Free standard shipping for orders over R 500.00. Not at home all the time? Use Bob Box or Pargo to collect your order.

BULGR

Privacy Policy

Last updated 2026

Privacy Policy

Last updated: 2026

Taste of Sensation t/a Bulgr ("we", "us", "our") respects your privacy and is committed to protecting your personal information. This Privacy Policy is issued in terms of the Protection of Personal Information Act, 4 of 2013 ("POPIA") and the Promotion of Access to Information Act, 2 of 2000 ("PAIA"), and explains how we collect, use, store, share, and protect your personal information when you visit our website or make a purchase from us.

This policy applies to all visitors to our website and all customers who purchase from us, referred to in this policy as "you" or "your".

Acceptance of This Policy

By using our website, creating an account, or placing an order with us, you confirm that you have read, understood, and accepted the terms of this Privacy Policy. If you do not agree with any part of this policy, please do not use our website or provide us with your personal information.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. Where changes are material, we will notify you by email or via a notice on our website. Continued use of our website or services after such changes constitutes your acceptance of the updated policy. The "Last updated" date at the top of this page reflects the most recent revision.

1. Who We Are

Responsible Party: Taste of Sensation t/a Bulgr

Registration Number: K2022608704

Email: support@bulgr.co.za

2. Personal Information We Collect

You are able to browse our website without disclosing who you are. We only collect personal information once you create an account, place an order, subscribe to a newsletter, or otherwise voluntarily provide information to us.

Depending on how you interact with us, we may collect:

  • Identity information – name and surname.
  • Contact information – email address, phone number, delivery and billing address.
  • Order information – products purchased, order history, order value.
  • Payment information – payment method and transaction details (processed securely by our payment provider; we do not store full card details).
  • Technical information – IP address, browser type, device information, and website usage data (via cookies and analytics tools).
  • Communication information – records of correspondence when you contact our customer support, including emails and phone calls.

We only collect personal information that is necessary for the purposes described in this policy, in line with POPIA's principle of minimality. This information is retained only for as long as necessary to achieve the purpose for which it was collected, unless a longer retention period is required by law (see Section 9).

3. How We Collect Your Information

We collect personal information:

  • Directly from you when you create an account, place an order, subscribe to a newsletter, or contact us.
  • Automatically through cookies and similar tracking technologies when you browse our website.
  • From our service providers (e.g. delivery confirmation from our courier partner, Bob Go).

4. Purpose of Processing

We process your personal information for the following purposes:

  • To process and fulfil your orders, including arranging delivery through our courier partner, Bob Go.
  • To communicate with you about your order, including confirmations, shipping notifications, and pickup point collection alerts.
  • To process payments securely.
  • To provide customer support and respond to queries or complaints.
  • To personalise your experience on our website and remember your preferences.
  • To send marketing communications, where you have consented to receive them (you may opt out at any time — see Section 15).
  • To analyse website usage and improve our website, products, and services.
  • To detect and prevent fraud, and to comply with our legal and regulatory obligations.

We will not use your personal information for any purpose other than those listed above without obtaining your further consent, unless required or permitted by law. We are the sole owners of the personal information collected through our website and will not share, sell, or rent it to others except as disclosed in this policy.

5. Legal Basis for Processing

We process your personal information on one or more of the following bases, as required by POPIA:

  • Your consent;
  • Processing is necessary to perform our contract with you (e.g. fulfilling your order);
  • Processing is necessary to comply with a legal obligation;
  • Processing is necessary to protect a legitimate interest of ours or a third party (e.g. fraud prevention).

6. Sharing Your Information with Third Parties

We do not sell your personal information. We may share your personal information with trusted third parties strictly for the purposes described in this policy, including:

  • Bob Go (courier and logistics partner) – to arrange and manage delivery of your order, including door-to-door delivery and pickup point collections.
  • Bob Pay payment service provider – to securely process your payment.
  • Google Analytics (or similar analytics provider) – to help us understand how customers use our Site. You can read more about how Google uses this information at https://policies.google.com/privacy, and opt out of Google Analytics at https://tools.google.com/dlpage/gaoptout.
  • Marketing and advertising providers (e.g. Meta/Facebook, Google Ads) – where you have consented to marketing or advertising cookies.
  • Regulators or law enforcement – where required by law.

All third parties who process personal information on our behalf are required to do so in accordance with POPIA and under appropriate data processing agreements, using your information only for the purposes we specify and keeping it secure.

7. Third-Party Websites and Content

Our website may contain links to third-party websites, or content belonging to third parties. These third-party websites are not operated or controlled by us and have their own separate privacy policies. We are not responsible for the content, accuracy, or privacy practices of any third-party website, and including a link does not imply our endorsement of it. If you leave our website via such a link, you do so at your own risk, and we encourage you to review the privacy policy of any site you visit.

8. Cross-Border Transfers

Some of our service providers (e.g. cloud hosting, analytics, or payment platforms) may process personal information outside of South Africa. Where this occurs, we take reasonable steps to ensure that the recipient is subject to a law, binding corporate rules, or an agreement that provides an adequate level of protection consistent with POPIA.

9. Data Retention

We retain personal information only for as long as necessary to fulfil the purposes outlined in this policy, including:

  • Fulfilling legal, accounting, or reporting requirements;
  • Resolving disputes or enforcing our agreements;
  • As required under applicable tax and consumer protection legislation.

Where you close your account or ask us to delete your information, we will do so, save that certain order and transaction records may be retained for a period of up to five (5) years thereafter for lawful, tax, and statistical purposes, as permitted under POPIA. This retained information will not be used, shared, or sold, and will be securely destroyed once the retention period expires.

10. Security of Your Information

We implement appropriate technical and organisational measures to protect your personal information against loss, unauthorised access, alteration, or disclosure, including:

  • Secure, encrypted payment processing;
  • Restricted access to personal information on a need-to-know basis;
  • Regular review of our security practices.

While we take reasonable steps to protect your information, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

11. Data Breach Notification

If we become aware of a data breach involving your personal information (i.e. any incident where personal information is lost, disclosed, altered, or destroyed without authorisation), we will:

  1. Confirm the breach as soon as reasonably possible;
  2. Contain the breach — including securing affected systems, resetting compromised credentials, and stopping further unauthorised access;
  3. Assess the risk and impact on affected individuals;
  4. Report the breach to the Information Regulator and to affected individuals as soon as reasonably possible, and in any event within the timeframes required by POPIA; and
  5. Review our security measures afterward and implement improvements where needed.

Where we notify you of a breach, we will provide a description of the personal information affected, the likely consequences, the steps we have taken or propose to take to address it, and any recommendations for steps you can take to protect yourself.

12. Cookies and Tracking Technologies

Our website uses cookies and similar technologies to:

  • Enable core website functionality (e.g. shopping cart, checkout);
  • Remember your preferences;
  • Analyse website traffic and usage;
  • Deliver relevant marketing (where consented to).

You can manage or disable cookies through your browser settings; however, this may affect certain features of our website.

13. Behavioural Advertising

Where you have consented, we may use your personal information to provide you with targeted advertisements or marketing communications we believe may be of interest to you, through platforms such as Meta/Facebook and Google. You can learn more about how targeted advertising works via the Network Advertising Initiative's educational page at http://www.networkadvertising.org/understanding-online-advertising/how-does-it-work.

You can opt out of targeted advertising via:

14. Do Not Track

Please note that we do not alter our Site's data collection and use practices when we detect a "Do Not Track" signal from your browser.

15. Direct Marketing and Anti-Spam

We will only send you direct marketing communications (e.g. promotions, newsletters) if you have opted in to receive them, in accordance with POPIA and the Electronic Communications and Transactions Act. By registering with us or subscribing to our communications, you consent to receiving marketing communications relating to our products and services.

We do not sell, share, or trade your contact details with third parties for their own marketing purposes. You may unsubscribe at any time by clicking the "unsubscribe" link in any marketing email or by contacting us directly.

If you believe you have received unsolicited or spam communication from us, please contact us at [Insert Email Address] with details of the communication so we can investigate.

16. Your Rights Under POPIA and PAIA

As a data subject, you have the right to:

  • Access the personal information we hold about you, and request confirmation of whether we hold such information;
  • Request correction, update, or deletion of your personal information;
  • Request a record of what personal information we hold and details of any third party who has had access to it;
  • Object to the processing of your personal information, including for direct marketing purposes;
  • Withdraw consent at any time, where processing is based on consent;
  • Lodge a complaint with the Information Regulator if you believe your personal information has been processed unlawfully.

You can access, correct, update, or request deletion of your account information and order history directly through your account on our website, or by emailing or phoning us using the details in Section 1. For access to any information not directly available through your account, please contact our Information Officer, and we will assist in accordance with the requirements of PAIA.

17. Children's Privacy

Our website and services are not directed at children under the age of 18. We do not knowingly collect personal information from children and will not process personal information concerning a child without the consent of a parent or guardian, as required under POPIA.

18. Complaints

If you have a concern about how we have handled your personal information, please contact our Information Officer first so we can attempt to resolve the matter. If you remain unsatisfied, you have the right to lodge a complaint with:

The Information Regulator (South Africa)

19. Contact Us

For any questions about this Privacy Policy, to exercise any of your rights, or to raise a concern about how we handle your personal information, please contact us:

This Privacy Policy should be reviewed periodically to ensure ongoing compliance with POPIA, PAIA, and any other applicable legislation. We recommend having this document reviewed by a legal professional before publishing it on your website.