Privacy Policy

1. Who We Are

We are the "responsible party" for the personal information described in this policy.

2. Information We Collect

• Contact and account details — name, email address, phone number, delivery and billing address
• Order information — items purchased, order value, order history
• Payment information — handled directly by our payment providers (PayFast, Yoco); we do not store your full card details ourselves
• Newsletter details — email address, and whether you signed up directly or as a result of a purchase
• Website usage information — IP address, browser type, pages visited, via cookies and similar technology

3. How We Collect It

Mostly directly from you — when you create an account, place an order, sign up for our newsletter, or contact us. Some technical information (like IP address and browsing behaviour) is collected automatically when you use our website.

4. Why We Process Your Information

Providing your contact and delivery details is necessary to complete a purchase — without it, we can't fulfil your order. Newsletter sign-up is always optional.

5. Direct Marketing (Newsletter)

We send a weekly newsletter to two groups, handled differently under POPIA section 69:

• People who sign up directly: we only add you after you actively opt in (an unticked checkbox you choose to check) — never by default.
• People who purchase from us: we may email you about similar products without separate opt-in, but you're told this at checkout and given the chance to opt out, and every email includes an unsubscribe link.

You can unsubscribe at any time using the link in any newsletter email, or by contacting us directly. We'll stop marketing emails as soon as you do.

6. Who We Share Your Information With

We share personal information only where necessary to run the store:

• Shopify — our e-commerce platform and website host
• PayFast / Yoco — payment processing
• The Courier Guy — order delivery
• Mailchimp — newsletter delivery

We don't sell your personal information to third parties.

7. Cross-Border Transfers

Some of the providers above (including Shopify, and most email marketing platforms) store data on servers outside South Africa. Where this happens, we only use providers with their own data protection safeguards in place, consistent with POPIA's requirements for cross-border transfers.

8. Cookies

Our website uses cookies to keep your cart working, remember your preferences, and understand how the site is used. You can control cookies through your browser settings; disabling some may affect site functionality.

9. How Long We Keep Your Information

• Order and financial records: kept as required by South African tax law (currently five years)
• Marketing/newsletter data: kept until you unsubscribe or withdraw consent
• Account information: kept while your account is active, plus a reasonable period after

10. Security

We take reasonable technical and organisational measures to protect your personal information against loss, unauthorised access, or disclosure. No method of online transmission is completely secure, but we work to keep your data safe.

11. Your Rights

Under POPIA, you have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your information, subject to legal retention requirements
• Object to processing of your information, including for direct marketing
• Withdraw consent at any time, where processing is based on consent
• Lodge a complaint with the Information Regulator

To exercise any of these rights, contact our Information Officer below.

12. Children

Our store is intended for adults. We don't knowingly collect personal information from anyone under 18 without the consent of a parent or guardian.

13. Our Information Officer

14. The Information Regulator

If you're not satisfied with how we've handled your information, you can lodge a complaint with South Africa's Information Regulator:

15. Changes to This Policy

We may update this policy from time to time. Changes will be posted on this page with an updated effective date.