Privacy Policy
At DEBUT, we respect your privacy and are committed to protecting your personal information.
This Privacy Policy explains how we collect, use, store, share and protect personal information when you visit https://debut-cpt.com, create an account, place an order, contact us, subscribe to marketing communications or otherwise interact with our business.
We process personal information in accordance with applicable South African law, including the Protection of Personal Information Act 4 of 2013 (“POPIA”).
1. Business Information
For purposes of this Privacy Policy, the business responsible for processing your personal information is:
Legal business name: Hartzenberg Ventures trading as DEBUT
Trading name: DEBUT
Registration number: 2026/220649/07
Country: South Africa
Physical address: 18 Firlands Rd, Rondebosch, Cape Town
Email: debutcpt@gmail.com
Telephone / WhatsApp: 064 674 5868
Website: https://debut-cpt.com
2. What Is Personal Information?
Personal information is information that identifies you or can reasonably be linked to you.
This may include information such as:
- Your name
- Email address
- Telephone number
- Physical address
- Billing address
- Delivery address
- Account information
- Order history
- Payment-related information
- IP address
- Device information
- Online activity
- Communications with us
3. Information We Collect
Depending on how you interact with our website and business, we may collect different types of information.
4. Personal and Contact Information
We may collect:
- First name
- Last name
- Email address
- Telephone number
- Billing address
- Shipping address
- Province
- City
- Postal code
- Country
This information may be collected when you:
- Create an account
- Place an order
- Contact us
- Request a return or exchange
- Subscribe to communications
5. Account Information
If you create an account on our website, we may collect:
- Name
- Email address
- Username
- Saved addresses
- Order history
- Account preferences
- Password-related authentication information
Passwords are managed through the security systems used by our website and are not intended to be available to us in plain text.
6. Order Information
When you place an order, we may collect and process:
- Products purchased
- Sizes selected
- Colours selected
- Product variations
- Quantity
- Order value
- Billing information
- Delivery information
- Shipping method
- Payment status
- Order status
- Customer notes
- Return information
- Exchange information
- Refund information
We use this information primarily to process and fulfil your order.
7. Payment Information
Payments are processed through Paystack and other payment services that may be made available on the website from time to time.
Depending on the payment method used, the payment provider may process information such as:
- Card information
- Bank information
- Transaction details
- Payment authentication information
Where payment information is entered directly into a payment provider’s secure system, we do not ordinarily receive or store your complete payment-card information.
We may receive transaction information such as:
- Payment status
- Transaction reference
- Payment method
- Amount paid
- Refund information
Payment providers operate according to their own security standards, terms and privacy practices.
8. Technical and Device Information
When you visit our website, certain information may be collected automatically.
This may include:
- IP address
- Browser type
- Device type
- Operating system
- Screen size
- Referring website
- Pages visited
- Time spent on pages
- General interaction with the website
- Approximate geographic information
- Cookie identifiers
This information may be used to maintain, secure and improve the website.
9. Communications With Us
We may retain information that you provide when communicating with us through:
- Contact forms
- Social media
- Customer-support channels
- Returns requests
- Exchange requests
- Product enquiries
- Order-related communications
This may include the content of your message and information necessary to respond to your request.
10. Product Reviews
If product reviews are enabled, we may collect:
- Your name or display name
- Email address
- Review content
- Rating
- Product purchased
- Technical information used for spam prevention
Reviews may be displayed publicly on the website depending on the functionality used.
We will not intentionally display your private contact information as part of a public product review.
11. How We Collect Personal Information
We may collect information:
- Directly from you
- When you create an account
- When you place an order
- When you subscribe to our newsletter
- When you contact us
- When you complete a form
- When you request a return or exchange
- Automatically through our website
- Through cookies
- Through payment providers
- Through courier companies
- Through analytics services
- Through authorised third-party services
12. Why We Process Your Information
We may process personal information where necessary to:
- Fulfil an order
- Provide a requested service
- Manage our relationship with you
- Comply with legal obligations
- Protect legitimate business interests
- Maintain website security
- Prevent fraud
- Communicate with you
- Improve our services
- Send marketing communications where legally permitted
- Respond to requests or complaints
Where consent is required, we will rely on consent for the relevant processing activity.
13. Processing Orders
We may use your personal information to:
- Receive your order
- Verify order information
- Process payment
- Confirm payment
- Prepare your order
- Arrange delivery
- Communicate order updates
- Provide courier tracking
- Respond to order queries
- Process cancellations
- Process returns
- Process exchanges
- Process refunds
Without certain personal information, we may be unable to complete your order.
14. Customer Service
We may use your information to:
- Answer questions
- Provide sizing assistance
- Respond to product enquiries
- Assist with orders
- Resolve delivery problems
- Handle complaints
- Process returns and exchanges
- Provide technical assistance relating to customer accounts
15. Customer Accounts
If you create an account, we may use your information to:
- Create and maintain your profile
- Display previous orders
- Save addresses
- Remember preferences
- Enable account login
- Process future purchases more efficiently
- Allow you to manage account information
16. Fraud Prevention and Security
We may process information where reasonably necessary to:
- Detect fraudulent transactions
- Prevent unauthorised account access
- Protect customer information
- Secure our website
- Investigate suspicious activity
- Prevent misuse of payment systems
- Enforce our Terms and Conditions
17. Website Improvement and Analytics
We may analyse website activity to understand:
- Which pages customers visit
- Which products are viewed
- How visitors navigate the website
- Which devices are used
- How visitors arrive at the website
- Where technical problems occur
- How the website can be improved
Analytics information may be aggregated or anonymised where appropriate.
18. Marketing Communications
Where permitted by law, we may use your information to send communications relating to:
- New products
- Product drops
- Promotions
- Special offers
- Match-day collections
- Brand updates
- Events
- News
- Relevant marketing content
You may unsubscribe from marketing communications at any time.
19. Unsubscribing From Marketing
You can unsubscribe by:
- Clicking the unsubscribe link contained in marketing emails
- Contacting us at debutcpt@gmail.com
Unsubscribing from marketing does not prevent us from sending necessary transactional communications relating to:
- Orders
- Payments
- Deliveries
- Returns
- Refunds
- Customer accounts
- Security
- Customer-service requests
20. Cookies
Our website may use cookies and similar technologies.
Cookies are small files or identifiers used by websites to remember information about visitors and their activity.
Cookies may help us:
- Keep products in your cart
- Remember account sessions
- Remember customer preferences
- Process checkout
- Improve website functionality
- Maintain website security
- Measure website traffic
- Understand website usage
- Support marketing functionality
21. Essential Cookies
Some cookies may be necessary for the website to function correctly.
These may support:
- Shopping cart functionality
- Checkout
- Customer login
- Account security
- Session management
- Fraud prevention
- Website preferences
Disabling these cookies may affect your ability to use certain website features.
22. Analytics Cookies
Where analytics services are enabled, they may help us understand:
- Visitor numbers
- Popular pages
- Website traffic sources
- Customer journeys
- Website performance
- Device types
- General website usage
Analytics tools may use cookies or similar technologies to collect technical and usage information.
Where required, non-essential analytics technologies will be subject to appropriate cookie or consent controls.
23. Advertising and Marketing Cookies
If we use advertising or remarketing platforms, marketing cookies or similar technologies may help us:
- Measure advertising performance
- Understand campaign effectiveness
- Show relevant advertising
- Build advertising audiences
The specific platforms used may change over time.
Where required, non-essential advertising or marketing cookies will be subject to appropriate consent controls.
24. Managing Cookies
Where applicable, you may manage non-essential cookies through:
- Our cookie consent tool
- Your browser settings
- Relevant third-party privacy controls
Blocking certain cookies may affect website functionality.
25. WooCommerce
Our online store is powered by WooCommerce.
WooCommerce functionality may require us to process information relating to:
- Customer accounts
- Shopping carts
- Orders
- Billing details
- Delivery details
- Product purchases
- Customer notes
- Order statuses
- Transaction references
- Refunds
This information is stored within or processed through our WordPress/WooCommerce environment and supporting services.
26. WordPress
Our website operates using WordPress.
Depending on the website configuration, WordPress may process information necessary for:
- Customer accounts
- Website administration
- Forms
- Security
- Comments
- User authentication
- Website functionality
27. Payment Providers
We may share information necessary to process your transaction with Paystack and any other payment provider made available through the website.
Information shared may include:
- Name
- Billing information
- Order amount
- Transaction reference
- Order information
Payment providers operate under their own terms, security standards and privacy practices.
28. Courier and Delivery Providers
Where your order must be delivered, we may share relevant information with The Courier Guy or another delivery provider used to fulfil the order.
This may include:
- Your name
- Delivery address
- Telephone number
- Email address
- Delivery instructions
- Order or tracking reference
We will generally only provide information reasonably necessary to complete the delivery.
29. Website Hosting
Our website is hosted using third-party hosting infrastructure.
The hosting provider may process technical information as part of:
- Hosting the website
- Maintaining server logs
- Security monitoring
- Backups
- Website performance
Where a hosting provider processes personal information on our behalf, it is expected to handle that information in accordance with applicable contractual and legal requirements.
30. Email Services
We may use third-party email services to send:
- Order emails
- Password-reset emails
- Account notifications
- Customer-service messages
- Newsletters
- Marketing campaigns
These providers may process your email address, name, order information or communication preferences to the extent necessary to provide the relevant service.
31. Analytics Providers
We may use analytics services to understand how visitors use our website and to improve performance, usability and customer experience.
These services may process technical information such as:
- IP address
- Device type
- Browser information
- Pages visited
- Referral information
- Website interaction data
Where required, analytics and related cookies will be configured in accordance with applicable privacy and consent requirements.
32. Social Media
Our website may link to or integrate with social-media platforms such as:
- TikTok
- Other social networks
If you interact with these platforms, your information may also be processed according to the privacy policies of the relevant platform.
33. WhatsApp
If you contact us through WhatsApp, the information you send may be processed by both:
- DEBUT
- WhatsApp and its relevant service providers
Please avoid sending sensitive payment information such as complete bank-card details through WhatsApp.
34. Other Service Providers
We may use trusted third parties for services including:
- Website hosting
- Website maintenance
- Backups
- Cybersecurity
- Payment processing
- Courier services
- Email delivery
- Marketing
- Analytics
- Customer support
- Fraud prevention
- Cloud infrastructure
These providers may process information only to the extent necessary for the services they provide, subject to their legal and contractual obligations.
35. Disclosure Required by Law
We may disclose personal information where reasonably required to:
- Comply with applicable law
- Respond to lawful legal processes
- Cooperate with regulators
- Respond to court orders
- Prevent fraud
- Protect our rights
- Protect customers
- Investigate unlawful activity
36. Sale or Restructuring of the Business
If Hartzenberg Ventures trading as DEBUT or the business operating DEBUT is:
- Sold
- Merged
- Restructured
- Acquired
- Transferred
personal information may form part of the transferred business assets where legally permitted.
Any new responsible party would remain subject to applicable data-protection obligations.
37. International Data Transfers
Some technology providers used by our business may store or process information outside South Africa.
This may apply to services such as:
- Website hosting
- Cloud storage
- Analytics
- Payment processing
- Marketing platforms
- Email providers
- Security services
Where personal information is transferred internationally, we will take reasonable steps to ensure that such transfers comply with applicable requirements under POPIA.
38. How We Protect Your Information
We take reasonable technical and organisational measures designed to protect personal information against:
- Loss
- Theft
- Misuse
- Unauthorised access
- Unauthorised disclosure
- Destruction
- Alteration
- Cyberattacks
Security measures may include:
- SSL/HTTPS encryption
- Secure hosting
- Strong passwords
- Access controls
- Two-factor authentication
- Software updates
- Security monitoring
- Backups
- Restricted administrator access
- Website firewalls
- Malware monitoring
No online service can guarantee absolute security.
39. Staff Access
Access to customer information should be limited to people who reasonably require it to perform their responsibilities.
Depending on their role, employees, contractors or authorised representatives may require access to information necessary for:
- Processing orders
- Updating order statuses
- Preparing orders
- Arranging delivery
- Responding to customer queries
- Processing returns
Staff should not have access to information beyond what is reasonably necessary for their duties.
40. Data Retention
We retain personal information only for as long as reasonably necessary for the purpose for which it was collected or as required by law.
Information may be retained for purposes including:
- Order processing
- Customer support
- Accounting
- Tax records
- Fraud prevention
- Dispute resolution
- Legal compliance
- Warranty or alteration claims
- Returns and refunds
41. WooCommerce Order Records
WooCommerce may retain order records containing:
- Customer name
- Addresses
- Products purchased
- Transaction information
- Order notes
- Order status
Retention periods will be configured according to the operational and legal needs of the business.
42. Account Information
Information associated with an active customer account may be retained while the account remains active.
Where legally permitted and technically possible, customers may request deletion of account information that is no longer required.
Certain transaction records may need to be retained despite account deletion.
43. Deletion and De-Identification
Where personal information is no longer required and there is no lawful reason to retain it, we may:
- Delete it
- Destroy it
- Anonymise it
- De-identify it
44. Your Privacy Rights
Subject to applicable South African law, you may have the right to:
- Ask whether we hold personal information about you
- Request access to your personal information
- Request correction of inaccurate information
- Request deletion or destruction where appropriate
- Object to certain processing
- Object to direct marketing
- Withdraw consent where applicable
- Request information about how your information is used
- Lodge a complaint with the Information Regulator
45. Accessing Your Personal Information
You may contact us to ask whether we hold personal information about you.
Where permitted by law, you may request access to relevant personal information.
We may need to verify your identity before providing information.
Contact:
46. Correcting Your Information
If your personal information is incorrect, incomplete or outdated, you may request that it be corrected.
Customer-account information may also be editable directly through the My Account section of the website.
47. Requesting Deletion
You may request deletion or destruction of personal information where legally appropriate.
We may not be able to delete information that we are legally required or reasonably permitted to retain.
For example, certain transaction records may need to be retained for:
- Tax
- Accounting
- Fraud prevention
- Legal claims
- Compliance obligations
48. Objecting to Processing
Where permitted under POPIA, you may object to certain processing of your personal information.
Requests can be submitted to:
49. Withdrawing Consent
Where we rely specifically on your consent to process information, you may withdraw that consent.
Withdrawal does not necessarily affect processing that occurred lawfully before consent was withdrawn.
50. Direct Marketing Rights
You may object to or unsubscribe from direct marketing at any time.
We will provide an appropriate unsubscribe option in electronic marketing communications where required.
51. Complaints
If you have concerns about how we process your personal information, please contact us first at:
Please provide enough information for us to investigate the matter.
52. Information Regulator
You may also have the right to lodge a complaint with the Information Regulator of South Africa.
Current contact details include:
Telephone: 010 023 5200
Toll-free: 0800 017 160
Email: helpdesk@inforegulator.org.za
Website: Information Regulator eServices
The Information Regulator also provides an online eServices platform through which POPIA complaints and other privacy-related matters may be submitted. eServices
53. Children’s Personal Information
Our online store is not primarily directed at children.
We do not intentionally collect unnecessary personal information relating to children.
Where personal information relating to a child is processed, we will do so only where legally permitted.
54. Third-Party Websites
Our website may contain links to:
- Social-media platforms
- Payment providers
- Courier tracking websites
- Partner websites
- Other external services
We do not control those third-party websites.
Their collection and use of personal information is governed by their own privacy policies.
55. External Applications and Plugins
Our WordPress/WooCommerce website may use third-party plugins to provide functionality.
These may include:
- Payment processing
- Forms
- Security
- Analytics
- Shipping
- Backups
- Marketing
- Product functionality
We review service providers and plugins where reasonably appropriate to understand whether they collect, store or share customer information.
56. Data Breaches
If we become aware of a security compromise involving personal information, we will investigate the incident and take reasonable steps to:
- Limit further exposure
- Secure affected systems
- Determine what information was affected
- Take corrective action
- Make any notifications required by applicable law
57. Automated Decision-Making
We do not intentionally make significant decisions about customers solely through automated processing unless this is necessary for a legitimate service, such as fraud detection or payment verification, and is handled in accordance with applicable law.
58. Changes to This Privacy Policy
We may update this Privacy Policy from time to time.
Changes may be made because of:
- Changes to our business
- New website functionality
- New service providers
- Changes to legal requirements
- Changes to the information we process
The latest version will be published on this page.
59. Effective Date
This Privacy Policy is effective from:
30 September 2026
Customers should review the latest version whenever significant changes are announced.
60. Contact Us
For questions about this Privacy Policy or the processing of your personal information, contact:
DEBUT
Legal entity: Hartzenberg Ventures trading as DEBUT
Registration number: 2026/220649/07
Physical address: 18 Firlands Rd, Rondebosch, Cape Town
Email: debutcpt@gmail.com
Telephone / WhatsApp: 064 674 5868
Website: https://debut-cpt.com