Privacy Policy. – Reading Rocks

Last updated: 29 August 2026

Reading Rocks respects your privacy and is committed to protecting your personal information.

This Privacy Policy explains how Reading Rocks collects, uses, stores and protects personal information when you visit readingrocks.co.za, create an account, contact us, place an order or purchase a digital product.

Reading Rocks processes personal information in accordance with applicable South African privacy legislation, including the Protection of Personal Information Act 4 of 2013 (POPIA).

Who we are

www.readingrocks.co.za

2. Information we may collect

Depending on how you use the website, we may collect information such as:

your name and surname;
email address;
telephone number where supplied;
billing information provided during checkout;
account username and account details;
products purchased;
order numbers, order dates and transaction details;
download permissions and download activity;
correspondence sent to Reading Rocks;
technical information necessary for the operation and security of the website, such as IP address, browser information and cookies.

We aim to collect only information reasonably necessary to operate the store, process orders, deliver purchased products and provide customer support.

3. Information about children

Reading Rocks provides educational materials for learners of different ages, but purchases through the online store are intended to be made by adults, parents, guardians, teachers or other authorised purchasers.

We do not intentionally require customers to provide unnecessary personal information about children.

Please do not submit sensitive or unnecessary personal information relating to a child when placing an order or contacting Reading Rocks.

4. How we use personal information

We may use personal information to:

process and manage orders;
confirm payments;
provide access to purchased digital products;
send order confirmations and download information;
create and manage customer accounts;
provide customer service;
answer enquiries;
maintain records of purchases;
prevent fraud, misuse and unauthorised access;
troubleshoot technical problems;
maintain and secure the website;
comply with applicable legal, accounting, tax and regulatory obligations;
handle refunds, disputes and complaints where applicable.

We will not use personal information for purposes that are materially incompatible with the purposes for which it was collected unless permitted by law.

5. Payments and Payfast

Reading Rocks uses Payfast as a payment service provider.

When you choose Payfast at checkout, information necessary to process and verify the transaction may be provided to Payfast. This may include information such as your name, contact details, order details, billing information and transaction amount.

Payment details are processed through Payfast in accordance with Payfast’s own terms and privacy practices.

Reading Rocks does not need to store your full bank-card details in order to process a Payfast transaction.

6. WooCommerce and customer orders

The Reading Rocks online store uses WordPress and WooCommerce.

WooCommerce may store information associated with your order, including:

customer details;
billing information;
order contents;
order status;
payment method used;
account information where an account has been created;
downloadable-product permissions and download records.

This information is used to operate the store and provide purchased products.

7. Digital downloads

ReReading Rocks sells digital educational products.

When a downloadable product is purchased, the website may record information necessary to:

grant download access;
verify that the customer is entitled to the file;
track download permissions;
assist with technical or customer-support queries;
prevent abuse or unauthorised access.

Registered customers may also be able to access eligible downloads through the My Account section of the website.

8. Guest checkout and customer accounts

Reading Rocks may allow customers to purchase products without creating an account.

If you create an account, the website may store the information required to:

identify your account;
display previous orders;
provide access to eligible downloads;
allow you to update account information.

You are responsible for keeping your account password confidential.

9. Cookies

Readingrocks.co.za may use cookies and similar technologies necessary for the website and online store to function.

Essential cookies may be used for purposes such as:

maintaining your shopping basket;
remembering checkout information during a session;
managing customer login sessions;
maintaining website security;
enabling WooCommerce functionality.

If Reading Rocks later introduces non-essential analytics, advertising or marketing cookies, this Privacy Policy and any required cookie-consent settings should be updated accordingly.

10. Who we may share information with

ReadiReading Rocks does not sell customer personal information.

Personal information may be shared only where reasonably necessary with service providers involved in operating the website and processing orders, such as:

Payfast, for payment processing;
our website hosting provider;
WordPress/WooCommerce services and extensions where necessary for the operation of the store;
email and technical service providers where required;
professional advisers or authorities where disclosure is required or permitted by law.

Service providers receive only the information reasonably required for the service they perform.

11. Website hosting

Readingrocks.co.za is hosted using a third-party hosting provider.

Website and order information may therefore be stored on servers operated or managed by that provider.

Reasonable technical and organisational measures are used to protect website information against loss, misuse, unauthorised access, disclosure, alteration or destruction.

12. Security

Reading Rocks takes reasonable steps to protect personal information under its control.

Security measures may include:

HTTPS/SSL encryption;
password-protected administration;
controlled access to website administration;
reputable website hosting;
software updates;
payment processing through an established third-party payment provider;
backups and technical security controls.

No internet-based service can guarantee absolute security. Customers should also use strong passwords and protect access to their own email accounts and devices.

13. How long we keep information

Reading Rocks retains personal information only for as long as reasonably necessary for the purpose for which it was collected or as required by applicable legal, accounting, tax, security or dispute-resolution requirements.

Certain order records may need to be retained after an order has been completed.

Where information is no longer required and there is no lawful reason to retain it, it may be deleted, anonymised or otherwise securely disposed of.

14. Your personal-information rights

Subject to applicable law, you may request that Reading Rocks:

confirm whether we hold personal information about you;
provide access to personal information held about you;
correct or update inaccurate information;
delete or erase information where legally appropriate;
object to certain processing;
withdraw consent where processing is based on consent.

Some information may need to be retained where Reading Rocks has a legal obligation or other lawful reason to retain it.

Requests may be sent to:

info@readingrocks.co.za

We may take reasonable steps to verify your identity before providing, changing or deleting personal information.

15. Download access following a privacy or deletion request

Where a valid personal-data erasure request is processed, access to previously purchased downloadable products may also be revoked where this forms part of the erasure process.

Customers should therefore retain their own lawful copy of downloaded products in accordance with the applicable Reading Rocks licence and usage terms.

16. Marketing communications

Reading Rocks will not treat an ordinary purchase as automatic permission to send unrelated electronic marketing where separate consent is required.

Where customers voluntarily subscribe to promotional communication, they may withdraw or unsubscribe from such communication.

Transactional emails relating to orders, payments, downloads, account security and customer-service matters are not marketing messages.

17. Links to other websites

The Reading Rocks website may contain links to third-party websites or services.

Reading Rocks is not responsible for the privacy practices, security or content of independent third-party websites. Customers should review the relevant third party’s privacy information before providing personal information.

18. Cross-border processing

Some technology or service providers may process or store information outside South Africa.

Where personal information is transferred across borders, Reading Rocks will take reasonable steps to ensure that the transfer is handled in accordance with applicable legal requirements and with appropriate protection for personal information.

19. Changes to this Privacy Policy

Reading Rocks may update this Privacy Policy when:

the website changes;
new services or plugins are introduced;
payment or technical providers change;
legal requirements change.

The latest version will be published on readingrocks.co.za with an updated revision date.

20. Contact us

Questions, requests or concerns about personal information may be directed to:

Reading Rocks
Email: info@readingrocks.co.za
Website: readingrocks.co.za
South Africa

If a privacy concern cannot be resolved directly with Reading Rocks, a person may also have the right to approach the relevant South African regulatory authority in accordance with applicable law.

Comments

Questions, requests or concerns about personal information may be directed to:

Reading Rocks
Email: info@readingrocks.co.za
Website: readingrocks.co.za
South Africa

If a privacy concern cannot be resolved directly with Reading Rocks, a person may also have the right to approach the relevant South African regulatory authority in accordance with applicable law.

Media

Suggested text: If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS) included. Visitors to the website can download and extract any location data from images on the website.

Cookies

Suggested text: If you leave a comment on our site you may opt in to saving your name, email address and website in cookies. These are for your convenience so that you do not have to fill in your details again when you leave another comment. These cookies will last for one year.

If you visit our login page, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.

When you log in, we will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select “Remember Me”, your login will persist for two weeks. If you log out of your account, the login cookies will be removed.

If you edit or publish an article, an additional cookie will be saved in your browser. This cookie includes no personal data and simply indicates the post ID of the article you just edited. It expires after 1 day.

Embedded content from other websites

Suggested text: Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.

These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.

Who we share your data with

Suggested text: If you request a password reset, your IP address will be included in the reset email.

How long we retain your data

Suggested text: If you leave a comment, the comment and its metadata are retained indefinitely. This is so we can recognise and approve any follow-up comments automatically instead of holding them in a moderation queue.

For users that register on our website (if any), we also store the personal information they provide in their user profile. All users can see, edit, or delete their personal information at any time (except they cannot change their username). Website administrators can also see and edit that information.

What rights you have over your data

Suggested text: If you have an account on this site, or have left comments, you can request to receive an exported file of the personal data we hold about you, including any data you have provided to us. You can also request that we erase any personal data we hold about you. This does not include any data we are obliged to keep for administrative, legal, or security purposes.

Where your data is sent

Suggested text: Visitor comments may be checked through an automated spam detection service.