Privacy policy

Privacy Policy

 

Garden Decor is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information in compliance with the Protection of Personal Information Act (POPIA) in South Africa and the UK General Data Protection Regulation (UK GDPR) / Data Protection Act 2018 in the United Kingdom.

1. Information We Collect

We collect personal information that you provide directly to us when making a purchase, creating an account, or contacting customer support:

  • Contact & Identification Data: Full name, billing address, shipping address, telephone number, email address.

  • Transaction Data: Details of products purchased, order values, and payment status.

  • Payment Information: Payment card transactions are processed securely through encrypted third-party payment gateways (PCI-DSS compliant). We do not store or process raw credit card numbers on our servers.

  • Technical Data: IP address, browser type, operating system, and browsing activity via essential and analytical cookies.

2. Legal Basis & Purpose of Processing

We process your personal information for the following lawful purposes:

  1. Order Fulfillment: To process transactions, arrange delivery, and provide customer support (Contractual necessity).

  2. Legal Compliance: To maintain tax, financial, and accounting records in South Africa and the UK (Legal obligation).

  3. Marketing Communications: To send promotional updates, newsletters, or special offers (Consent-based; you may opt out at any time).

  4. Site Improvement: To optimize user experience and analyze website traffic performance (Legitimate interest).

3. Data Sharing & Third-Party Processors

We never sell, rent, or trade your personal information. We only share necessary data with trusted service providers to operate our business:

  • Courier and logistics partners for shipping orders.

  • PCI-DSS compliant payment gateways (Shopify Payments, Stripe, etc.).

  • Google Merchant Center and analytics platforms for shopping integration and traffic measurement.

All third-party providers are bound by strict confidentiality agreements and must process data in compliance with POPIA and UK GDPR requirements.

4. International Data Transfers

As our operations are based in South Africa, data provided by UK customers will be transferred internationally to process and ship orders. We ensure appropriate safeguards are in place to keep your personal data secure during international transfers.

5. Data Retention

We retain personal data only as long as necessary to fulfill the purposes for which it was collected, including legal, tax, or reporting requirements (typically up to 5–7 years for accounting records).

6. Your Legal Rights

South Africa Residents (POPIA)

You have the right to:

  • Request details of the personal information we hold about you.

  • Request correction or deletion of outdated or inaccurate information.

  • Object to the processing of personal data for direct marketing.

United Kingdom Residents (UK GDPR)

You have the right to:

  • Access, correct, or request the erasure of your personal data ("right to be forgotten").

  • Restrict or object to data processing.

  • Request data portability.

  • Withdraw consent at any time without affecting prior lawful processing.

To exercise any of these rights, please contact our Privacy Coordinator at +27 31 768 1470.

7. Contact Details

  • Business Name: Garden Decor

  • Physical Address: 450 Kassier Rd, Summerveld, Outer West Durban, South Africa

  • Phone: +27 31 768 1470