Privacy policy
Draft policy. Last updated: [date].
Business details must be completed before orders are accepted.
Responsible party
[registered company name], registration number [registration number], at [physical address], is responsible for personal information processed by Gleam Garage. Our Information Officer can be contacted at [information officer email].
What this site stores now
Your cart and chosen colour theme are stored in your browser on your device. Products and checkout are served through Shopify, which processes your order and payment details. You can clear this information through your browser settings. If you contact us by email, we receive the information you choose to send.
Fonts are loaded from Google Fonts. Your browser contacts that service to retrieve font files, which may expose technical information such as your IP address to that provider.
Information for future orders
Orders are processed through Shopify. To process an order, we may receive your name, contact details, delivery address and order details. We will only collect information needed for a stated lawful purpose and process it in accordance with the Protection of Personal Information Act 4 of 2013 (POPIA).
Information may be shared with service providers needed to fulfil an order, such as Shopify and couriers. These services may involve international transfers, which are protected with appropriate safeguards. We will not sell personal information. Marketing communications require an appropriate lawful basis and an easy way to opt out.
Security and retention
We will take reasonable organisational and technical steps to protect personal information. Information will be retained only as long as needed for its stated purpose or to meet legal record-keeping obligations. Contact [support email] for questions about retention.
Your rights
Subject to applicable law, you may request access to your information, ask for corrections or deletion, object to certain processing, or withdraw consent where consent is the basis for processing. Contact [information officer email]. We may need to verify your identity before acting on a request.
You may lodge a complaint with the Information Regulator of South Africa. Nothing in this policy limits your rights under POPIA.