POPIA Policy

1. Purpose

This policy explains Gifts Galore’s approach to protecting personal information under the Protection of Personal Information Act, 2013 (POPIA).

2. POPIA Principles

We aim to process personal information lawfully and reasonably, for a specific purpose, with appropriate quality, openness, security safeguards and respect for data-subject participation rights.

3. Personal Information

Information may include customer identity and contact details, addresses, order history, correspondence, transaction information, customisation files and technical website information.

4. Collection & Purpose

Information is collected directly from customers where practical and used for orders, fulfilment, customer service, payments, delivery, legal compliance, website security and legitimate business administration.

5. Operators & Third Parties

Service providers acting as operators may process personal information for hosting, payment, delivery, email, security, analytics or other necessary services. Gifts Galore takes reasonable steps to use appropriate providers and safeguards.

6. Security Incidents

Reasonable safeguards are maintained against loss, unlawful access or unauthorised processing. Where a security compromise triggers legal notification duties, affected parties and the Information Regulator will be notified as required by law.

7. Data Subject Requests

Requests for access, correction, objection or deletion may be submitted through the contact details published on the website. Identity verification may be required before a request is actioned.

8. Information Regulator

Data subjects have the right to lodge complaints with the Information Regulator of South Africa where appropriate.