Privacy policy
Last updated: 25 October 2026
This policy explains how PassPilot, a trading name of Golden Goose IoT (Pty) Ltd (registration number 2025/677633/07, 12 Strandsalie Street, Village on Sea, Mossel Bay, 6506), handles your personal information under the Protection of Personal Information Act 4 of 2013 (POPIA). Golden Goose IoT (Pty) Ltd is the responsible party.
What we collect
- Account and order details: your email address, name (if you give it), what you bought, when, and how much you paid.
- Payment details: handled by Paystack. We receive confirmation that you paid and the payment method type, never your full card or bank details.
- Support messages: what you send us when you email support.
- Practice progress: your scores, stars and streaks are stored in your own browser on your device, not on our servers.
- Website use: Shopify, which runs our store, uses cookies to keep you signed in and to measure visits. If you accept marketing cookies, Meta (Facebook and Instagram) and TikTok measure which of their ads led to a visit or purchase.
Why we use it
- To give you access to what you bought and keep a record of the sale (needed to fulfil our contract with you, and for tax law).
- To answer your questions, process refunds and fix problems.
- To send you emails about PassPilot, only if you agreed. Every email has an unsubscribe link.
- To understand which of our ads work, only if you accepted marketing cookies.
We don't sell your personal information.
Who we share it with
We use these service providers (operators under POPIA). They may store information outside South Africa, and we use them only because they are bound by data-protection rules that give comparable protection, as POPIA section 72 requires:
| Provider | What for |
|---|---|
| Shopify | Runs our website, accounts and orders |
| Paystack | Processes payments |
| Zoho | Our support inbox |
| Meta, TikTok | Ad measurement, only with your cookie consent |
We also disclose information where the law requires it.
How long we keep it
- Orders and invoices: 5 years, as tax law requires.
- Support messages: 2 years after the last message.
- Marketing consent: until you unsubscribe.
- Your account: until you ask us to delete it, subject to the tax record above.
Children
You must be 18 or older to create an account yourself. If you are younger, a parent or guardian must consent and should make the purchase.
Your rights
You can ask what information we hold about you, ask us to correct or delete it, object to its use for marketing, and withdraw consent at any time. Email help@passpilot.shop with the subject "Privacy request". We reply within 30 days.
Our Information Officer can be reached at the same address. If you're unhappy with how we handled your information, you can complain to the Information Regulator (www.inforegulator.org.za).
Security
Our store runs on Shopify, with encrypted connections (HTTPS). Sign-in uses one-time codes sent to your email, so there's no password to steal. Only the people who run PassPilot can see customer records.
Changes
If we change this policy, we'll update the date at the top. If a change affects how we use information you've already given us, we'll email you first.