midrandbooks/MidrandBookshop/Components/Pages/Privacy.razor

@page "/privacy"
@rendermode InteractiveServer
@inject IJSRuntime JSRuntime

<div class="legal-page-container py-5">
    <header class="legal-header mb-5">
        <span class="text-uppercase font-monospace text-muted tracking-wider small d-block mb-1">Regulatory Governance</span>
        <h1 class="legal-main-title fw-bold">Privacy & Data Protection Policy</h1>
        <p class="text-muted small font-monospace mt-2">
            Midrand Books is a trading name for <strong>Lite Charms (Pty) Ltd</strong>, a company duly incorporated and registered in accordance with the Companies Act of South Africa (Registration No: [2020/269438/07]).
        </p>
    </header>

    <div class="row g-5">
        <div class="col-lg-3 d-none d-lg-block">
            <div class="legal-nav-index font-monospace text-uppercase small gap-3 d-flex flex-column">
                <button @onclick='() => ScrollToSection("section-processing")' class="index-btn text-start">1. Lawful Processing</button>
                <button @onclick='() => ScrollToSection("section-collection")' class="index-btn text-start">2. Information We Collect</button>
                <button @onclick='() => ScrollToSection("section-identity")' class="index-btn text-start">3. Identity Nodes</button>
                <button @onclick='() => ScrollToSection("section-payment")' class="index-btn text-start">4. PayFast Gateway</button>
                <button @onclick='() => ScrollToSection("section-rights")' class="index-btn text-start">5. Data Subject Rights</button>
            </div>
        </div>

        <div class="col-lg-9">
            <article class="legal-article-body">

                <section id="section-processing" class="legal-section mb-5">
                    <h3 class="section-title">1. Commitment to POPIA Compliance</h3>
                    <p>
                        Lite Charms (Pty) Ltd trading as Midrand Books ("we", "us", "our") is dedicated to protecting the privacy and personal data of our customers in strict alignment with the <strong>Protection of Personal Information Act, No. 4 of 2013 (POPIA)</strong> of South Africa. We act as the "Responsible Party" for all data collected across our web architecture.
                    </p>
                </section>

                <section id="section-collection" class="legal-section mb-5">
                    <h3 class="section-title">2. Collection of Personal Information</h3>
                    <p>
                        We collect personal information solely to facilitate the cataloging, transaction, and dispatch of archival material. This information includes, but is not limited to:
                    </p>
                    <ul>
                        <li>Identity Details: Name, email address, and verification markers via federated claim contexts.</li>
                        <li>Logistics Metrics: Physical shipping addresses and localized postal codes for courier assignment within South African borders.</li>
                        <li>Digital Footprints: IP addresses, access telemetry, and structural tracking metrics.</li>
                    </ul>
                </section>

                <section id="section-identity" class="legal-section mb-5">
                    <h3 class="section-title">3. Decentralized Claims & Identity Security</h3>
                    <p>
                        For enhanced systemic protection, your core security credentials, access authentication methods, and identity validation vectors are managed externally through our secure cross-tenant single-sign-on architecture (<strong>STS Security Cluster</strong>). Lite Charms (Pty) Ltd does not store or process raw account passwords locally on its primary catalog databases.
                    </p>
                </section>

                <section id="section-payment" class="legal-section mb-5">
                    <h3 class="section-title">4. Secure Financial Handover Disclosures</h3>
                    <p>
                        All credit card, Instant EFT, and electronic payments are handled through a direct, secure integration handshake with the <strong>PayFast (Pty) Ltd</strong> merchant payment system. Midrand Books never captures, indexes, or retains sensitive primary account numbers (PAN), CVV digits, or banking pins. Payment states are transmitted securely using cryptographically signed verification payloads.
                    </p>
                </section>

                <section id="section-rights" class="legal-section mb-5">
                    <h3 class="section-title">5. Data Subject Rights & Information Officer</h3>
                    <p>
                        In accordance with POPIA parameters, you reserve explicit rights to request access to, correction of, or total destruction of your personal information stored inside our archives. For any data protection inquiries, or to contact our designated Information Officer, please direct formal correspondence to <code>privacy@midrandbooks.co.za</code>.
                    </p>
                </section>

            </article>
        </div>
    </div>
</div>

@code {
    private async Task ScrollToSection(string elementId)
    {
        await JSRuntime.InvokeVoidAsync("eval", $@"
            var el = document.getElementById('{elementId}');
            if (el) {{
                el.scrollIntoView({{ behavior: 'smooth', block: 'start' }});
            }}
        ");
    }
}