Scope

This policy explains how we collect, use, share, and protect personal information when you use our website, contact us, purchase our products/services, or interact with our social media embeds (e.g., Instagram). It applies to all visitors and customers in South Africa and may also apply to visitors from other regions.

The information we collect

We collect information in the following categories:

a) Information you provide

b) Information we collect automatically

c) Information from third parties

Social media platforms (e.g., Instagram embeds may load content and set cookies)

Payment processors (e.g., PayFast/PayPal/Stripe) provide payment confirmations—we do not store full card details

Analytics providers (e.g., Google Analytics)

If you visit our login page, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.

When you log in, we will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select “Remember Me”, your login will persist for two weeks. If you log out of your account, the login cookies will be removed.

If you edit or publish an article, an additional cookie will be saved in your browser. This cookie includes no personal data and simply indicates the post ID of the article you just edited. It expires after 1 day.

Embedded content from other websites

Suggested text: Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.

These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.

Who we share your data with

If you request a password reset, your IP address will be included in the reset email.

How we use your information

We process personal information to:

Monitor performance, prevent fraud, ensure security, and comply with laws

Provide and improve our website, products, and services

Respond to enquiries and provide customer support

Process orders/appointments and deliver items/services (if applicable)

Send service messages (order updates, policy notices) and, with consent, marketing communications

Lawful basis for processing (POPIA)

We process personal information on the following grounds:

Legitimate interests (website security, analytics, improving services), balanced against your rights

Consent (e.g., newsletter opt-ins, certain cookies)

Contract (to supply goods/services you requested)

Legal obligation (invoicing, tax, record-keeping)

Sharing your information

We may share information with:

Business transfers if we restructure, merge, or sell assets, in which case data may transfer as part of the transaction.

Service providers / Operators who help us run the website and business (hosting, email, analytics, payment providers, couriers). They are bound by confidentiality and security obligations.

Regulators or law enforcement where required by law.

We do not sell your personal information.

International transfers

If our providers host or process data outside South Africa, we take steps to ensure appropriate protection is in place that is substantially similar to POPIA protections (e.g., contractual safeguards).

Retention

We keep personal information only as long as necessary for the purposes described above and to comply with legal, tax, and accounting requirements. Typical retention:

Marketing data: until you unsubscribe or withdraw consent

Enquiries: up to 24 months

Orders/invoices: up to 5–7 years (legal requirement)

Security

We use reasonable technical and organisational measures to protect personal information (HTTPS, access controls, least-privilege practices). No system is 100% secure; notify us immediately if you suspect unauthorised use of your data or account.

Your rights (POPIA)

You have the right to:

Complain to the Information Regulator (South Africa)

Access the personal information we hold about you

Delete personal information (subject to legal retention limits)

Object to certain processing, including direct marketing

Withdraw consent at any time (this won’t affect prior lawful processing)

Correct inaccurate or incomplete information

Cookies & similar technologies

We use cookies to make the site work, remember preferences, measure performance, and personalise content. You can manage cookies via your browser settings and, where implemented, our cookie banner.

Types of cookies

If you disable certain cookies, parts of the site may not function properly.

Children’s information

Our website is not directed at children under 18. If you believe a child has provided us with personal information without consent, please contact us so we can delete it.

Changes to this policy

We may update this policy from time to time. The “Last updated” date will reflect the latest version. Material changes will be highlighted on this page or via email where appropriate.