Privacy policy

What we collect

When you order we collect your name, email address, phone number and delivery address, the items you bought, and the photo you upload for printing. Our payment provider handles your card details; we receive only a confirmation that payment succeeded and the last few digits of the card.

If you create an account we store your email address and a securely hashed password. We also collect basic usage information, such as pages visited and device type, to keep the site working and to see which products people look at.

Why we need it

We use your details to produce your order, to deliver it, to keep you updated on it, to handle refunds and queries, and to keep records that tax and consumer law require us to keep. We only send marketing messages if you ask for them, and every one has an unsubscribe option.

Your uploaded photos

Your photo is used to produce your order and nothing else. It is stored with the order so that we can reprint it if something goes wrong in production or delivery. We do not sell it, publish it, or use it in advertising without your written permission. Ask us and we will delete it once your order has been delivered and the return window has passed.

Who we share it with

We share only what is needed with the courier that delivers your parcel, the payment provider that processes your payment, and the hosting and email providers that run this store. Some of these providers process data outside South Africa; where they do, they are bound by contracts and protections that POPIA recognises as comparable. We do not sell personal information.

We may disclose information if a law, court order or lawful investigation requires it.

How long we keep it

Order and invoice records are kept for five years, as tax law requires. Account details are kept until you ask us to close the account. Uploaded photos are kept with the order and can be deleted on request once the order is settled.

How we protect it

The site runs over an encrypted connection. Access to order data is limited to the people who fulfil orders, and passwords are stored hashed. No system is perfect, but if a breach affects your information we will notify you and the Information Regulator as POPIA requires.

Your rights

You may ask us what information we hold about you, ask us to correct or delete it, object to us using it, withdraw consent to marketing, and ask for your data in a portable form. Email us using the address on the contact page and we will respond within a reasonable time. We will need to confirm who you are before we release anything.

If you are not satisfied with how we handled your request, you may complain to the Information Regulator of South Africa.

Cookies

We use cookies to keep your basket and login working, and to measure how the store is used. You can clear or block cookies in your browser, but the basket and checkout will not work properly without the essential ones.

Children

We do not knowingly collect information from anyone under 18 without the consent of a parent or guardian. If a child has given us details, contact us and we will remove them.