1. Who we are
MUTI is the trading name under which this website sells. The registered South African company behind MUTI, the party you contract with, is named in our Terms & Conditions.
For the purposes of the Protection of Personal Information Act 4 of 2013 (POPIA), that company is the responsible party for the personal information described in this policy. Our Information Officer can be reached at info@mutivitamins.co.za.
2. What we collect
We collect the following categories of personal information:
- Identity and contact details: name, email address, mobile number.
- Delivery details: street address, suburb, city, province and postal code.
- Billing details, only if you choose to bill to a different address: the name, street address, suburb, city, province and postal code you give us for it. We keep it with the order so payments can be reconciled. If you leave "same as shipping address" selected we store nothing extra.
- Order information: what you bought, which supply length, when, and how much you paid.
- Payment information, which is handled by our payment providers. MUTI does not store card numbers.
- Marketing preferences: whether you have opted in to email from us, and whether you have unsubscribed.
- Signup discounts: any welcome discount code issued to you, stored against your email address so we can honour it at checkout.
- Technical and usage information: device, browser, pages viewed and referring source, collected through analytics.
- Analytics linked to you: once you give us your email address — by joining our mailing list or placing an order — we link your visits to a scrambled, one-way version of that address, so we can see how people actually use the site rather than counting the same person several times. We do not share your email address with our analytics provider, and the scrambled version cannot be turned back into it.
3. Why we process it
We process personal information for the following purposes, each with a lawful basis under POPIA:
- To fulfil your order and deliver it to you, which is necessary to perform our contract with you.
- To answer questions and provide customer support, in our legitimate interest of running the business.
- To send marketing email, only where you have consented. You may withdraw consent at any time.
- To issue, send and honour a welcome discount code when you join our mailing list, which is necessary to give you the thing you asked for.
- To measure how the website performs and improve it, using analytics, in our legitimate interest. Where you have given us your email address, this includes linking your visits to you through a scrambled, one-way version of it, so that repeat visits are recognised as one person.
- To meet legal obligations, including tax and consumer-protection record keeping.
4. Who we share it with
We share personal information only with the service providers we need in order to operate: our payment providers, our courier partner, our email provider and our analytics providers. Each is required to protect your information and use it only for the purpose we engaged them for.
Some of these providers process information outside South Africa. Where that happens, we rely on section 72 of POPIA and require the recipient to apply a comparable level of protection.
We do not sell personal information.
5. How long we keep it
We keep order and transaction records for the period required by South African tax and company law. Marketing information is kept until you unsubscribe or ask us to delete it, and analytics information for no longer than 14 months.
6. Your rights
Under POPIA you have the right to:
- Ask what personal information we hold about you.
- Ask us to correct or delete information that is inaccurate, irrelevant, excessive, out of date or obtained unlawfully.
- Object to processing on reasonable grounds.
- Withdraw consent to marketing at any time, including via the unsubscribe link in every email.
- Complain to the Information Regulator (South Africa) if you believe we have not handled your information lawfully.
7. Security
We take reasonable technical and organisational measures to protect personal information against loss, unauthorised access and unlawful processing, as required by section 19 of POPIA. No system is perfectly secure, and we will notify you and the Information Regulator of a compromise where POPIA requires it.
8. Contact
For any privacy question or request, contact info@mutivitamins.co.za.
This version applies to orders placed from 5 September 2026. Where we change a policy, the version published here at the time of your order is the one that applies to it.