Cookie Policy

Effective date: 7 October 2026

Introduction

IPS Health and Wellness (“IPS”, “we”, “us” or “our”) uses cookies and similar technologies on https://ipshealth.co.za/ (the “Website”).

This Cookie Policy explains:

• what cookies and similar technologies are;
• how and why IPS uses them;
• the categories of information they may collect;
• when third parties may place or access cookies;
• how you can manage your preferences; and
• how to contact IPS about the use of cookies.

This Cookie Policy must be read together with IPS’s Privacy Policy, Website Terms and Conditions, and any privacy notice displayed when you submit information through the Website.

IPS processes personal information in accordance with the Protection of Personal Information Act 4 of 2013 (“POPIA”). POPIA requires responsible parties to process personal information lawfully, reasonably and transparently, and to comply with conditions concerning processing limitation, purpose specification, further processing, information quality, openness, security safeguards and data-subject participation.

What are cookies?

Cookies are small text files or similar identifiers placed on your device when you visit a website. They enable a website to recognise your device, remember certain settings, support website functionality, measure usage and, depending on the technology used, provide information for advertising or other purposes.

“Cookies” in this Policy includes:

• browser cookies;
• local-storage technologies;
• pixels, tags, web beacons and similar tracking technologies;
• software development kits; and
• identifiers used by embedded content, analytics tools, advertising services or social-media features.

Cookies may be:

• session cookies, which expire when you close your browser; or
• persistent cookies, which remain on your device for a specified period or until deleted.

A cookie may be:

• a first-party cookie, placed by IPS or a service provider acting for IPS; or
• a third-party cookie, placed by a third party whose service is used on the Website.

A cookie does not necessarily identify you by name. However, information collected through cookies may constitute personal information where it identifies, relates to or can reasonably be linked to an identifiable person or device.

How IPS uses cookies

Subject to applicable law, IPS may use cookies and similar technologies to:

• operate, secure and maintain the Website;
• remember preferences and settings;
• understand how visitors use the Website;
• identify technical errors and improve performance;
• measure the effectiveness of Website content and campaigns;
• support enquiry, callback or customer-engagement functionality;
• personalise Website content where this functionality is enabled;
• prevent fraud, abuse and unauthorised activity; and
• support marketing measurement, attribution, audience measurement or other marketing-related functionality where such technologies are used.

IPS does not use cookies to obtain health information merely because you visit a general Website page. You should not enter health information or other sensitive personal information into a cookie, URL, search field or other Website feature unless IPS expressly requests it through an appropriate secure channel.

Where information collected through cookies is combined with information submitted by you - for example, an enquiry, callback request or customer interaction - the combined information may be processed in accordance with the IPS Privacy Policy.

Categories of cookies

The Website may use the following categories of cookies. The actual cookies in use may change as the Website and its services develop.

Strictly necessary cookies

These cookies are required for the Website to operate or for a service specifically requested by you. They may support:

• page navigation;
• security and fraud prevention;
• session management;
• load balancing;
• accessibility and basic functionality;
• consent-preference management; and
• submission or delivery of Website forms.

Because these cookies are necessary for the Website or a requested service, disabling them may prevent some or all of the Website from functioning properly.

Functional or preference cookies

These cookies remember choices you make, such as language, region or display preferences. If disabled, the Website may still operate, but certain conveniences may not be available.

Analytics or performance cookies

These cookies help IPS understand how visitors interact with the Website, including which pages are visited, how visitors navigate the Website and whether technical problems occur.

IPS will process information collected through analytics or performance technologies only where there is an appropriate lawful basis for the processing. Where applicable law requires consent before a particular analytics technology may be used, IPS will implement an appropriate consent mechanism before relying on that technology.

Advertising and marketing technologies

The Website uses certain Shopify technologies categorised as marketing technologies to support marketing measurement, attribution or related buyer-surface functionality.

Where advertising, targeting or marketing technologies are used, IPS will ensure that there is an appropriate lawful basis for the processing. Where applicable law requires prior consent for a particular non-essential technology, IPS will implement an appropriate consent mechanism before relying on that technology.

The current technologies identified by IPS are described in Annexure A: Cookie and Similar Technology Register.

Unclassified cookies

From time to time, a cookie may not yet have been classified. IPS will review and classify cookies as part of its cookie-governance process.

Cookie controls and management

The Website does not currently provide a separate cookie pop-up, consent banner or cookie preference centre.

You may manage, block, restrict or delete cookies through the settings provided by your browser or device. The controls available, and the method for changing them, differ between browsers and devices.

Blocking or deleting certain cookies or similar technologies may affect the operation of the Website or prevent particular features, including shopping-cart, checkout, form, localisation or other functionality, from operating correctly.

Certain browser-storage technologies, including local storage or session storage, may need to be cleared separately through your browser or device settings.

Where IPS introduces a cookie preference or consent-management mechanism in future, visitors may also be able to manage applicable non-essential technologies through that mechanism.

Browser controls

Most browsers allow you to block, restrict or delete cookies and may allow you to receive a notification when a cookie is placed. You should consult the settings or help section of your browser or device for information about the controls available to you.

Browser-based deletion or blocking does not necessarily delete information already received or retained by IPS or a third-party service provider.

Third-party technologies

IPS may use third-party services for functions such as website hosting, security, analytics, communications, embedded content, advertising or campaign measurement. Those providers may place or access cookies or similar technologies.

Third parties may process information in accordance with their own privacy notices. IPS will take appropriate steps to govern third-party processing and will not treat the fact that a provider supplies a service as authorisation to use personal information for unrelated purposes.

IPS identifies the principal third-party providers and technologies currently used on the Website in Annexure A: Cookie and Similar Technology Register.

Shopify technologies

The Website is operated using Shopify. Shopify uses cookies, local storage, session storage and similar technologies to provide and support Website functionality.

Depending on how you interact with the Website, Shopify technologies may be used for Website and browser-session management, shopping-cart functionality, checkout, security and fraud prevention, localisation, consent-preference management, Website analytics and performance measurement, customer authentication, Shop or Shop Pay functionality and other technical functions required to operate the Website.

Some Shopify technologies are strictly necessary for the operation, security or functionality of the Website. Other technologies are used for preferences, analytics or marketing and will be managed in accordance with applicable law and any consent requirements applicable to the relevant processing.

Information collected through Shopify technologies may be received or processed by IPS, Shopify and relevant Shopify service providers or subprocessors.

Shopify operates internationally and may process or store information using entities, infrastructure or subprocessors located outside South Africa. Where personal information is transferred outside South Africa, IPS will address such processing in accordance with section 72 of POPIA.

Shopify Forms

IPS uses Shopify Forms for Website form functionality. Shopify Forms may use cookies, browser storage, local storage or similar technologies to enable forms to operate, maintain sessions, prevent abuse and process information submitted by visitors.

Information submitted through a form may be received by IPS and processed through Shopify and its relevant service providers or subprocessors. Personal information submitted through a form will be processed in accordance with the IPS Privacy Policy and any privacy notice accompanying the relevant form.

Google Analytics

IPS uses Google Analytics through the Website's Google & YouTube integration to obtain information about how visitors use and interact with the Website.

Google Analytics may use cookies or similar identifiers, including technologies used to distinguish visitors and maintain analytics-session information.

Information processed for analytics may include information about Website visits and interactions, device or browser information, identifiers, referral information and related technical information.

Google Analytics technologies are treated as non-essential analytics technologies. Where applicable law requires consent before their use, IPS will implement an appropriate consent mechanism.

Form security and bot prevention

IPS may use hCaptcha and associated security infrastructure in connection with Website forms to distinguish legitimate interactions from automated or potentially abusive activity.

These technologies may process technical information necessary for security and bot-detection purposes and may place short-duration security cookies.

The Website currently uses a security cookie associated with the hCaptcha environment with an observed duration of approximately 30 minutes.

The current cookie and technology register is annexed hereto.

Personal information and lawful processing

Information collected through cookies may include, depending on the technology used:

• IP address;
• device, browser and operating-system information;
• approximate location;
• pages viewed and interactions;
• referral source;
• cookie identifiers;
• Website preferences;
• date, time and duration of visits;
• technical and security information;
• shopping-cart and checkout interaction information;
• form-session and form-interaction information;
• consent and privacy-preference information; and
• analytics events concerning interactions such as page views and products added to a cart.

IPS will process such information only for specified, explicit and lawful purposes and will seek to limit collection to information that is adequate, relevant and not excessive for those purposes. These obligations arise under POPIA’s conditions for lawful processing.

IPS will rely on an appropriate lawful basis recognised by POPIA for the processing of personal information obtained through cookies and similar technologies. Where applicable law requires consent before a particular technology may be used, IPS will implement an appropriate consent mechanism. For strictly necessary security, operational or Website functionality, IPS may rely on another lawful justification recognised by POPIA, where applicable.

Any consent obtained in relation to analytics or advertising cookies is separate from consent to direct marketing. Such consent does not, by itself, constitute consent to receive telephone calls, electronic communications or other direct marketing.

IPS may process information obtained through the Website in connection with direct marketing only in accordance with applicable law, including section 69 of POPIA in relation to unsolicited electronic communications. You may object to direct marketing as described in the IPS Privacy Policy and in the relevant marketing communication.

Information received from third parties

IPS may receive information from service providers, advertising or analytics platforms, referral sources, campaign partners or other organisations. The source and nature of the information may differ depending on how you interact with IPS.

Where POPIA requires notification to a data subject when personal information is collected, IPS will provide the relevant information in an appropriate privacy notice.

Health information

IPS markets vitamins, nutritional supplements and health and wellness products. Information concerning a person’s health may constitute special personal information under POPIA.

IPS does not intend to use cookies to collect health information. However, interactions with product pages, forms or campaigns could, in some circumstances, indicate an interest in a particular health or wellness topic. IPS will not use such information for purposes unrelated to the Website interaction without an appropriate lawful basis and any additional protection required by law.

Do not submit medical histories, diagnoses, medication details or other health information through an unsecured Website field or other unsecured Website functionality. For product-suitability questions, consult an appropriately qualified healthcare professional.

Security

IPS will implement appropriate technical and organisational measures to protect personal information against loss, damage, unauthorised destruction, unlawful access or processing, as required by POPIA.

No internet transmission or storage system can be guaranteed to be completely secure. If IPS becomes aware of a security compromise involving personal information, it will address the incident and provide notifications required by POPIA.

Retention

IPS will retain cookie-related information only for as long as reasonably necessary for the purpose for which it was collected, unless a longer period is required or permitted by law, or is necessary for legitimate business, regulatory, dispute-resolution or evidentiary purposes.

Different cookies and browser-storage technologies remain on a device for different periods. Some operate only for the duration of a browser tab or session, while others remain for a defined period or until deleted, overwritten or cleared.

The durations listed below and in Annexure A refer to storage on your device. They do not determine how long IPS or a service provider may retain information already received.

In the Website review used to prepare this Policy, observed browser-storage lifetimes included:

• approximately 30 minutes for certain Shopify analytics/session and security technologies;
• approximately five hours for certain Shopify authentication or handoff technologies;
• approximately 91 days for the currently observed Shopify cart cookie;
• approximately 400 days for certain Google Analytics cookies;
• approximately one year for certain Shopify analytics, marketing, localisation and essential technologies; and
• browser local-storage technologies that do not have an automatic native expiry and may therefore remain until deleted, overwritten or cleared.

Actual retention periods may change where IPS or a technology provider changes the configuration or operation of the Website. The current Annexure A: Cookie and Similar Technology Register should be consulted for further information regarding individual technologies.

International processing

Certain third-party service providers identified in Annexure A operate internationally and may use entities, infrastructure, service providers or subprocessors located outside South Africa. Personal information collected through the Website may therefore be transferred to or processed in jurisdictions outside South Africa. Where personal information is transferred outside South Africa, IPS will comply with section 72 of POPIA, including by ensuring an appropriate level of protection or relying on another permitted basis for the transfer.

Information concerning relevant international processing may be provided in IPS's Privacy Policy, this Cookie Policy, Annexure A or other appropriate privacy notices where the information is available and relevant.

Your rights

Subject to applicable legal conditions and limitations, you may have the right to:

• ask whether IPS holds personal information about you;
• request access to that information;
• request correction or deletion of inaccurate or unlawfully retained information;
• object to certain processing;
• object to direct marketing;
• withdraw consent where processing is based on consent; and
• lodge a complaint with the Information Regulator.

These rights are addressed further in the IPS Privacy Policy. A request may be made using the contact details below.

Contact IPS

For questions about this Cookie Policy or IPS’s use of cookies, contact:

Information Officer: N Badenhorst

Email: informationofficer@ipshealth.co.za

Telephone: 0101406700

Postal address: PO Box 1152 Saxonwold, Johannesburg 2196

For complaints that IPS has not resolved, you may contact the Information Regulator:

Information Regulator (South Africa)

Website: www.inforegulator.org.za

Email: POPIAComplaints@inforegulator.org.za

Online Complaints: Available through the Information Regulator eServices portal

Changes to this Policy

IPS may amend this Cookie Policy when its Website, technologies, service providers or legal obligations change.

The latest version will be published on the Website with its effective date. Where a change materially affects the way IPS uses cookies or similar technologies, IPS will provide an appropriate notice and, where consent is required by applicable law, implement an appropriate mechanism to obtain that consent.

ANNEXURE A: Cookie and Similar Technology Register

This Annexure forms part of the IPS Health and Wellness Cookie Policy.

The table below identifies the principal cookies and similar technologies observed during the Website review used to prepare this Policy. Technologies may include browser cookies, local storage and session storage.

Retention periods are based on the Website configuration observed at the time of review. Certain technologies may be changed, replaced or updated by IPS or its service providers from time to time. Where a technology has no native expiry, it may remain in the visitor's browser until it is deleted, overwritten or cleared.

The register records observations from the review used to prepare this Policy, rather than guaranteed lifetimes for every visitor. Actual presence and duration may vary with browser limits, previous visits, use of particular features and provider updates. “No native expiry” means that a browser-storage item has no built-in expiry; it does not mean that personal information is retained indefinitely.

On small screens, scroll the table sideways to view all five columns.