Bass Warehouse Privacy Policy
Bass Warehouse (Pty) Ltd (registration 2018/433187/07) respects your privacy. This policy explains what personal information we collect, why, who we share it with, and your rights under the Protection of Personal Information Act (POPIA).
What we collect. When you shop online, request a quote or buy in store, we collect your name, email address, telephone number, billing and delivery addresses, any note you add to your order, and the details of what you bought and how you paid. You must give the details we need to process and deliver your order; without them we cannot complete it. We do not knowingly collect information about children or special personal information.
Why we use it. To process, confirm, pack, deliver and support your order or quote; to verify payment; to handle returns and warranty claims; to recognise you as a returning customer; and to keep the business records the law requires.
Where it is kept. Your full contact and delivery details are kept in our online store (WooCommerce, hosted in South Africa) and, for in-store purchases, in our point-of-sale system (Hike). Our internal order-management system also processes your order. It may use your full contact details briefly while it handles an order, but it keeps only your name, your order details and one-way codes that cannot be turned back into your email address or telephone number. It does not keep your addresses or order notes.
Who we share it with. Couriers who deliver your order (The Courier Guy, JKJ Couriers, PostNet); payment providers and banks (PayFast for online card payments; Standard Bank and First National Bank for in-store card machines; our bank for EFT payments); the companies that host our systems; authorities where the law requires; and our professional advisers. These service providers may use your information only on our instructions, under written agreements that require them to keep it confidential and secure. We do not sell your personal information.
Processing outside South Africa. Our order-management system runs in Germany (European Union) through Supabase (Singapore) and Vercel (United States), and our point-of-sale provider Hike is based in Australia. These providers and their sub-processors may process information in other countries where needed to run, secure and support their services. We transfer personal information outside South Africa only as section 72 of POPIA allows, under binding agreements that require an adequate level of protection.
How we protect it. Access is limited to authorised staff and protected by multi-factor sign-in at our providers. Information is encrypted in transit, and our providers encrypt it at rest. We keep daily backups and have a procedure for responding to security incidents.
How long we keep it. Only as long as we need it for these purposes, or as long as the law requires us to keep business, tax and accounting records. Technical logs at our hosting provider are kept for up to 30 days.
Cookies. Our website uses cookies needed to run your session and shopping cart. We do not use advertising or analytics trackers.
Marketing. We send promotions only through our WhatsApp groups, which you choose to join and can leave at any time. In a WhatsApp group, other members can see your name and telephone number, and WhatsApp processes your messages under its own privacy policy. We do not send marketing by email or SMS.
Your rights. You may ask what personal information we hold about you and request a copy; ask us to correct, update or delete it where appropriate; object to certain processing, including direct marketing (leave a WhatsApp group at any time, or ask us to remove you); and complain to the Information Regulator. Contact details in your online account are updated in our online store, and our other systems follow from there.
Contact us. Information Officer: Bryan Leppan, orders@basswarehouse.co.za, 031 765 8743. Deputy Information Officer: Storm Box, storm@basswarehouse.co.za, 084 332 3367. Our PAIA manual, which explains how to request records, is on our Contact Us page.
Complaints. If you are not satisfied with how we have handled your personal information, you may complain to the Information Regulator: POPIAComplaints@inforegulator.org.za, 010 023 5200, inforegulator.org.za.
Last updated: 08-10-2026