Legal
Privacy Policy
Last updated: April 2026
1. Information We Collect
We collect your name, email address, phone number, shipping address, and payment information (processed securely via Stripe — we never store raw card data). We also collect usage data via server logs.
2. How We Use Your Information
Your information is used to process and fulfil your orders, send order status updates, and improve our service. We do not sell your personal information to third parties.
3. Data Storage & Security
All personal data is stored on encrypted AWS infrastructure located in the Africa (Cape Town) region. We use industry-standard TLS encryption for all data in transit and AES-256 at rest.
4. Third-Party Services
We use Stripe for payment processing and AWS for hosting. Both are subject to their own privacy policies. Email Communications are handled via SMTP; we do not use third-party marketing platforms.
5. Your Rights (POPIA)
Under the Protection of Personal Information Act (POPIA), you have the right to access, correct, or delete your personal information. To exercise these rights, email us at privacy@strands.co.za.
6. Cookies
We use only essential cookies required for authentication and cart functionality. We do not use tracking or advertising cookies.
7. Retention
We retain your personal data for as long as your account is active or as required to fulfil outstanding orders. You may request deletion at any time.
8. Contact
For any privacy-related queries, contact our Information Officer at privacy@strands.co.za.