Privacy Policy for Winterreën (Pty) Ltd

Effective Date: 26 November 2024

Winterreën (Pty) Ltd (“Winterreën Studio & Shop”, “we”, “our”, “us”) respects your privacy and is committed to protecting your personal information in accordance with the Protection of Personal Information Act, 4 of 2013 (POPIA).

This Privacy Policy explains how we collect, use, store, and safeguard your information when you visit our website, make a purchase, or interact with us.

1. Information We Collect

General Website Visitors
We do not collect personal data from individuals who simply browse our website. Non-personal data, such as cookies and website analytics, may be collected to improve site functionality (see Section 2).

Email Subscribers
When you subscribe to our newsletter, we collect:

• Name
• Email address
• Birthday (optional, for personalised content)

Customers
When you place an order, we collect:

• Name
• Email address
• Cellphone number
• Physical address

Non-Personal Data and Cookies

We collect non-personal data such as:

• Cookies to improve website performance and functionality
• Order and site analytics to monitor trends

You can manage or disable cookies in your browser settings, but this may affect some features of the website.

3. Purpose and Legal Basis for Processing

We collect personal data to:

• Process and deliver orders
• Provide customer support
• Communicate important updates
• Send marketing material where consent has been given

The lawful bases for processing include:

• Consent (for marketing communications)
• Performance of a contract (to fulfill your purchase)
• Legal obligation (e.g., tax compliance)
• Legitimate interest (to maintain business operations and prevent fraud)

4. Sharing of Information

We share your information only with trusted third-party providers that enable our business to operate effectively:

• Yoco – Payment gateway for processing transactions
• Payflex – Payment provider for buy-now-pay-later options

Each third party processes information in accordance with its own privacy policy and applicable laws. We do not sell or rent your personal information to anyone.

5. Data Retention

We retain your information only as long as necessary:

• Order data: retained indefinitely for customer account history unless deleted upon request
• Personal data: retained for up to seven (7) years to comply with tax and legal requirements

You may contact us to request earlier deletion, where legally permissible.

6. Your Rights

Under POPIA, you have the right to:

• Access your personal data
• Request correction of inaccurate data
• Request deletion where applicable
• Withdraw consent for marketing communications

To exercise any of these rights, please contact us at info@winterreen.co.za
.

7. Security Measures

We implement reasonable technical and organisational measures to safeguard your information, including:

• SSL encryption
• Two-factor authentication (2FA) for admin accounts
• Regular software and security updates
• Limited access to authorised personnel only

8. International Access

Our website is primarily intended for users in South Africa. We do not ship products internationally. However, if our website is accessed from outside South Africa, your data will still be processed in accordance with this policy and POPIA.

9. Children’s Privacy

Our website and services are not directed at individuals under 18. We do not knowingly collect personal data from minors. Parents or guardians may contact us to request removal of any such data.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Any material changes will be posted on this page with an updated “Effective Date.”

11. Contact Information

For privacy-related enquiries, please contact:

Information Officer
Winterreën (Pty) Ltd
Email: info@winterreen.co.za