// Your data, handled properly

Privacy Policy

This policy explains what personal information Randcore collects when you use our store, why we collect it, who we share it with, and the rights you have over it. It also serves as our collection notice under the Protection of Personal Information Act (POPIA).

Who we are

The responsible party for your personal information is Randcore Development (Pty) Ltd ("Randcore", "we", "us"), an IT and computer-hardware retailer trading as the Randcore store at shop.randcore.co.za and dispatching from Rosebank, Johannesburg, South Africa.

  • Company registration number: 2026/203931/07
  • Registered address: Parktown Quarter, 3rd Avenue, Parktown North, Johannesburg
  • Contact: through our contact form or on +27 62 524 6155

Our Information Officer

POPIA requires us to appoint an Information Officer who is responsible for how we handle personal information and for dealing with your requests and complaints.

What we collect and when

We collect the following personal information at the points described below. We only collect what we need to run the store and fulfil your orders.

  • At checkout: your name, email address, phone number and delivery address, so we can process and deliver your order.
  • When you register an account: your name, email address, phone number and, over time, your order history, so you can track purchases and check out faster.
  • When you subscribe to our newsletter: your email address, so we can send you product news and offers.
  • When you use the contact form: your name, email address, phone number and the message you send us, so we can respond.
  • Automatically as you browse: your IP address and basic device and browser information, collected through our website and security provider to keep the site running, prevent fraud and abuse, and improve performance.

Why we use it, and our lawful basis

POPIA allows us to process personal information where we have a lawful basis to do so. The basis depends on what we are doing.

  • Processing and delivering your orders (name, contact details, delivery address, order history): necessary to perform our contract with you.
  • Managing your account and customer support (account details, order history, contact-form messages): necessary to perform our contract with you and in our legitimate interest in supporting customers.
  • Sending the newsletter and marketing (email address): based on your consent, which you can withdraw at any time using the unsubscribe link or by contacting us.
  • Keeping the site secure and preventing fraud (IP and device information): in our legitimate interest in protecting the store and our customers.
  • Meeting legal and tax obligations (order and transaction records): necessary to comply with the law, including record-keeping requirements.

Where you provide information as part of buying from us, the Electronic Communications and Transactions Act (ECTA, section 43) requires us to give you certain supplier details and transaction information. We provide these on our site and at checkout.

Voluntary or mandatory, and what happens if you do not provide it

POPIA requires us to tell you whether giving us your information is voluntary or mandatory, and what happens if you do not provide it.

  • Mandatory for an order: your name, contact details and delivery address are required to process and deliver an order. Without them we cannot fulfil your order.
  • Voluntary: subscribing to our newsletter is voluntary. If you choose not to subscribe, or you unsubscribe later, it does not affect your ability to buy from us.

Who we share it with

We do not sell your personal information. We share it with the service providers (operators and sub-processors under POPIA) who help us run the store. Each may only use it for the purpose we set, under contract.

  • NjiaPay processes your card and payment details when you pay. Your full card information is handled by NjiaPay's payment systems, not stored by us.
  • Bob Go handles delivery. We share your name, delivery address and phone number so your order can be collected and delivered by the chosen courier service.
  • Cloudflare provides our content delivery and security layer, which processes IP and request data to protect and speed up the site.
  • Resend sends our transactional emails, such as order confirmations, using your name and email address.

We may also disclose personal information where the law requires it, or to protect our rights and the safety of our customers.

Cross-border transfers

Some of our service providers process data on servers outside South Africa. Where personal information is transferred across borders, we take reasonable steps to ensure it is handled with a level of protection comparable to that required by POPIA, through the contracts and safeguards in place with those providers.

How long we keep it

We keep personal information only for as long as we need it for the purposes set out above, or for as long as the law requires us to keep it (for example, tax and transaction records). Our retention periods are: order and transaction records are kept for at least five years to meet tax and company-law obligations; account information is kept while your account is open and for a reasonable period after you close it; newsletter records are kept until you unsubscribe; and contact-form messages are kept for up to 24 months. When we no longer need it, we delete it or remove information that identifies you.

Your rights

Under POPIA you have the right to:

  • ask what personal information we hold about you and request access to it;
  • ask us to correct or update information that is wrong or incomplete;
  • ask us to delete information where we no longer have a lawful reason to keep it;
  • object to certain processing, including direct marketing; and
  • withdraw your consent at any time where we rely on consent, such as for the newsletter.

To exercise any of these rights, contact our Information Officer at [email protected], or reach us through our contact form. We may need to confirm your identity before we act on a request.

Complaints to the Information Regulator

If you are not satisfied with how we have handled your personal information, you have the right to complain to the Information Regulator of South Africa. You can reach the Regulator at:

We would appreciate the chance to resolve your concern directly first, so please do contact us as well.

How we protect your information

We take reasonable technical and organisational measures to protect your personal information. These include encrypting traffic to and from the site using TLS (HTTPS), restricting access to personal information to people who need it, and relying on established service providers for payments, delivery, email and security. No method of transmission or storage is completely secure, so we cannot guarantee absolute security, but we work to protect your information and to address any incident responsibly.

Changes to this policy

We may update this policy from time to time. When we do, we will change the date below and, where the change is significant, take reasonable steps to bring it to your attention.

Last updated: 22 Jun 2026

Back to top