PRIVACY POLICY

Last updated: 30 October 2026

1. Introduction

Rosedrick & Co operates this website and online store, including all related information, content, features, tools, products and services, to provide customers with a convenient online shopping experience.

Our store is powered by Shopify, which enables us to offer our products and services.

This Privacy Policy explains how Rosedrick & Co collects, uses, stores, protects and discloses personal information when you visit our website, browse our products, create an account, make a purchase, complete a transaction or communicate with us.

We are committed to respecting your privacy and protecting your personal information in accordance with applicable South African legislation, including the Protection of Personal Information Act 4 of 2013 (POPIA), the Consumer Protection Act 68 of 2008 (CPA), and the Electronic Communications and Transactions Act 25 of 2002 (ECTA), where applicable.

This Privacy Policy should be read together with our Terms and Conditions, Shipping and Delivery Policy, Returns and Refunds Policy and other applicable store policies.

Where there is a conflict between this Privacy Policy and our other policies concerning the processing of personal information, applicable privacy legislation will prevail.

By using our website, you acknowledge that you have had the opportunity to read this Privacy Policy. Where the law requires your consent to particular processing activities, we will obtain that consent as required. Visiting our website does not automatically constitute consent to every form of data processing or marketing.

2. Personal Information We Collect

For purposes of this policy, personal information means information relating to an identifiable, living natural person and, where applicable, an identifiable existing juristic person, as defined under South African law.

The information we collect depends on how you interact with our website and services.

2.1 Contact and Identification Information

We may collect:

• Your name and surname.

• Email address.

• Telephone or mobile number.

• Billing address.

• Delivery address.

• Account details and relevant identification information where reasonably necessary.

• Other contact information you voluntarily provide.

2.2 Financial and Payment Information

When you make a purchase, payment-related information may include:

• Payment method.

• Transaction reference.

• Payment confirmation and status.

• Order value and transaction details.

• Relevant information supplied by payment service providers.

Payments may be processed through Shopify-supported payment gateways, banks and other third-party payment providers.

Where payment details are processed directly by a payment provider, that provider's privacy and security practices may also apply.

We do not intend to store complete payment card details where these are handled by our payment providers.

2.3 Account Information

If you create a customer account, we may collect your username, authentication information, account preferences, saved addresses, order history and other information associated with your account.

You are responsible for keeping your account credentials confidential and notifying us if you suspect unauthorised access.

2.4 Purchase and Transaction Information

We may collect information relating to:

• Products you view or purchase.

• Items added to your shopping cart or wishlist.

• Previous orders and transactions.

• Order confirmations and fulfilment.

• Delivery instructions and tracking information.

• Returns, refunds, exchanges and cancellations.

• Customer reviews and feedback.

• Customer service enquiries relating to purchases.

2.5 Communications

When you contact us through email, telephone, website forms, WhatsApp, social media or other communication channels, we may collect the information you provide.

This may include product enquiries, complaints, order-related communications, delivery arrangements and requests for assistance.

2.6 Device and Website Usage Information

When you visit our website, certain technical information may be collected automatically, subject to applicable law and your cookie preferences.

This may include:

• IP address.

• Browser type and version.

• Device type and operating system.

• Website pages visited.

• Referring websites and advertising sources.

• Approximate location derived from technical information.

• Website interactions, navigation and usage patterns.

• Information about website performance.

We use this information to operate, protect and improve our website and shopping experience.

3. How We Collect Personal Information

We may collect personal information through the following sources:

Directly from you: When you place an order, create an account, complete a form, contact us, subscribe to communications or otherwise provide information.

Automatically through our website: Through website functionality, cookies and similar technologies, subject to applicable legal requirements and your preferences.

Through Shopify and service providers: When information is processed to provide hosting, payment processing, analytics, customer support and other e-commerce services.

Through third-party platforms: When you interact with our advertisements, social media accounts or other platforms connected to our business.

From business partners: Where relevant information is provided by payment providers, delivery companies or other service providers in connection with a transaction or service.

We will take reasonable steps to ensure that the personal information we collect is relevant to the purpose for which it is required and is processed lawfully.

4. How We Use Personal Information

We may use personal information for the following purposes.

4.1 Processing and Fulfilling Orders

We use relevant information to:

• Process and confirm purchases.

• Verify and process payments.

• Prepare and fulfil orders.

• Arrange deliveries and provide delivery updates.

• Manage returns, refunds, exchanges and cancellations.

• Respond to order-related enquiries.

• Provide after-sales assistance and applicable warranty support.

4.2 Managing Customer Accounts

We may use your information to create and maintain accounts, authenticate users, remember preferences and provide access to customer account features.

4.3 Customer Service

We use personal information to respond to enquiries, investigate complaints, resolve transaction issues and maintain our relationship with customers.

4.4 Improving Our Website and Services

We may analyse website activity, product interest, customer feedback and purchasing patterns to improve our website, products, services and overall customer experience.

Where appropriate, information may be aggregated or de-identified for statistical analysis.

4.5 Marketing and Advertising

Subject to applicable law, we may use relevant information to:

• Send promotional emails, SMS messages or other marketing communications.

• Inform customers about products, offers and promotions.

• Measure the effectiveness of marketing campaigns.

• Understand customer interest in our products.

• Improve advertising and product recommendations.

• Display relevant advertisements where permitted.

We will comply with applicable consent and objection requirements for direct marketing.

You may opt out of marketing communications at any time using the available unsubscribe mechanism or by contacting us.

4.6 Security and Fraud Prevention

We may process relevant information to verify transactions, identify suspicious activity, prevent fraud, protect customer accounts and safeguard our website and business.

4.7 Legal and Regulatory Compliance

We may collect, use or retain information where necessary to comply with applicable laws, tax and accounting obligations, lawful requests from competent authorities, or other legal requirements.

We may also use relevant information to establish, exercise or defend legal claims.

5. Lawful Processing of Personal Information

Rosedrick & Co will process personal information in accordance with POPIA and applicable law.

Depending on the circumstances, processing may be necessary to:

• Fulfil a contract or process a transaction.

• Comply with a legal obligation.

• Pursue a legitimate interest permitted by law.

• Protect legitimate interests where legally justified.

• Carry out another lawful purpose recognised under applicable legislation.

Where consent is required, we will request it in accordance with applicable law. You may withdraw consent where processing is based on consent, although this will not affect the lawfulness of processing undertaken before withdrawal or processing that may continue on another lawful basis.

We will take reasonable steps to ensure that personal information is accurate, relevant, not excessive and processed for a lawful, specifically defined purpose.

6. Cookies and Similar Technologies

Our website may use cookies, pixels, tags and similar technologies to support website functionality and, where enabled, analytics and advertising.

These technologies may be used to:

• Maintain shopping cart functionality.

• Remember customer preferences.

• Support account and checkout functions.

• Understand website traffic and performance.

• Measure advertising effectiveness.

• Support personalised advertising and product recommendations where applicable.

Some cookies may be necessary for the website to operate. Others may be used for optional analytics or advertising purposes.

Where required by law, we will obtain appropriate consent before using non-essential cookies or similar technologies.

You may manage cookies through available website settings and your browser settings. Disabling certain cookies may affect website functionality.

Shopify and other service providers may also use cookies or similar technologies when providing their services. 

Favourites, recently viewed products and recommendations

When you tap the heart to add a product to your Favourites, or view a product on our website, a list of those products is saved in your browser's local storage on your device. We use it to show your Favourites, your recently viewed products and "Picked for you" suggestions. Favourites are kept for up to 90 days and then removed automatically. To show suggestions, your browser requests related products from our store based on the products you have viewed or saved.

This list stays on your device and is not linked to your customer account. If you choose to join our email list from your Favourites panel, we will handle your email address as described in sections 4.5 and 13. You can remove items from your Favourites at any time, or clear all of this information by clearing your browser's site data for our website.

7. How We Share Personal Information

We may disclose personal information to third parties where necessary for the purposes described in this Privacy Policy, subject to applicable law and appropriate safeguards.

7.1 Shopify

Our online store is hosted by Shopify, which processes information associated with your use of our store to provide and support its e-commerce platform and related services.

You can read Shopify's consumer privacy information here:

https://www.shopify.com/legal/privacy/app-users

7.2 Payment Providers

We may share relevant transaction information with payment gateways, banks and payment service providers to process payments, verify transactions and prevent fraud.

7.3 Delivery and Fulfilment Providers

We may share your name, contact details, delivery address and relevant order information with couriers, transport companies and delivery partners to fulfil your purchases.

7.4 Technology and Business Service Providers

We may share relevant information with providers supporting website hosting, security, analytics, customer service, communications, accounting and business operations.

These providers may process information on our behalf or in accordance with their own legal responsibilities.

7.5 Marketing and Advertising Providers

Where applicable and legally permitted, we may share or permit the collection of certain website activity information and online identifiers through analytics and advertising technologies.

This may help us measure advertising performance, understand customer interest and display relevant promotions.

We will apply appropriate privacy and consent controls where required by law.

7.6 Professional Advisers and Authorities

We may disclose information to legal advisers, auditors, insurers, regulators, law enforcement agencies or other competent authorities where legally required or reasonably necessary to protect our rights, customers or business.

7.7 Business Transactions

If our business undergoes a merger, restructuring, sale or other business transaction, relevant personal information may be disclosed or transferred as part of that transaction, subject to applicable law.

We do not sell customer personal information as a standalone commercial product.

8. Shopify and Third-Party Processing

Shopify provides the platform on which our online store operates.

Information submitted through our website may be transmitted to Shopify and other service providers, including providers that may operate outside South Africa.

Shopify may also process certain information under its own privacy responsibilities when providing or improving its services.

For further information about Shopify's privacy practices, consult:

https://www.shopify.com/legal/privacy/app-users

Where a third party independently determines how it processes personal information, its own privacy policy and legal responsibilities may apply.

9. International Transfers of Personal Information

Some service providers may store or process personal information outside South Africa.

Where personal information is transferred outside the Republic, we will take reasonable steps to ensure that the transfer complies with section 72 of POPIA and any other applicable legal requirements.

Depending on the circumstances, this may require an appropriate level of protection under the recipient country's laws, binding agreements, consent where legally sufficient, contractual necessity or another permitted basis under section 72.

We will take reasonable steps to ensure that relevant service providers handle personal information appropriately and that applicable safeguards are maintained.

10. Data Security

We take reasonable technical and organisational measures to protect personal information against loss, unauthorised access, misuse, alteration, disclosure or destruction.

These measures may include access controls, appropriate account permissions, secure service providers and procedures for handling personal information.

However, no electronic storage system or internet transmission can be guaranteed to be completely secure.

You should avoid sending passwords, full payment card details or other sensitive information through unsecured communication channels.

If a security compromise involving personal information occurs, we will respond in accordance with applicable legal requirements, including notification obligations under POPIA where applicable.

11. Retention of Personal Information

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected or as required or permitted by law.

Retention periods may depend on:

• Whether you maintain an account with us.

• Whether an order or delivery remains outstanding.

• Applicable tax and accounting requirements.

• Warranty, returns and after-sales obligations.

• The resolution of complaints or disputes.

• Fraud prevention and security requirements.

• Legal proceedings and regulatory obligations.

• Applicable marketing preferences and consent requirements.

When personal information is no longer required, we will take reasonable steps to delete, destroy or de-identify it, subject to legal retention requirements and legitimate business needs.

12. Your Rights Under POPIA

Subject to applicable law and any lawful limitations, you may have the right to:

Request access: Ask whether we hold personal information about you and request access to that information.

Request correction: Ask us to correct or update inaccurate, incomplete, misleading or outdated personal information.

Request deletion or destruction: Request the deletion or destruction of personal information where the applicable legal requirements are met.

Object to processing: Object to certain processing of your personal information on reasonable grounds relating to your particular situation, where permitted by POPIA.

Object to direct marketing: Object to the processing of your personal information for direct marketing and request that marketing communications stop.

Withdraw consent: Withdraw consent where processing is based on your consent.

Lodge a complaint: Submit a complaint to the Information Regulator of South Africa if you believe your personal information has been processed unlawfully or your privacy rights have been infringed.

These rights are subject to the conditions and limitations prescribed by law. For example, we may be required to retain certain transaction records even after receiving a deletion request.

To exercise your rights, contact us using the details in the Contact section of this policy.

We may request information to verify your identity before responding to a request.

We will handle your request within the applicable legal timeframes.

13. Marketing Communications and Opting Out

We may send marketing communications where permitted by applicable law.

For electronic direct marketing, including email and SMS, we will comply with section 69 of POPIA.

Where consent is required, we will obtain it before sending unsolicited electronic direct marketing.

Where the law permits marketing to existing customers without obtaining fresh consent, we will comply with the applicable requirements, including restrictions on the nature of the marketing and the customer's opportunity to object.

Marketing communications will identify the sender and provide appropriate contact details through which you can request that further communications cease.

You may opt out of marketing emails using the unsubscribe mechanism provided in the message or contact us at:

finad.govaro@gmail.com

For marketing through other channels, you may use the available opt-out mechanism or contact us directly.

We will take reasonable steps to implement your request within the applicable legal timeframe.

Opting out of marketing will not prevent us from sending necessary non-promotional communications relating to your orders, payments, deliveries, account security or other legitimate service matters.

14. Children's Personal Information

Our website is intended primarily for adult purchasers.

Where personal information relating to a child is processed, we will comply with the applicable requirements of POPIA, including any requirements relating to consent from a competent person.

If you believe that a child's personal information has been provided to us unlawfully, please contact us so that we can investigate and take appropriate action.

15. Third-Party Websites and Services

Our website may contain links to websites, social media platforms, payment services or other online services operated by third parties.

These third parties may have their own privacy policies, terms and security practices.

We are not responsible for the privacy practices of third-party websites that we do not operate or control.

We encourage you to review the applicable privacy policy before providing personal information to a third party.

The inclusion of a third-party link does not necessarily constitute an endorsement of that third party.

16. Automated Processing and Personalisation

We may use website technologies, analytics tools and automated systems to recommend products, measure advertising performance, identify suspicious transactions or improve the customer experience.

Where automated processing is subject to specific requirements under POPIA, we will comply with those requirements.

You may contact us with questions about our processing of your personal information or to exercise any rights available to you under applicable law.

17. Complaints and the Information Regulator

If you have concerns about how we handle your personal information, please contact us first so that we can investigate and respond.

You also have the right to lodge a complaint with the Information Regulator of South Africa, subject to the applicable legal process.

Information Regulator of South Africa

Official website: https://inforegulator.org.za/

The Information Regulator's website provides information about its functions, contact channels and complaint procedures.

18. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our business practices, website functionality, service providers or applicable law.

The revised policy will be published on our website, together with an updated revision date.

Where required by law, we will provide additional notice or obtain consent for material changes to our processing practices.

We encourage you to review this page periodically.

19. Contact Us

If you have questions about this Privacy Policy, wish to exercise your rights under POPIA or have concerns about the handling of your personal information, please contact us.

Business name: Rosedrick & Co
Website: https://rosedrickco.co.za
Email: finad.govaro@gmail.com
Additional contact information: https://rosedrickco.co.za/policies/contact-information
Physical business address: [Insert your business address]
Registered legal entity: [Insert the full registered legal name, if different from Rosedrick & Co]

Please provide sufficient information for us to understand your request. We may need to verify your identity before disclosing, correcting or deleting personal information.

We will handle your enquiry in accordance with applicable South African law.