Privacy Policy

Birdie Box ("we", "us", "our") is committed to protecting your personal information in accordance with the Protection of Personal Information Act 4 of 2013 ("POPIA"). This Privacy Policy explains what personal information we collect, why we collect it, how we use and protect it, and what rights you have.

Responsible Party: Johannes Hendrik Visser, trading as Birdie Box (sole proprietor) Trading Address: 13 Dennesig Street, Stellenbosch, 7600, Western Cape, South Africa Information Officer: Johannes Hendrik Visser Contact:support@birdiebox.co.za

1. Personal Information We Collect

Depending on how you interact with us, we may collect:

Contact details: name, delivery and billing address, phone number, email address. Order and payment information: items purchased, order history, and payment confirmation (we do not store your full card number — this is handled by our payment provider). Account information: if you create an account, your login details and saved preferences. Communications: messages you send us via the contact form, email, or phone. Technical information: IP address, browser type, device information, and site usage data, collected automatically via cookies and similar technologies.

2. Why We Collect Your Information (Lawful Basis)

We process your personal information only where we have a lawful basis to do so under POPIA, including:

To perform our contract with you — processing and delivering your order, handling returns/refunds, and providing customer support. With your consent — for example, sending marketing emails, which you can opt out of at any time. For our legitimate business interests — such as fraud prevention, improving the Site, and maintaining business records — balanced against your right to privacy. To comply with a legal obligation — such as tax, accounting, or consumer protection requirements.

3. How We Use Your Information

We use your personal information to:

Process, fulfil, and deliver your orders; Communicate with you about your order, account, or enquiries; Process returns, refunds, and exchanges; Send marketing communications, where you have opted in (you may unsubscribe at any time); Detect and prevent fraud and protect the security of the Site; Comply with legal, tax, and regulatory obligations. We do not sell your personal information to third parties.

4. Who We Share Your Information With

We only share your personal information where necessary, including with:

Our payment processor(s), to securely process your payment; Our courier/delivery partners, to deliver your order; Shopify, our e-commerce platform provider, which hosts the Site and processes data on our behalf; Service providers who support our operations (e.g. email marketing, customer support tools), under confidentiality obligations; Law enforcement or regulators, where required by law. Any third party we share your information with is required to protect it in line with POPIA and use it only for the purpose we've authorised.

5. Cookies

Our Site uses cookies and similar technologies to keep your cart working, remember your preferences, and understand how visitors use the Site. You can control cookies through your browser settings; disabling some cookies may affect how the Site functions.

6. Data Retention

We retain your personal information only for as long as necessary to fulfil the purposes described in this Policy, including to meet our legal, accounting, or reporting obligations (for example, financial records are typically retained for 5 years as required by South African tax law).

7. Security

We take reasonable technical and organisational measures to protect your personal information against loss, unauthorised access, alteration, or disclosure. No online system is completely secure, and we encourage you to avoid sharing sensitive information through unsecured channels.

8. Your Rights Under POPIA

You have the right to:

Access the personal information we hold about you; Request correction of inaccurate or outdated information; Request deletion of your personal information, subject to our legal retention obligations; Object to the processing of your information for direct marketing purposes at any time; Withdraw consent where processing is based on consent (e.g. marketing emails); Lodge a complaint with us, or with South Africa's Information Regulator, if you believe your information has been mishandled. To exercise any of these rights, contact us using the details in Section 10.

9. Information Regulator (South Africa)

If you are unsatisfied with how we've handled your personal information, you have the right to lodge a complaint with the Information Regulator:

Information Regulator (South Africa) Website: www.inforegulator.org.za Email: enquiries@inforegulator.org.za / complaints.IR@justice.gov.za

10. Contact Us

For any questions about this Privacy Policy or to exercise your rights, contact:

Birdie Box

Information Officer: Johannes Hendrik Visser

Email: support@birdiebox.co.za

Address: 13 Dennesig Street, Stellenbosch, 7600, Western Cape, South Africa

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The updated version will be posted here with a revised "Last updated" date.