1. Personal Information We Collect
Depending on how you interact with the Store, we may collect:
- Identity and contact information, including your name, billing address, delivery address, email address, and telephone number.
- Order and transaction information, including products viewed or purchased, order details, returns, refunds, discounts, and transaction history.
- Payment information, such as payment method and payment confirmation. Complete payment card information is generally processed by Shopify or the applicable payment provider rather than stored directly by us.
- Account information, including your username, password, preferences, and saved details if customer accounts are enabled.
- Communications, including enquiries, complaints, product reviews, survey responses, and messages sent to us.
- Device and usage information, including your IP address, browser, device type, operating system, cookie identifiers, pages viewed, referring website, and interactions with the Store.
- Marketing information, including your subscription preferences and interactions with marketing messages.
- Fraud-prevention information, including information used to verify transactions and identify potentially fraudulent, abusive, or unlawful activity.
Please provide accurate information and update it when necessary. If you provide another person's information, you must be authorised to do so.
2. How We Collect Information
We may collect personal information:
- Directly from you when you place an order, create an account, subscribe to marketing, complete a form, or contact us.
- Automatically through cookies, pixels, log files, and similar technologies when you use the Store.
- From service providers, including Shopify, payment processors, delivery companies, marketing platforms, analytics providers, fraud-prevention services, and customer-support tools.
- From publicly available or lawful third-party sources, where permitted by law.
3. How We Use Personal Information
We may process personal information to:
- Provide our services, including processing orders, payments, deliveries, returns, exchanges, and refunds.
- Manage our relationship with you, including customer accounts, enquiries, support, complaints, and important service notices.
- Operate and improve the Store, including troubleshooting, analytics, testing, and understanding how customers use it.
- Prevent fraud and protect security, including authenticating users, screening transactions, and protecting our customers, business, and systems.
- Send marketing communications where you have consented or where another lawful basis permits us to do so.
- Personalise content and advertising, subject to applicable consent and opt-out requirements.
- Maintain business and tax records and comply with legal, accounting, regulatory, and contractual obligations.
- Establish, exercise, or defend legal claims and enforce our terms and policies.
- Complete a business transaction, such as a sale, merger, financing, restructuring, or transfer of business assets.
Under POPIA, processing may be based on consent, contractual necessity, compliance with a legal obligation, protection of a legitimate interest, or another lawful justification. Consent is not necessarily the only basis for processing
4. Shopify
Our Store is hosted by Shopify, which provides the ecommerce platform that enables us to sell products and services. Shopify may process personal information about Store visitors and customers to provide hosting, checkout, payment, security, analytics, personalisation, advertising, and related services.
For customers in Africa, Shopify identifies Shopify International Ltd. as the relevant Shopify entity receiving personal data. Shopify's processing is also governed by its own privacy notices.
5. When We Share Personal Information
We may share personal information only where reasonably necessary and legally permitted, including with:
- Shopify and ecommerce providers that host and operate the Store.
- Payment processors and financial institutions that process and verify payments.
- Delivery and fulfilment providers that package, ship, track, or deliver orders.
- Cloud hosting, IT, security, and fraud-prevention providers that help us maintain secure operations.
- Analytics, advertising, and marketing providers that help us understand Store usage and communicate with customers.
- Professional advisers, including accountants, auditors, insurers, consultants, and legal advisers.
- Government bodies, regulators, law-enforcement agencies, and courts where disclosure is required or legally permitted.
- A buyer, investor, lender, or successor in connection with a proposed or completed business transaction.
These recipients may use personal information only for the relevant services, their lawful independent purposes, or as otherwise permitted by law.
We do not sell personal information for money. Certain advertising or analytics activities may nevertheless be treated as "selling", "sharing", or targeted advertising under some jurisdictions. Where those laws apply, you may have a right to opt out.
6. Payments
Payments are processed by Shopify Payments or other payment providers displayed during checkout. Payment providers may collect payment card details, bank information, billing details, transaction identifiers, and fraud-prevention data.
Their processing is governed by their own privacy policies and contractual terms. We recommend reviewing the policy of the payment provider selected during checkout.
7. Cookies and Similar Technologies
The Store and its service providers may use cookies, pixels, tags, local storage, and similar technologies to:
- Keep the Store functioning and remember your selections.
- Maintain sessions, customer accounts, and shopping carts.
- Protect checkout and prevent fraudulent activity.
- Measure Store traffic and performance.
- Understand how visitors use the Store.
- Personalise content and advertising.
- Measure marketing effectiveness.
Some cookies are necessary for the Store to operate. Where required by law, optional analytics or advertising cookies will be used only after obtaining appropriate consent.
You can manage cookies through the Store's cookie controls, where available, or through your browser settings. Blocking necessary cookies may prevent certain Store features from working correctly. Shopify also provides privacy controls for certain processing through its privacy portal.
8. Direct Marketing
Where permitted by law, we may send information about products, promotions, or Store updates by email, SMS, or another channel.
You can unsubscribe by:
- Selecting the unsubscribe link in an email.
- Following the opt-out instructions in an SMS.
- Contacting us at [PRIVACY EMAIL ADDRESS].
Unsubscribing from marketing will not prevent us from sending essential messages about orders, accounts, security, or customer-service requests.
9. International Transfers
Shopify and some of our service providers may process or store personal information outside South Africa or the country where you live. These countries may have different privacy laws.
Where required, we take reasonable steps to ensure that international transfers are made under appropriate contractual, organisational, or legal safeguards and in compliance with POPIA and other applicable laws.
10. Information Security
We use reasonable technical and organisational measures to protect personal information against loss, unauthorised access, misuse, alteration, destruction, or disclosure.
No website, transmission method, or storage system is completely secure. You are responsible for keeping account credentials confidential and should contact us promptly if you believe your account or personal information has been compromised.
If a security incident creates a legally reportable risk, we will notify affected persons and the appropriate regulator as required by applicable law.
11. Retention of Information
We retain personal information only for as long as reasonably necessary to:
- Fulfil the purposes described in this Privacy Policy.
- Provide services and maintain our relationship with you.
- Meet tax, accounting, legal, and regulatory requirements.
- Resolve disputes and enforce agreements.
- Prevent fraud and maintain security.
Retention periods vary according to the nature of the information and applicable legal requirements. When information is no longer required, we will delete, destroy, de-identify, or anonymise it where reasonably practicable.
12. Your Privacy Rights
Subject to applicable law and relevant exceptions, you may have the right to:
- Ask whether we hold personal information about you.
- Request access to personal information we hold about you.
- Request correction or updating of inaccurate or incomplete information.
- Request deletion or destruction of information that we are no longer authorised or required to retain.
- Object to certain processing, including certain direct-marketing activities.
- Withdraw consent where processing relies on consent, without affecting processing completed before withdrawal.
- Request information about recipients or categories of recipients with whom your information has been shared.
- Complain to the relevant privacy regulator.
- Opt out of certain targeted advertising, sharing, or sales, where applicable law provides such rights.
To exercise a right, contact [PRIVACY EMAIL ADDRESS]. We may request information needed to verify your identity and protect your information from unauthorised access. We will respond within the period required by applicable law.
13. Complaints
Please send privacy complaints to our Information Officer at [PRIVACY EMAIL ADDRESS]. Include enough detail for us to identify the relevant issue and investigate it.
If you are not satisfied with our response and POPIA applies, you may submit a complaint to South Africa's Information Regulator. Confirm the regulator's current contact and complaint-submission details on its official website before publishing this section.
14. Children's Privacy
The Store is not intended for children who cannot lawfully enter into a transaction or consent to the relevant processing without a parent or guardian.
We do not knowingly collect children's personal information contrary to applicable law. If you believe a child has provided personal information without the required authorisation, contact us so that we can investigate and take appropriate action.
15. Third-Party Websites
The Store may contain links to websites, social-media platforms, payment services, or applications operated by third parties. We do not control their security or privacy practices.
Review the privacy policy of a third-party service before providing personal information through it.
16. Automated Processing
We or our service providers may use automated tools for fraud screening, security, product recommendations, advertising, or transaction risk assessment.
Where applicable law gives you rights concerning a decision based solely on automated processing that has a legal or similarly significant effect, you may contact us to request information or an appropriate review.
17. Changes to This Policy
We may update this Privacy Policy when our services, technology, service providers, or legal obligations change. The revised policy will be posted on the Store with an updated effective date.
Where required by law, we will provide additional notice or obtain consent before making a material change that affects how personal information is processed.