Privacy Policy

Introduction

REO operates this online store and website, including all related content, features, tools, products and services (the "Services"), to provide you with a curated shopping experience. This Privacy Policy describes how REO collects, uses, stores and discloses your personal information when you visit, use or make a purchase through our Services, or when you otherwise communicate with us. This policy is governed by the Protection of Personal Information Act 4 of 2013 (POPIA) and applicable South African law. By using our Services, you acknowledge that you have read and understood this Privacy Policy. 2. Who We Are (Responsible Party)

Under POPIA, REO is the Responsible Party for the personal information we collect and process. Our contact details are: Email: support@reo.co.za Address: 24 Creekside Road, Cape Town, Western Cape, 7441, South Africa 3. Personal Information We Collect

We may collect the following categories of personal information, depending on how you interact with us: Contact details — name, billing and shipping address, phone number, and email address. Financial information — payment card details, transaction information, and payment confirmation. Note: we do not store full card numbers — these are handled securely by our payment processor. Account information — username, password, security questions, and account preferences. Transaction information — items viewed, added to cart, purchased, returned or exchanged, and your order history. Communications — information you share when contacting our customer support team. Device and technical information — IP address, browser type, device identifiers, and network information collected automatically when you visit our website. Usage information — how you navigate and interact with our website, including pages visited and time spent. 4. How We Collect Personal Information

Directly from you — when you create an account, place an order, contact us, or otherwise provide information. Automatically — through cookies and similar technologies when you browse our website. From service providers — such as payment processors, logistics partners, and analytics providers who collect or process data on our behalf. From third parties — such as marketing or advertising partners, where permitted by law. 5. How We Use Your Personal Information

We process your personal information only for lawful purposes, including: Fulfilling orders — processing payments, arranging delivery, and managing returns or exchanges. Account management — creating and maintaining your account and preferences. Customer support — responding to your queries and resolving issues. Marketing — sending you promotional emails or communications where you have consented or where we have a legitimate interest. You may opt out at any time. Improving our Services — analysing usage data to improve our website and product offering. Security and fraud prevention — protecting our customers, systems, and business against fraud or misuse. Legal compliance — meeting our obligations under applicable South African law, including POPIA, the Consumer Protection Act, and the Electronic Communications and Transactions Act. 6. Sharing Your Personal Information

We do not sell your personal information. We may share it with: Service providers — including payment processors, courier and logistics companies, IT and hosting providers, and customer support platforms — who process data on our behalf and are bound by confidentiality obligations. Marketing partners — only where you have consented to receive personalised communications or advertising. Legal and regulatory authorities — when required to do so by law, court order, or to protect our legal rights. Business successors — in the event of a merger, acquisition, or business sale, your information may be transferred as part of that transaction. All third parties who handle your data are required to maintain appropriate security standards and may only use your information for the purposes for which it was shared. 7. Cookies and Tracking Technologies

Our website uses cookies and similar technologies to improve your browsing experience, remember your preferences, and help us understand how our website is used. You may control cookie settings through your browser at any time. Disabling certain cookies may affect the functionality of our website. 8. Cross-Border Data Transfers

Some of our service providers operate outside South Africa. Where your personal information is transferred internationally, we take reasonable steps to ensure it is protected to a standard consistent with POPIA and South African law, including through appropriate contractual safeguards. 9. Security and Retention

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, loss, or misuse. However, no online transmission is completely secure, and we cannot guarantee absolute security. We retain your personal information only for as long as necessary to fulfil the purposes described in this policy, or as required by law — including for accounting, tax, and dispute resolution purposes. 10. Children

Our Services are not directed at children under the age of 18. We do not knowingly collect personal information from minors. If you believe a child has provided us with their personal information, please contact us and we will delete it promptly. 11. Your Rights Under POPIA

As a data subject under POPIA, you have the following rights: Right to access — request a copy of the personal information we hold about you. Right to correction — request that inaccurate or outdated information be corrected. Right to deletion — request that we delete your personal information, subject to legal retention requirements. Right to object — object to the processing of your personal information, including for direct marketing purposes. Right to data portability — receive your personal information in a structured, commonly used format where technically feasible. Right to withdraw consent — where processing is based on your consent, you may withdraw it at any time without affecting prior processing. To exercise any of these rights, contact us at support@reo.co.za. We will respond within a reasonable time and in accordance with POPIA. 12. Complaints

If you have a concern about how we handle your personal information, please contact us first at support@reo.co.za. If you are not satisfied with our response, you have the right to lodge a complaint with the Information Regulator of South Africa: Website: www.justice.gov.za/inforeg Email: inforeg@justice.gov.za 13. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of those sites. We recommend reviewing their privacy policies before providing any personal information. 14. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. We encourage you to review this policy periodically. Continued use of our Services after any changes constitutes your acceptance of the updated policy. 15. Contact Us

For any questions about this Privacy Policy or to exercise your rights, please contact us: Email: support@reo.co.za Address: 24 Creekside Road, Cape Town, Western Cape, 7441, South Africa