Privacy Policy

Core Peripherals (Pty) Ltd, trading as iStore Business is a division of iStore (Registration number: 1996/010298/07, VAT number: 4190160756), an Apple Premium Business Partner, Apple Premium Reseller and Apple Authorised Service Provider operating in South Africa. In this Privacy Policy, references to "iStore Business", "we", "us" or "our" refer to Core Peripherals (Pty) Ltd in its capacity as operator of the iStore Business division.

Our registered address is: 1 Sandton Drive, Sandton, Johannesburg, 2191

We collect personal information that you voluntarily provide to us and information collected automatically when you interact with our website and services.

• Contact information: name, business email address, telephone number, company name, job title
• Enquiry details: your questions, service interests, and messages submitted via our contact forms
• Business information: fleet size, IT environment details, and deployment requirements provided during service engagements
• Correspondence: emails and communications you send to us

• Usage data: pages visited, time on site, referring URLs, and browser interactions
• Device information: browser type, operating system, and device type
• IP address: used for security purposes and approximate geographic location (country/region level)
• Cookies and similar technologies: as described in Section 7

We process your personal information for the following purposes, each supported by a lawful basis under POPIA:

• Service delivery: to respond to your enquiries, provide quotes, and deliver the services you have engaged us for (contractual necessity)
• Communication: to send you information about services relevant to your enquiry (legitimate interest / consent)
• Marketing: to send you updates about iStore Business products, services, and events, where you have consented or where we have a legitimate interest as an existing business contact
• Website improvement: to analyse usage patterns and improve our website experience (legitimate interest)
• Legal compliance: to meet our obligations under applicable South African law (legal obligation)
• Security: to protect our systems, website, and users from fraud, abuse, and security threats (legitimate interest)

We do not sell your personal information to third parties. We may share your information in the following limited circumstances:

• Service providers: trusted third-party vendors who assist in operating our business (CRM platforms, email service providers, analytics tools) who are bound by data processing agreements
• Apple Inc.: as required to facilitate Apple Business Manager enrolments, Apple warranty and repair coordination, and Apple programme participation
• Microsoft Corporation: as required to facilitate Microsoft 365 licensing and Azure Active Directory integrations
• Legal requirements: where required by law, court order, or regulatory authority
• Business transfers: in connection with any merger, acquisition, or sale of business assets, subject to appropriate confidentiality obligations

As a data subject under POPIA, you have the following rights:

• Right of access: to request a copy of personal information we hold about you
• Right to correction: to request correction of inaccurate or incomplete personal information
• Right to deletion: to request deletion of your personal information, subject to our legal retention obligations
• Right to object: to object to processing of your personal information, including for direct marketing purposes
• Right to lodge a complaint: to lodge a complaint with the Information Regulator of South Africa

To exercise any of these rights, please contact our Information Officer at privacy@istorebusiness.co.za. We will respond within 30 days of receiving your request.

We retain your personal information for as long as necessary to fulfil the purposes described in this policy, or as required by law. Specifically:

• Contact form submissions and enquiry records: 3 years from last contact
• Customer records and service engagement data: 7 years (in line with South African financial record-keeping requirements)
• Marketing consent records: until consent is withdrawn, plus 1 year
• Website analytics data: 26 months (aggregated, anonymised)

Our website uses cookies and similar tracking technologies to enhance your experience and analyse website traffic. We use the following categories of cookies:

• Strictly necessary cookies: required for the website to function. These cannot be disabled.
• Analytics cookies: help us understand how visitors interact with our website (Google Analytics 4). These are only set with your consent.
• Marketing cookies: track visitors across websites to display relevant advertising. Only set with explicit consent.

You can control cookies through your browser settings or by managing your consent preferences via our cookie consent banner.

Some of our service providers are based outside South Africa (including providers in the United States and European Union). When we transfer personal information internationally, we ensure appropriate safeguards are in place, including standard contractual clauses and adequacy decisions where applicable.

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, disclosure, alteration, and destruction. These measures include encryption, access controls, and regular security assessments. However, no method of transmission over the internet or electronic storage is 100% secure.

iStore Business services are directed at business professionals and enterprises. We do not knowingly collect personal information from children under the age of 18. If we become aware that we have collected personal information from a child without appropriate parental consent, we will delete that information promptly.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or applicable law. We will notify you of material changes by posting a notice on our website and updating the "Last updated" date above. Your continued use of our services after any changes constitutes acceptance of the updated policy.

If you have any concerns regarding the use of your information, please contact us at legal@istorebusiness.co.za

You also have the right to lodge a complaint with the Information Regulator of South Africa at inforegulator.org.za.