Mercury Liquors (Pty) Ltd

1. Introduction

Mercury Liquors (Pty) Ltd, trading as CG and Sons Westridge and Dagbreek Liquors (“we”, “us”, “our”, “the Company”), is committed to protecting your personal information and respecting your privacy in accordance with the Protection of Personal Information Act, 4 of 2013 (“POPIA”).

This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you:

• Visit and make purchases at our physical liquor store
• Use our online e-commerce platform
• Interact with us through any other channels

By providing your personal information to us, you consent to the collection, processing, and use of your information as described in this policy.

2. Information Officer

In accordance with POPIA, we have appointed an Information Officer responsible for ensuring compliance with the Act:

The Information Officer is available to assist with:

• Requests to access, correct, or delete personal information
• Questions about this Privacy Policy
• Complaints about data processing practices
• Exercising your rights under POPIA

3. Personal Information We Collect

3.1 Identity and Contact Information

• Full name and surname
• South African identity number or passport number (for age verification)
• Date of birth
• Residential and delivery addresses
• Email address
• Mobile and/or landline telephone number
• Gender (optional)

3.2 Transaction and Financial Information

• Order history and purchase details
• Product preferences
• Payment information (credit/debit card details are processed securely through third-party payment service providers and are not stored by us)
• Delivery or collection preferences
• Proof of payment

3.3 Technical and Online Information

• IP address
• Browser type and version
• Device information (computer, tablet, smartphone)
• Operating system
• Website usage data and navigation patterns
• Cookies and similar tracking technologies
• Time and date of website visits

3.4 Age Verification Information

• Copy of identity document, driver’s licence, or passport
• Photograph (if required for age verification at delivery)
• Age verification declarations

3.5 Communication Records

• Correspondence via email, telephone, WhatsApp, or in-person
• Customer service queries and complaints
• Feedback and reviews

3.6 CCTV and Security Information

• CCTV footage from our physical store premises (for security and safety purposes)

4. How We Collect Personal Information

We collect personal information through the following methods:

• Online: website order forms, account registration, newsletter subscriptions, online payment portals
• In-Store: purchase transactions, loyalty programs, age verification processes
• Delivery: delivery confirmation, age verification at point of delivery
• Communication Channels: email, telephone, WhatsApp, SMS, social media, live chat
• Automated Technologies: cookies, web beacons, analytics tools
• Security Systems: CCTV cameras at our physical premises
• Third Parties: payment processors, delivery service providers (where you have interacted with them on our behalf)

5. Lawful Basis and Purpose for Processing

We process your personal information on the following lawful grounds:

5.1 Legal Obligation

• Age Verification: mandatory verification that customers are 18 years or older as required by the Western Cape Liquor Act, 4 of 2008 (as amended)
• Liquor Licensing Compliance: maintaining records as required by the Western Cape Liquor Authority
• Tax and Accounting: record-keeping as mandated by the Income Tax Act and VAT Act
• Consumer Protection: compliance with the Consumer Protection Act, 68 of 2008

5.2 Contractual Performance

• Processing and fulfilling orders
• Arranging delivery or collection of purchases
• Processing payments and refunds
• Providing customer service and support
• Communicating about order status and delivery

5.3 Legitimate Interests

• Fraud prevention and detection
• Security of our premises and online platform
• Improving our products, services, and customer experience
• Website analytics and optimization
• Maintaining business records
• Exercising or defending legal claims

5.4 Consent

• Sending marketing communications and promotional offers (opt-in)
• Using non-essential cookies on our website
• Processing personal information for purposes not covered by the above grounds

You have the right to withdraw consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.

6. Mandatory Age Verification

6.1 Legal Requirement

6.2 Age Verification Process

• All customers must be 18 years or older to purchase liquor from Mercury Liquors.
• We are legally obligated to verify your age before processing any order or sale.
• Age verification may be required at the point of purchase, delivery, or collection.
• We reserve the right to request proof of age at any time.
• Acceptable proof of age includes: South African ID, passport, or driver’s licence.

6.3 Consequences of Non-Verification

• Orders will be cancelled if age cannot be verified.
• Delivery will be refused if the recipient cannot prove they are 18 or older.
• Refunds for cancelled orders due to age verification failure may be subject to administrative fees.
• Attempting to purchase liquor while underage is a criminal offence.

6.4 Your Confirmation

By placing an order or making a purchase, you confirm that:

• You are 18 years of age or older.
• You consent to age verification procedures.
• The information provided for age verification is accurate and truthful.
• You understand that providing false information is a criminal offence.

7. Sharing and Disclosure of Personal Information

We may share your personal information with third parties in the following circumstances:

7.1 Service Providers

We engage third-party service providers who process personal information on our behalf:

• Delivery and courier services
• Payment processors
• IT and hosting providers
• Marketing service providers (with your consent)
• Security service providers

All service providers are contractually bound to:

• Process personal information only for specified purposes
• Implement appropriate security measures
• Comply with POPIA requirements
• Maintain confidentiality

7.2 Legal and Regulatory Authorities

We may disclose personal information to:

• Western Cape Liquor Authority
• South African Revenue Service (SARS)
• South African Police Service
• Courts and tribunals
• Other government or regulatory bodies as required or permitted by law

7.3 Legal Proceedings

• To comply with legal obligations, court orders, or subpoenas
• To protect our legal rights and interests
• To prevent or investigate fraud, security breaches, or criminal activity
• To enforce our terms and conditions

7.4 Business Transfers

In the event of a merger, acquisition, sale of assets, or business restructuring, your personal information may be transferred to the acquiring entity, subject to the same privacy protections.

7.5 With Your Consent

We may share your personal information with other parties where you have provided explicit consent.

8. Cross-Border Transfers

Some of our service providers (particularly payment processors, hosting providers, and IT service providers) may be located outside the Republic of South Africa.

When we transfer personal information internationally, we ensure that:

• The recipient country provides an adequate level of data protection, or
• Appropriate safeguards are in place, including contractual clauses based on POPIA, or
• The transfer is necessary for the performance of a contract with you, or
• You have consented to the transfer after being informed of the risks.

9. Security Measures

We implement reasonable technical and organizational measures to protect your personal information against:

• Unauthorized or unlawful access, processing, or disclosure
• Accidental loss, destruction, or damage
• Alteration or misuse

9.1 Security Safeguards Include:

Technical Measures:

• Encryption of sensitive data (including payment information)
• Secure Socket Layer (SSL) technology for online transactions
• Firewalls and intrusion detection systems
• Regular security updates and patches
• Secure backup systems
• Access controls and authentication protocols

Organizational Measures:

• Confidentiality agreements with staff and service providers
• Staff training on data protection and privacy
• Regular security risk assessments
• Documented data protection policies and procedures
• Limitation of access to personal information on a need-to-know basis
• CCTV monitoring with restricted access to footage

Physical Measures:

• Secure storage of physical records
• Access controls to premises and filing systems
• Secure disposal of documents containing personal information

While we take reasonable steps to protect your information, no system is completely secure. You are responsible for maintaining the confidentiality of your account passwords and personal information.

10. Retention of Personal Information

We retain your personal information only for as long as necessary to fulfil the purposes for which it was collected and to comply with legal and regulatory requirements.

10.1 Retention Periods

10.2 Deletion

After the retention period expires, we will:

• Permanently delete or destroy personal information, or
• Anonymize the information so it can no longer identify you.

Personal information may be retained beyond the stated periods if required for legal proceedings or regulatory investigations.

11. Your Rights Under POPIA

You have the following rights regarding your personal information:

11.1 Right of Access (Section 23)

You may request confirmation of whether we hold your personal information and access to that information.

11.2 Right to Correction (Section 24)

You may request correction, destruction, or deletion of personal information that is inaccurate, irrelevant, excessive, out of date, misleading, or obtained unlawfully.

11.3 Right to Objection (Section 11(3))

You may object to the processing of your personal information on reasonable grounds relating to your particular situation, except where processing is required by law or necessary for public duty, or protects a legitimate interest.

11.4 Right to Deletion (Section 24)

You may request deletion of your personal information, subject to legal retention requirements, ongoing contractual obligations, and legitimate business interests.

11.5 Right to Restriction of Processing

You may request restriction of processing where you contest accuracy, where processing is unlawful but you oppose deletion, or where we no longer need the information but you require it for legal claims.

11.6 Right to Data Portability

You may request your personal information in a structured, commonly used, machine-readable format for transmission to another entity (where technically feasible).

11.7 Right to Withdraw Consent

Where processing is based on consent, you may withdraw consent at any time. Withdrawal does not affect the lawfulness of processing before withdrawal.

11.8 Right to Lodge a Complaint

You have the right to lodge a complaint with the Information Regulator if you believe your personal information has been processed unlawfully.

11.9 How to Exercise Your Rights

To exercise any of these rights, contact our Information Officer using the details in Section 2. We will respond within a reasonable time, not exceeding 30 days. We may require proof of identity. There is no fee unless the request is manifestly unfounded, excessive, or repetitive.

12. Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance your browsing experience.

12.1 What Are Cookies?

Cookies are small text files stored on your device when you visit our website. They help us recognize your device and remember your preferences.

12.2 Types of Cookies We Use

• Essential Cookies: required for website functionality and cannot be disabled.
• Performance Cookies: collect information about how you use our website.
• Functional Cookies: remember your preferences and enable personalized features.
• Marketing Cookies: used to deliver relevant advertisements (require consent).

12.3 Managing Cookies

You can manage cookie preferences by:

• Adjusting your browser settings (to block or delete cookies)
• Using our cookie consent banner on first visit
• Updating privacy settings in your account (if registered)

Disabling certain cookies may affect website functionality.

12.4 Third-Party Cookies

Our website may include cookies from third-party services (e.g., analytics, social media plugins). These are governed by the respective third parties’ privacy policies.

13. Marketing Communications

13.1 Consent

With your explicit consent, we may send you marketing communications including promotional offers, new product announcements, special event notifications, seasonal campaigns, and newsletters.

13.2 How We Contact You

We may contact you via:

• Email
• SMS
• WhatsApp (with your consent)
• Social media
• Postal mail

13.3 Opting Out

You can opt out of marketing communications at any time by:

• Clicking “unsubscribe” in promotional emails
• Replying “STOP” to SMS messages
• Contacting our Information Officer
• Updating your account preferences
• Informing staff in-store

Opting out does not affect transactional communications, legal or regulatory communications, or customer service responses.

14. Third-Party Websites and Services

Our website and communications may contain links to third-party websites, services, or social media platforms. We are not responsible for their privacy practices, and this Policy does not apply to them. We recommend reviewing their privacy policies.

15. Responsible Liquor Sales and Social Responsibility

15.1 Age Restrictions

• We strictly enforce age verification requirements.
• No sale or supply to persons under 18 years of age.
• No use of minors to deliver or handle liquor.

15.2 Responsible Service

• We reserve the right to refuse service to intoxicated persons.
• We will not deliver to visibly intoxicated individuals.
• We may refuse service if we reasonably believe harm may result.

15.3 Regulatory Compliance

• Compliance with the Western Cape Liquor Act, 4 of 2008 (as amended).
• Adherence to Western Cape Liquor Authority regulations.
• Compliance with trading hours and licensing conditions.

15.4 Drink Responsibly

We support responsible drinking and encourage customers to:

• Consume alcohol responsibly and in moderation.
• Never drink and drive.
• Seek help for alcohol-related problems.

Resources:

• South African Depression and Anxiety Group (SADAG): 0800 567 567
• Alcoholics Anonymous South Africa: www.aasa.co.za

16. Children’s Privacy

Our services are not directed at persons under 18 years of age. We do not knowingly collect personal information from minors. If we become aware that we have collected such information without proper verification, we will delete it promptly. Parents or guardians who believe we have collected information from a minor should contact our Information Officer immediately.

17. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our business practices, legal or regulatory changes, technological advancements, or customer feedback.

17.1 Notification of Changes

When we make material changes, we will:

• Update the “Date of Last Revision” at the top of this policy
• Post the updated policy on our website
• Notify you via email or a prominent notice on our website (for significant changes)
• Request fresh consent where required by law

17.2 Acceptance

Continued use of our services after changes are posted constitutes acceptance of the updated Privacy Policy. If you do not agree, please discontinue use and contact us to delete your account.

18. Contact the Information Regulator

If you are dissatisfied with how we handle your personal information, you may lodge a complaint with the Information Regulator:

• Physical Address: Woodmead North Office Park, 54 Maxwell Drive, Woodmead, Johannesburg, 2191
• Postal Address: P.O. Box 31533, Braamfontein, Johannesburg, 2017
• Email: enquiries@inforegulator.org.za
• Website: https://inforegulator.org.za/
• Telephone: 0800 017 160 (Toll free) / 010 023 5200 (landline)
• Complaints Portal: POPIAComplaints@inforegulator.org.za

19. Consent and Acknowledgment

By using our website, making a purchase (online or in-store), creating an account, or providing your personal information to Mercury Liquors, you:

• Acknowledge that you have read and understood this Privacy Policy in its entirety.
• Consent to the collection, use, processing, and disclosure of your personal information as described in this policy.
• Confirm that you are 18 years of age or older.
• Agree to comply with the Western Cape Liquor Act, 4 of 2008 (as amended) and all applicable liquor regulations.
• Understand that providing false or misleading information may result in cancellation of your order and potential legal consequences.
• Accept that age verification is mandatory and non-negotiable.

20. Contact Us

For any questions, concerns, or requests regarding this Privacy Policy or our data protection practices, please contact:

• Company: Mercury Liquors (Pty) Ltd
• Trading As: CG and Sons Westridge / Dagbreek Liquors
• Physical Address: 1 Avocado Street, Westridge, Mitchells Plain, Western Cape
• Information Officer: Carmen Sylvia Adams
• Email: Carmensparkle14@gmail.com
• Telephone: 062 453 3814
• Liquor Licence Number: WCP/038369
• Operating Hours: 09h00 – 20h00

This Privacy Policy is compliant with the Protection of Personal Information Act, 4 of 2013 (POPIA) and the Western Cape Liquor Act, 4 of 2008 (as amended).
Last Updated: 17 November 2025