login; customer and staff passwords are never stored in readable form (only as a one-way cryptographic hash), session cookies are set to be inaccessible to page scripts (httpOnly), and login attempts are rate-limited against brute-force attempts. As with any online service, no method of transmission or storage is 100% secure, but we take reasonable, proportionate steps for a business our size to keep your information safe.

7. Your rights under POPIA

You have the right to:

  • Ask us to confirm what personal information we hold about you, and get a copy of it.
  • Ask us to correct information that's inaccurate, out of date, or incomplete.
  • Ask us to delete personal information we no longer have a valid reason to keep.
  • Object to us processing your information for direct marketing at any time.
  • Lodge a complaint with us directly, or with South Africa's Information Regulator, if you believe we've mishandled your information.

To exercise any of these, email our Information Officer at procompretoria@gmail.com. We'll respond as promptly as we reasonably can.

You can also contact the Information Regulator directly: inforegulator.org.za, complaints via POPIAComplaints@inforegulator.org.za, general enquiries via enquiries@inforegulator.org.za or toll-free on 0800 017 160.

8. Children

This website isn't directed at children, and we don't knowingly collect personal information from anyone under 18 without a parent or guardian's consent.

9. Changes to this policy

We may update this policy as our tools or processes change — for example, if we add a new service provider. The version published here is always the current one; we'll update the “last updated” date whenever we make a change.