Privacy policy

About this policy

This policy explains what personal information Patronus collects when you visit patronus.co.za or buy from us, why we collect it, who we share it with and what your rights are. We follow the Protection of Personal Information Act 4 of 2013 (POPIA).

We only collect what we need to run the shop and look after you. We don't sell your information.

Who is responsible for your information

The responsible party is Patronus, to confirm: full legal name of the business or owner, to confirm: physical address.

You can reach us at patronasza@gmail.com.

What we collect

When you place an order

Our checkout runs on Shopify. When you order, we collect your name, email address, phone number, delivery address, billing address and the details of what you bought. Payfast handles your payment. We don't see or store your full card or bank details.

When you sign up for emails

If you give us your email address to join our newsletter or to be told when something is back in stock, we keep that address and what you asked to hear about.

When you contact us

If you email or WhatsApp us, we keep your message, your contact details and our reply.

When you browse the site

• Google Analytics. We use Google Analytics 4 to understand how people use the site, for example which pages are visited, roughly where visitors are, and what device and browser they use. It uses cookies to do this. We don't use it to identify you personally.
• Your bag. We store a cart ID and the contents of your bag in your browser's local storage, so your bag is still there when you come back. This stays on your device. You can clear it at any time by clearing your browser's site data.
• Checkout. Shopify sets its own cookies during checkout so that it works securely.

Why we use it

• To process, pack and deliver your order, and to send you order and tracking emails. We need this to fulfil our agreement with you.
• To handle returns, exchanges, refunds and guarantee claims.
• To answer your questions.
• To send you our newsletter or back-in-stock emails, only if you've asked for them. You can unsubscribe at any time using the link in every email.
• To understand how the site is used so we can improve it.
• To keep records that tax and accounting law requires, and to prevent fraud.

Who we share it with

We share your information only with the companies that help us run the shop, and only what they need:

• Shopify hosts our checkout and order records. Shopify acts as our operator, which means it processes your information on our behalf and under our instructions.
• Payfast processes your payment.
• Our courier receives your name, phone number and delivery address so they can deliver your order. to confirm: courier and/or PUDO provider name(s)
• Google provides Google Analytics.
• Our email provider sends newsletters and back-in-stock emails. to confirm: email marketing provider (for example Shopify Email)

We may also share information if the law requires it, for example with SARS or a court.

Information sent outside South Africa

Shopify and Google store information on servers outside South Africa. When we use them, your information is transferred across borders. We only use providers that are bound by laws, contracts or binding rules that protect personal information to a standard similar to POPIA, as section 72 of POPIA requires.

How long we keep it

• Order and payment records: for as long as South African tax and accounting law requires. to confirm: retention period (commonly 5 years for tax records)
• Newsletter and back-in-stock sign-ups: until you unsubscribe.
• Messages to us: to confirm: how long customer messages are kept
• Google Analytics data: to confirm: GA4 data retention setting (2 or 14 months)

When we no longer need information, we delete it or make sure it can no longer identify you.

Keeping it safe

We use trusted providers with strong security, keep access to your information to the people who need it, and protect our accounts with strong passwords. to confirm: two-step sign-in is on for the Shopify, Google and email accounts If we ever have a security breach that affects your information, we'll tell you and the Information Regulator as POPIA requires.

Your rights

Under POPIA, you have the right to:

• ask whether we hold information about you, and get a copy of it
• ask us to correct information that is wrong or out of date
• ask us to delete information we no longer need or are not allowed to keep
• object to us using your information, on reasonable grounds
• withdraw your consent to marketing emails at any time
• complain to the Information Regulator

To use any of these rights, email us at patronasza@gmail.com. We may need to confirm who you are first. We won't charge you to correct or delete your information.

If you're unhappy with how we've handled your information, please tell us first so we can put it right. You can also complain to the Information Regulator of South Africa at inforegulator.org.za.

Children

Our shop is for adults. We don't knowingly collect information from anyone under 18. If you're under 18, please ask a parent or guardian to order for you.

Our Information Officer

Our Information Officer is responsible for making sure we follow POPIA.

• Name: to confirm: Information Officer's name (usually the owner)
• Email: patronasza@gmail.com
• Postal or physical address: to confirm: address

Changes to this policy

We may update this policy from time to time. The date at the top shows when it last changed.

See also our terms of service.