1. Introduction
[BRAND NAME] respects your privacy and is committed to protecting your personal information.
This Privacy Policy explains how we collect, use, store, share and protect personal information when you visit [WEBSITE URL], create an account, place an order, contact us, subscribe to marketing communications or otherwise interact with us.
We process personal information in accordance with applicable South African law, including the Protection of Personal Information Act 4 of 2013 (“POPIA”). POPIA requires personal information to be processed lawfully, reasonably, for appropriate purposes and in a manner that does not unnecessarily infringe privacy.
For purposes of POPIA, the responsible party is:
Business: [LEGAL BUSINESS NAME]
Trading as: [BRAND NAME]
Registration number: [COMPANY REGISTRATION NUMBER]
Address: [BUSINESS ADDRESS]
Email: [PRIVACY/CONTACT EMAIL]
Telephone: [PHONE NUMBER]
2. Information We Collect
Depending on how you interact with our website, we may collect the following information:
Personal and Contact Information
- First and last name
- Email address
- Telephone number
- Billing address
- Shipping address
- Province, city and postal code
Account Information
If you create an account, we may collect:
- Username
- Email address
- Account preferences
- Saved addresses
- Order history
Passwords are stored using the security mechanisms provided by our website platform and are not intended to be available to us in plain text.
Order Information
When you place an order, we may process:
- Products purchased
- Product variations such as size and colour
- Quantity
- Order value
- Delivery method
- Billing information
- Shipping information
- Order status
- Refund and return information
- Communications concerning your order
Payment Information
Payments may be processed through third-party payment providers.
Where payment information is entered directly into a payment provider’s secure system, your full payment-card details are processed by that provider rather than being stored directly by us.
We may receive information confirming:
- Whether payment was successful
- Transaction reference
- Payment method
- Amount paid
- Refund status
Technical Information
When you use our website, certain technical information may be collected automatically, including:
- IP address
- Browser type
- Device type
- Operating system
- Pages visited
- Referring website
- Approximate location
- Website interaction information
- Cookie identifiers
Communications
We may retain information you provide when you:
- Contact customer support
- Submit a contact form
- Contact us through WhatsApp
- Email us
- Request a return or exchange
- Submit a product review
- Communicate with us through social media
3. How We Collect Information
We may collect information:
- Directly from you
- When you create an account
- When you place an order
- When you contact us
- When you subscribe to marketing
- Through cookies and similar technologies
- Through our payment providers
- Through delivery or courier partners
- Through analytics and advertising services
- Through authorised third-party integrations
POPIA requires reasonable transparency regarding what information is collected, who is collecting it and the purpose for which it is collected.
4. How We Use Your Information
We may use personal information to:
Process Orders
Including to:
- Accept and process orders
- Confirm payment
- Prepare products for dispatch
- Arrange delivery
- Provide tracking information
- Communicate order updates
- Process exchanges, returns and refunds
Provide Customer Service
Including to:
- Respond to enquiries
- Resolve complaints
- Assist with sizing
- Answer product questions
- Assist with delivery issues
- Manage returns and exchanges
Manage Customer Accounts
Including to:
- Create and maintain customer accounts
- Display previous orders
- Store customer preferences
- Allow customers to manage addresses and account details
Improve Our Website
We may analyse website activity to:
- Understand how customers use our website
- Improve website performance
- Improve navigation
- Improve product offerings
- Identify technical problems
- Improve the shopping experience
Prevent Fraud and Protect Our Business
We may process information where reasonably necessary to:
- Detect fraudulent transactions
- Prevent abuse
- Protect our website
- Maintain security
- Enforce our Terms and Conditions
- Comply with applicable law
Marketing
Where permitted by law, we may use your information to communicate:
- New product releases
- Limited drops
- Promotions
- Match-day collections
- Brand updates
- Special offers
You may unsubscribe from marketing communications at any time.
POPIA specifically regulates electronic direct marketing and gives data subjects rights to object to direct marketing.
5. Cookies
Our website may use cookies and similar technologies.
Cookies may be used to:
- Keep products in your shopping cart
- Remember account sessions
- Remember preferences
- Process checkout
- Maintain website security
- Measure website traffic
- Understand website usage
- Support advertising and marketing features
Some cookies are necessary for the website and WooCommerce store to function correctly.
Other cookies, including analytics and advertising cookies, may be controlled through our cookie consent system where required.
You can also manage cookies through your browser settings. Disabling certain cookies may affect website functionality.
6. WooCommerce
Our store is powered by WooCommerce, which is used to manage products, customer accounts, carts, checkout and orders.
Information necessary to process orders may therefore be stored within our WordPress/WooCommerce website environment.
This may include:
- Customer details
- Billing addresses
- Shipping addresses
- Order history
- Product purchases
- Customer notes
- Transaction references
7. Payment Providers
We may share necessary transaction information with approved payment providers so that payments can be processed securely.
Our payment providers may have their own privacy policies and legal obligations relating to the information they process.
We encourage customers to review the privacy information supplied by the relevant payment provider.
8. Courier and Delivery Providers
Where an order requires delivery, we may provide necessary information to courier and logistics providers.
This may include:
- Customer name
- Delivery address
- Telephone number
- Email address
- Order or tracking reference
We provide only information reasonably necessary to fulfil the delivery.
9. Other Service Providers
We may use trusted third-party providers for services including:
- Website hosting
- Website maintenance
- Cloud infrastructure
- Email delivery
- Newsletter services
- Analytics
- Security
- Backups
- Payment processing
- Shipping
- Customer support
- Advertising
These providers may process information on our behalf or independently depending on the service being provided.
Where organisations process information on our behalf, we take reasonable steps to ensure appropriate data-protection arrangements are in place.
10. International Data Transfers
Some technology providers used by our business may store or process information outside South Africa.
Where personal information is transferred outside South Africa, we will take appropriate steps to ensure that the transfer is permitted under POPIA and that an appropriate level of protection is maintained.
Section 72 of POPIA regulates transfers of personal information outside South Africa and provides for transfers where appropriate safeguards or other permitted grounds exist.
11. How We Protect Information
We take reasonable technical and organisational measures designed to protect personal information against:
- Unauthorised access
- Loss
- Misuse
- Destruction
- Alteration
- Disclosure
Measures may include:
- SSL encryption
- Access controls
- Strong passwords
- Secure hosting
- Software updates
- Website security monitoring
- Restricted administrator access
- Backups
No internet-based system can guarantee absolute security.
POPIA requires responsible parties to take appropriate and reasonable technical and organisational measures to protect personal information against loss, damage, unauthorised destruction, unlawful access or unlawful processing.
12. Data Retention
We retain personal information only for as long as reasonably necessary for:
- Processing transactions
- Customer service
- Record keeping
- Tax and accounting obligations
- Fraud prevention
- Resolving disputes
- Complying with legal obligations
Information that is no longer required will, where appropriate, be securely deleted, destroyed or de-identified.
13. Your Rights
Subject to applicable law, you may have the right to:
- Ask whether we hold personal information about you
- Request access to your personal information
- Request correction of inaccurate information
- Request deletion or destruction where legally appropriate
- Object to certain processing
- Object to direct marketing
- Withdraw consent where processing is based on consent
- Lodge a complaint with the Information Regulator
These rights are expressly recognised under POPIA.
To exercise your rights, contact:
Email: [PRIVACY EMAIL]
We may need to verify your identity before processing certain requests.
14. Marketing Communications
You may unsubscribe from promotional emails at any time by:
- Clicking the unsubscribe link contained in the communication; or
- Contacting us at [EMAIL ADDRESS]
Unsubscribing from marketing does not prevent us from sending transactional communications relating to an order, payment, delivery, account or customer-service matter.
15. Children’s Privacy
Our online store is not intended to knowingly collect unnecessary personal information from children.
Where the processing of children’s personal information is regulated by law, we will process that information only where legally permitted.
16. Third-Party Links
Our website may contain links to third-party websites, social-media platforms or services.
We are not responsible for the privacy practices of third-party websites.
Customers should review the privacy policies of those services before providing personal information.
17. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect:
- Changes to our business
- Changes to website functionality
- Changes to service providers
- Changes to applicable law
The latest version will be published on this page together with its effective date.
18. Contact Us
For questions concerning this Privacy Policy or the processing of your personal information, contact:
[BRAND NAME]
[LEGAL BUSINESS NAME]
[PHYSICAL ADDRESS]
[EMAIL ADDRESS]
[PHONE NUMBER]
You also have the right to lodge a POPIA complaint with the Information Regulator (South Africa). The Regulator accepts complaints relating to matters including unauthorised disclosure, unlawful collection and failure to respond appropriately to data-subject rights requests.