Privacy Policy
This Privacy Policy explains how BlackcoreX (Pty) Ltd ("BlackcoreX", "we", "us") collects, uses, discloses, and protects your personal information when you use blackcorex.co.za and our related services. We process personal information in accordance with the Protection of Personal Information Act, 2013 (POPIA).
01Who we are
BlackcoreX (Pty) Ltd is a security and tactical brand based in Cape Town, operating across South Africa and the wider SADC region. We are the responsible party for the personal information described in this policy.
- Entity: BlackcoreX (Pty) Ltd
- Location: Cape Town, Western Cape, South Africa
- Email: info@blackcorex.co.za
- Information Officer: To be confirmed. Enquiries to info@blackcorex.co.za
02Information we collect
| Category | Examples | Why |
|---|---|---|
| Account | Name, email address, hashed password | Create and secure your account |
| Orders & enquiries | Items requested, quantities, messages, contact details | Process orders and route enquiries |
| Membership | Tier selected, membership number, billing status | Administer membership |
| Payment | Handled by our payment provider. We do not store card data | Take and reconcile payments |
| Technical | IP address, browser type, pages viewed, cookies | Security, operation, and analytics |
| Communications | Emails and messages you send us | Respond to and record enquiries |
We do not knowingly collect special personal information or the personal information of children under 18 through this site.
03How we use your information
- To create, operate, and secure your account and sessions.
- To process orders, enquiries, quotes, and firearm-sourcing referrals.
- To administer membership and any subscriptions.
- To send transactional emails (confirmations, resets, status updates).
- To operate, protect, and improve the site, and to prevent fraud and abuse.
- To comply with our legal and regulatory obligations.
04Lawful basis & consent
We process personal information where it is necessary to perform a contract with you (for example, fulfilling an order), to comply with a legal obligation, to pursue our legitimate interests in operating a secure business, or where you have given consent. You may withdraw consent for optional processing (such as marketing or non-essential analytics) at any time.
05Who we share it with
We share personal information only with operators (processors) that help us run the service, each bound to process it on our instruction and to protect it:
| Operator | Purpose |
|---|---|
| Payment provider | Processing payments (e.g. PayFast / EFT reconciliation) |
| Email provider | Sending transactional email (Resend) |
| Hosting | Serving the site (Vercel) |
| Database | Storing accounts and orders (Neon), with a secondary backup store |
We do not sell your personal information. Where a firearm or restricted item enquiry is referred to a licensed dealer, only the information needed to complete that enquiry is shared, and only after you have chosen to proceed. See our Terms & Conditions and Sourcing & Returns.
06Cross-border transfers
Some of our operators store or process data outside South Africa (for example, in the European Union). Where personal information is transferred across borders, we take reasonable steps to ensure it receives a comparable level of protection, as required by POPIA.
07Field Console records
The Field Console lets you keep a register of firearms you own: makes, models, serial numbers, licence and competency numbers, valuations, storage locations and photographs. We treat that as information that could put you at risk if it leaked, and we have built it so that it cannot.
- It is encrypted on your device before it reaches us. With an active membership, your register is sealed in your browser with a key derived from a passphrase you choose. Only the sealed copy is sent to us and stored against your account, which is what lets it follow you from one device to another.
- We cannot read it. Your passphrase and your recovery code never leave your device. We hold two wrapped copies of your key that can only be opened with one of them. No BlackcoreX administrator can decrypt your register, and neither could anyone who obtained our database. We cannot produce readable contents in response to a request, because we do not have them.
- Without a membership, the console runs entirely in your browser and nothing is sent to us at all. The preview is demonstration data and is never associated with you.
- There is no reset. If you lose both your passphrase and your recovery code, the stored copy cannot be opened by anyone, including us. The console makes you take an export before encryption is switched on; keep it.
You can delete your register from our systems at any time from the console's Config screen, which removes the sealed copy, the imagery and the wrapped key together.
08How we protect it
- Passwords are stored only as salted cryptographic hashes, never in plain text.
- Traffic is encrypted in transit over HTTPS/TLS.
- Access to systems and data is restricted on a need-to-know basis.
- Card data is handled by our PCI-compliant payment provider, not stored by us.
09How long we keep it
We keep personal information only for as long as necessary for the purposes described here or as required by law (for example, records needed for tax and financial-reporting obligations). When no longer required, it is deleted or de-identified.
10Cookies
We use essential cookies to run secure sessions and remember your cart, and optional analytics cookies to understand how the site is used. You can accept or decline optional cookies via the notice shown on your first visit, and control cookies through your browser settings.
11Your rights under POPIA
Subject to the Act, you have the right to:
- Ask what personal information we hold about you, and request access to it.
- Request correction or deletion of your personal information.
- Object to processing, or withdraw consent for optional processing.
- Lodge a complaint with the Information Regulator.
To exercise any of these rights, contact info@blackcorex.co.za.
12Complaints
If you are not satisfied with how we handle your personal information, you may complain to the Information Regulator (South Africa): inforeg@justice.gov.za · inforegulator.org.za.
13Changes to this policy
We may update this policy from time to time. The effective date above reflects the latest version. Material changes will be communicated through the site.
14Contact
Questions about this policy or your personal information: info@blackcorex.co.za.