Privacy Policy

1. Information We Collect

When you use our website or place an order, we may collect information such as:

• Your name
• Email address
• Mobile or WhatsApp number
• Delivery address
• Province and postal information
• Order details
• Delivery or collection preference
• Delivery notes or instructions
• Payment status and payment transaction references
• Communications you send to us
• Basic technical information associated with your use of the website

We only collect information reasonably required to process orders, provide customer service, operate the website and meet our legal obligations.

2. Payment Information

Online payments are processed using Yoco.

Shirli's Bakhuis does not directly store your complete debit or credit card details.

Payment information entered during checkout is processed through Yoco's payment infrastructure. We may receive information such as payment status, transaction references and other information required to confirm that your order has been paid.

Yoco's own privacy and security policies also apply when you use their payment services.

3. How We Use Your Information

We may use your personal information to:

• Process and manage your order
• Confirm payment
• Send order confirmation and status emails
• Arrange courier delivery or collection
• Contact you regarding your order
• Resolve customer service enquiries
• Keep appropriate records of transactions
• Prevent fraud or misuse
• Maintain and improve our website
• Comply with applicable laws and legal obligations

We will not use your personal information for purposes that are incompatible with the reason it was collected unless permitted or required by law.

4. Delivery Providers

If you select courier delivery, information necessary to deliver your order may be provided to the courier or delivery service handling your shipment.

This may include your:

• Name
• Delivery address
• Contact number
• Delivery instructions
• Other information reasonably required to complete delivery

We only provide delivery partners with information necessary to fulfil the delivery.

5. Service Providers

We use third-party services to operate parts of our website and order system.

These may include services used for:

• Website hosting
• Database and order storage
• Payment processing
• Transactional email
• Courier and delivery services
• Website security and infrastructure

For example, the website may use services such as Vercel, Supabase, Yoco and Brevo.

These providers may process limited personal information on our behalf where necessary to provide their services.

6. Email Communications

We may send emails relating to your order, including:

• Order confirmation
• Payment confirmation
• Delivery or collection information
• Important updates concerning an existing order

These are transactional messages necessary to provide the service you requested.

We will not sell your email address or contact information to third parties.

7. Cookies and Technical Information

Our website and the third-party services used to operate it may use cookies or similar technologies necessary for functionality, security, performance and maintaining your shopping experience.

Technical information may include information such as:

• Browser type
• Device type
• IP address
• Pages visited
• General website usage information

Where legally required, additional consent may be requested before optional tracking technologies are used.

8. How We Protect Your Information

We take reasonable technical and organisational measures to protect personal information against:

• Loss
• Misuse
• Unauthorised access
• Unauthorised disclosure
• Alteration
• Destruction

However, no internet-based service or electronic storage system can guarantee absolute security.

9. How Long We Keep Information

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected, including:

• Fulfilling orders
• Customer service
• Transaction records
• Accounting or tax requirements
• Legal or regulatory obligations
• Resolving disputes

Information that is no longer reasonably required will be deleted, destroyed or de-identified where appropriate.

10. Your Rights

Subject to applicable South African law, you may have the right to:

• Ask what personal information we hold about you
• Request access to your personal information
• Ask us to correct inaccurate information
• Ask us to delete information where we are not legally required to retain it
• Object to certain processing of your information
• Withdraw consent where processing is based on consent

Some information may need to be retained where required for transaction, accounting, security or legal purposes.

11. Protection of Personal Information Act

We aim to process personal information in accordance with the Protection of Personal Information Act 4 of 2013 ("POPIA") and other applicable South African law.

Personal information is collected for specific, legitimate purposes connected to operating Shirli's Bakhuis and fulfilling customer orders.

12. Children

The website is intended for customers who are legally capable of entering into a purchase transaction.

We do not intentionally collect personal information from children where parental or guardian consent would be legally required.

13. Sharing of Personal Information

We do not sell or rent customer personal information.

We may share information when reasonably necessary with:

• Payment processors
• Delivery providers
• Hosting and infrastructure providers
• Email providers
• Professional advisers where required
• Government, regulatory or law-enforcement authorities where legally required

14. International Service Providers

Some of the technology providers used to operate our website may process or store information outside South Africa.

Where personal information is transferred internationally, we will take reasonable steps to ensure that it is handled in accordance with applicable data-protection requirements.

15. Security Incidents

If we become aware of an unauthorised access to or compromise of personal information, we will take reasonable steps to investigate and respond to the incident and comply with applicable notification requirements.

16. Changes to This Policy

We may update this Privacy Policy occasionally to reflect changes to our website, services, technology or legal requirements.

The current version will always be published on this page together with the date it was last updated.

17. Contact Us

If you have questions about this Privacy Policy, want to exercise your privacy rights or have a concern about how your personal information has been handled, please contact Shirli's Bakhuis using the contact details provided on our website.

You may also have the right to lodge a complaint with the Information Regulator of South Africa if you believe that your personal information has been processed unlawfully.