Privacy Policy

Last updated 4 October 2026

1. Introduction and Scope

1.1 Welcome to Fizzoy.com, the informational web portal and pre-launch showcase for Fizzoy, a revolutionary synbiotic soda featuring live probiotics and prebiotic fibre, containing under 2 grams of sugar and 30 calories per 355 ml can. This Privacy Policy outlines how Velobiotics (Pty) Ltd and Cantobiz Inc DBA Velobiotics US (Delaware stock corporation, File No. 6130903) (collectively referred to as "Velobiotics", "we", "us", or "our") collect, use, store, disclose, and safeguard your personal information when you visit fizzoy.com, interact with our interactive features, complete our Gut Happiness Score questionnaire, join our waitlist, or communicate with our automated chat assistant, Fizzoy.

1.2 This Privacy Policy applies to personal information collected on fizzoy.com. Commercial transactions, formal pre-orders, and retail purchases occur on our separate, secure Shopify e-commerce storefronts located at velobiotics.com (serving international and United States customers in United States Dollars) and velobiotics.co.za (serving South African customers in South African Rand). While this policy explains how data flows between our informational site and our e-commerce storefronts, transactions conducted on Shopify are additionally subject to the respective Shopify store privacy policies and terms.

1.3 Please read this Privacy Policy carefully. By accessing fizzoy.com, submitting your details through our interactive forms or waitlist, or interacting with our chat assistant, you acknowledge that you have read and understood the practices described herein.

2. Data Controllers and Responsible Parties

2.1 Under applicable data protection legislation, the entities responsible for determining the purposes and means of processing your personal information operate under a dual-entity global structure:

South African Jurisdiction (Responsible Party under POPIA): Velobiotics (Pty) Ltd, a private company incorporated in South Africa (Registration Number: 2015/306434/07), having its registered office and manufacturing headquarters in South Africa. The designated Information Officer for South Africa is Dr. Chomba Chuma.
United States and International Jurisdiction (Data Controller under GDPR / CCPA): Cantobiz Inc DBA Velobiotics US, a Delaware corporation having its principal office at 1820 Avenue M #1065, Brooklyn, NY 11230, United States.

2.2 For any privacy-related inquiries, data subject access requests, or regulatory queries, you may contact our privacy team via email at fizzoy@velobiotics.com, via telephone at South Africa +27 11 392 2550, or via WhatsApp at +27 71 426 1495.

3. Personal Information We Collect

3.1 Information You Provide Directly to Us:

Waitlist and Account Information: When you subscribe to our pre-launch waitlist or register for the Happy Gut Club, we collect your full name, email address, telephone number, and country of residence.
Gut Happiness Score Data: When you complete the interactive Gut Happiness Score questionnaire, we collect your responses regarding general lifestyle, digestive wellness preferences, dietary habits, and contact details provided upon completion.
Interactive Chat Transcripts: When you converse with our automated chat assistant (the mascot Fizzoy), we record and store the full text transcript of your conversation, including any questions, feedback, or personal details you voluntarily provide during the session.
Direct Communications: When you contact us via email, contact forms, telephone, or WhatsApp (+27 71 426 1495), we collect your name, contact details, and the full content of your message.

3.2 Information Collected Automatically Through Web Technologies:

Technical and Device Information: Your IP address, browser type and version, operating system, device hardware details, language preferences, time zone setting, and internet service provider details.
Usage and Navigation Data: Pages viewed, links clicked, time spent on specific sections of fizzoy.com, referring URL websites, and exit pages.
Pixels, Analytics, and Cookies: Data collected via Google Analytics 4, Google Ads conversion tracking, Meta Pixel (Facebook/Instagram), TikTok Pixel, and self-hosted Mautic tracking scripts operating at mautic.velobiotics.com.

3.3 Information Collected via E-Commerce Storefronts: When you navigate from fizzoy.com to pre-order or purchase products on velobiotics.com or velobiotics.co.za, Shopify Payments and our merchant infrastructure collect billing addresses, shipping addresses, payment confirmation tokens, and order histories. Credit card numbers are processed directly by PCI-DSS compliant payment providers and are never stored on our local servers.

4.1 We process your personal information in accordance with lawful bases established under the Protection of Personal Information Act 4 of 2013 (POPIA) in South Africa, the General Data Protection Regulation (EU) 2016/679 (EU GDPR), and the UK GDPR:

Consent (POPIA s11(1)(a) / GDPR Art. 6(1)(a)): You have given clear consent for us to process your personal data for specific purposes, such as subscribing to marketing emails, completing the Gut Happiness Score, participating in flavor voting, or accepting analytics and marketing cookies. You may withdraw consent at any time.
Performance of a Contract or Pre-Contractual Steps (POPIA s11(1)(b) / GDPR Art. 6(1)(b)): Processing is necessary to fulfill pre-order reservations, manage Happy Gut Club founding memberships, deliver product updates, or take steps at your request prior to entering into a purchasing contract.
Legitimate Interests (POPIA s11(1)(f) / GDPR Art. 6(1)(f)): Processing is necessary for our legitimate commercial interests, including improving site security, optimizing beverage product formulas based on feedback, preventing fraud, and analyzing web traffic, provided these interests are not overridden by your fundamental privacy rights.
Compliance with Legal Obligations (POPIA s11(1)(c) / GDPR Art. 6(1)(c)): Processing is necessary to comply with financial reporting, tax legislation, trade sanctions, or regulatory health authority requirements in South Africa, the United States, or destination markets.

5. Specific Processing Operations

5.1 Self-Hosted Mautic Platform (mautic.velobiotics.com):

We host our marketing automation platform on secure, isolated servers at mautic.velobiotics.com. When you register your interest on fizzoy.com, your name, email, phone number, country, and Gut Happiness Score inputs are transmitted directly to our Mautic database. Mautic uses embedded tracking techniques to monitor email open rates, link click-through rates, and lead engagement scoring. This processing enables us to send personalized, relevant updates regarding product development, production milestones, and regional launch availability. Every marketing email contains an automated, one-click unsubscribe link allowing immediate opt-out.

5.2 AI Chat Assistant (The Mascot Fizzoy):

Our website features an interactive chat assistant represented by the mascot Fizzoy. The chat assistant is powered by third-party large language model (LLM) application programming interfaces. When you submit text to the chat assistant, your messages are processed by LLM service providers to generate real-time responses. Chat transcripts are permanently recorded and stored in our secure database for quality control, service enhancement, prompt optimization, and customer service support. Please do not submit confidential financial details or sensitive health information into the chat assistant window. The chat assistant provides general product information and cannot provide medical advice or form binding contracts.

5.3 Gut Happiness Score and Interactive Tools:

Responses submitted to the Gut Happiness Score questionnaire are evaluated to generate a general lifestyle and dietary wellness summary. This score is informational only and does not constitute a medical diagnostic evaluation or clinical health assessment.

6. Cookies, Pixels, and Tracking Technologies

6.1 fizzoy.com uses first-party and third-party cookies, web beacons, software development kits (SDKs), and pixel tags to ensure site functionality, analyze performance, and deliver targeted advertising. The table below summarizes the primary tracking technologies deployed on our website:

Category	Provider / Technology	Purpose and Function	Type and Duration
Essential & Functional	Fizzoy / Web Server	Maintains core web session, security tokens, and user preferences.	First-party / Session to 30 days
Marketing Automation	Mautic (mautic.velobiotics.com)	Tracks contact activity, form submissions, and email interaction.	First-party / Persistent (1 year)
Web Analytics	Google Analytics 4 (Google LLC)	Measures page views, user pathways, geographic distribution, and site performance.	Third-party / Persistent (up to 14 months)
Advertising & Retargeting	Meta Pixel (Meta Platforms, Inc.)	Tracks conversions from Facebook and Instagram ads and builds custom audiences.	Third-party / Persistent (90 to 180 days)
Advertising & Retargeting	TikTok Pixel (TikTok Technology Ltd)	Measures ad campaign effectiveness and retargets visitors on TikTok.	Third-party / Persistent (13 months)
Advertising & Search	Google Ads (Google LLC)	Tracks conversions from search ads and optimizes promotional campaigns.	Third-party / Persistent (90 days)

6.2 Cookie Preferences and Opt-Out Options: You can manage or disable cookies through your web browser settings. Disabling essential cookies may impair certain features of fizzoy.com. You may also opt out of Google Analytics tracking by installing the Google Analytics Opt-out Browser Add-on, and manage ad settings directly within your Meta, TikTok, and Google user accounts.

7. South African POPIA Compliance Framework

7.1 In compliance with the Protection of Personal Information Act 4 of 2013 (POPIA), Velobiotics (Pty) Ltd adheres to the eight lawful conditions for processing personal information: Accountability, Processing Limitation, Purpose Specification, Further Processing Limitation, Information Quality, Openness, Security Safeguards, and Data Subject Participation.

7.2 Information Officer Details: The designated Information Officer overseeing POPIA compliance is Dr. Chomba Chuma, accessible at fizzoy@velobiotics.com or via South African postal address: Velobiotics (Pty) Ltd, 10 Kruin Street, Klopperpark, Germiston 1401, South Africa. Company Registration Number: 2015/306434/07.

7.3 Rights of South African Data Subjects: Under POPIA, you have the right to:

Request confirmation of whether we hold personal information about you.
Request access to, or a description of, the personal information we hold.
Request the correction, destruction, or deletion of personal information that is inaccurate, irrelevant, excessive, out of date, incomplete, misleading, or obtained unlawfully.
Object on reasonable grounds to the processing of your personal information.
Lodge a complaint with the South African Information Regulator.

7.4 Information Regulator Contact Details: Information Regulator South Africa, JD House, 27 Stiemens Street, Braamfontein, Johannesburg, 2001. P.O Box 31533, Braamfontein, Johannesburg, 2017. Email: inforeg@justice.gov.za / complaints.IR@inforegulator.org.za.

8.1 If you are located in the European Economic Area (EEA) or the United Kingdom (UK), you possess specific statutory rights under Regulation (EU) 2016/679 (EU GDPR) and the UK Data Protection Act 2018 / UK GDPR:

Right of Access: Request a copy of personal data processed by us.
Right to Rectification: Request correction of inaccurate personal data.
Right to Erasure (Right to be Forgotten): Request deletion of personal data where legal grounds are met.
Right to Restriction of Processing: Request temporary suspension of data processing under specific conditions.
Right to Data Portability: Receive personal data in a structured, commonly used, machine-readable format.
Right to Object: Object to processing based on legitimate interests or direct marketing.
Rights Regarding Automated Decision-Making: Request human intervention regarding automated decisions or profiling.

8.2 Cross-Border Data Transfers: Personal data collected on fizzoy.com is transferred to, stored, and processed in South Africa and the United States. When transferring personal data outside the EEA or UK to countries without an adequacy decision, Velobiotics relies on European Commission Standard Contractual Clauses (SCCs) and the UK International Data Transfer Addendum to guarantee adequate protection.

8.3 Supervisory Authorities: UK residents may complain to the Information Commissioner's Office (ICO) at ico.org.uk. EEA residents may contact their local national Data Protection Authority.

9. United States Consumer Privacy Rights (CCPA / CPRA & State Laws)

9.1 Notice at Collection for California and US Residents: Under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), and applicable state privacy statutes, California and US consumers have specific rights regarding their personal information.

9.2 Categories of Personal Information Collected and Disclosed in the Past 12 Months:

Identifiers: Name, email address, telephone number, IP address, unique online identifiers (collected for waitlist, account creation, and communication; disclosed to IT and marketing service providers).
Commercial Information: Purchase history, pre-order preferences, Gut Happiness Score responses (collected for product development and e-commerce fulfillment).
Internet or Network Activity: Browsing history, search history, interaction with fizzoy.com and ads (collected via analytics and pixels).
Geolocation Data: Country-level or city-level location derived from IP address (collected for regional launch planning).
Audio / Visual / Text Data: Chat transcripts submitted to the mascot Fizzoy (collected for customer support and quality assurance).

9.3 Do Not Sell or Share My Personal Information: Velobiotics DOES NOT sell personal information for monetary compensation. However, the use of third-party advertising pixels (such as Meta Pixel, TikTok Pixel, and Google Ads) may be classified as "sharing" or "targeted advertising" under certain US state statutes. You may opt out of cross-context behavioral advertising by adjusting your browser cookie settings or contacting fizzoy@velobiotics.com.

9.4 California Rights: California consumers have the Right to Know, Right to Delete, Right to Correct, Right to Limit Use of Sensitive Personal Information, and the Right to Non-Discrimination for exercising privacy rights. To exercise these rights, submit a request to fizzoy@velobiotics.com or call +27 11 392 2550.

10. Children's Privacy and Age Limitations (COPPA)

10.1 Compliance with COPPA: fizzoy.com is not directed to children under the age of 13. Velobiotics does not knowingly collect, request, or solicit personal information from children under 13 years of age in compliance with the United States Children's Online Privacy Protection Act (COPPA) and international youth protection standards. If we learn that personal data from a child under 13 has been collected without verifiable parental consent, we will delete that information immediately.

10.2 Age Requirements for Waitlist and Purchasing: Joining the waitlist, completing the Gut Happiness Score, and submitting chat queries is permitted only for individuals aged 16 years or older. Executing commercial pre-orders, Happy Gut Club passes, or product purchases on velobiotics.com or velobiotics.co.za is strictly restricted to adults aged 18 years or older (or the age of legal majority in your jurisdiction of residence).

11. Data Retention and Security Measures

11.1 Retention Schedules: We retain personal information only for as long as necessary to fulfill the purposes outlined in this policy, satisfy accounting and legal requirements, or resolve disputes:

Waitlist and Lead Data: Retained until you unsubscribe or request account deletion, or for a maximum of 3 years of continuous inactivity.
Interactive Chat Transcripts: Retained for 24 months from the date of creation for training, quality control, and platform optimization.
Transaction and Pre-Order Records: Retained for 7 years following completion of the transaction to comply with tax, statutory accounting, and commercial auditing laws in South Africa and the US.
Analytics and Web Server Logs: Retained in pseudonymized form for up to 14 months before automated deletion or aggregation.

11.2 Data Security Safeguards: We maintain physical, technical, and administrative safeguards designed to protect personal information against unauthorized access, loss, destruction, alteration, or disclosure. Safeguards include Transport Layer Security (TLS/SSL) encryption for data in transit, firewalls, restricted database access controls, regular security patches, and isolation of our self-hosted Mautic database. However, no internet transmission or electronic storage system is 100 percent secure, and we cannot guarantee absolute security.

12. Data Breach Notification Procedures

12.1 In the event of a confirmed or suspected security compromise involving personal information, Velobiotics will take immediate incident response measures to contain the breach, assess potential harm, and restore system integrity.

12.2 We will notify affected data subjects and relevant regulatory authorities (including the South African Information Regulator under POPIA Section 22, the UK ICO, or European Data Protection Authorities under GDPR) without undue delay where required by applicable law. Notifications will describe the nature of the breach, potential impact, remediation steps taken, and recommended protective actions for users.

13. Third-Party Links and External Services

13.1 fizzoy.com contains links to third-party platforms, social media networks, and our e-commerce storefronts on Shopify. Clicking on external links may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements. When leaving fizzoy.com, we encourage you to read the privacy notice of every website you visit.

14. International Data Transfers

14.1 Personal information collected by Velobiotics is stored and processed on servers located in South Africa, the United States, and the European Union. By using fizzoy.com and submitting your information, you consent to the cross-border transfer of your data to servers operated by Velobiotics and its verified service providers in these jurisdictions.

15. Modifications to This Privacy Policy

15.1 Velobiotics reserves the right to revise or update this Privacy Policy at any time to reflect operational changes, technological advancements, or statutory updates. The date at the top of this page indicates when this Privacy Policy was last updated. Material updates will be communicated through site notifications or email updates to waitlist subscribers. Your continued use of fizzoy.com following posted changes constitutes acceptance of the revised Privacy Policy.

16. Contact Information and Supervisory Authorities

16.1 If you have questions, comments, or requests regarding this Privacy Policy or our data handling practices, please contact our legal and privacy team:

Email: fizzoy@velobiotics.com
South Africa Headquarters: Velobiotics (Pty) Ltd, Reg No: 2015/306434/07, Information Officer: Dr. Chomba Chuma, Phone: +27 11 392 2550, WhatsApp: +27 71 426 1495.
United States Office: Cantobiz Inc DBA Velobiotics US, 1820 Avenue M #1065, Brooklyn, NY 11230, United States.

16.2 If you feel your privacy rights have been infringed, you have the right to lodge a formal complaint with the Information Regulator in South Africa, the Information Commissioner's Office (ICO) in the United Kingdom, or the relevant Data Protection Authority in your European Union member state.

Questions? fizzoy@velobiotics.com