POPIA Privacy Policy

1. Information Officer

In accordance with POPIA, we have designated an Information Officer responsible for ensuring compliance with the Act:

2. Personal Information We Collect

We collect personal information as defined in POPIA, including but not limited to:

“Personal Information” means information relating to an identifiable, living, natural person.

• Name and contact details (email, phone, address)
• Identity number or passport number (for verification)
• Age and date of birth (for age verification)
• Guardian information (for users under 18)
• Payment and billing information
• Order history and preferences
• Website usage data and cookies

3. Purpose of Processing

We process your personal information for the following lawful purposes:

• To provide our printing services and fulfill orders
• To verify your age and obtain guardian consent where required
• To process payments and manage billing
• To provide customer support and respond to inquiries
• To improve our services and user experience
• To comply with legal and regulatory obligations
• To prevent fraud and ensure security

4. Age Verification and Guardian Consent

In compliance with POPIA requirements for the protection of children:

• Users 18 and older: Full access to all services
• Users 13-17: Require guardian consent before processing personal information
• Users under 13: Cannot use our services

We will send guardian consent requests via email and require explicit approval before processing any personal information of users under 18.

5. Information Sharing and Third Parties

We may share your personal information with third parties only in the following circumstances:

• With your explicit consent
• To payment processors for transaction processing
• To courier services for order delivery
• To comply with legal obligations or court orders
• To protect our rights and prevent fraud
• With service providers who assist in our operations (under strict confidentiality agreements)

6. Your POPIA Rights

Under POPIA, you have the following rights regarding your personal information:

• Right to be informed: To know what personal information we collect and how we use it
• Right of access: To request a copy of your personal information
• Right to rectification: To correct inaccurate or incomplete information
• Right to erasure: To request deletion of your personal information
• Right to restrict processing: To limit how we use your information
• Right to data portability: To receive your data in a structured format
• Right to object: To object to processing of your personal information
• Right to withdraw consent: To withdraw consent at any time

7. Data Security and Retention

We implement appropriate technical and organizational measures to protect your personal information:

• Encryption of data in transit and at rest
• Regular security assessments and updates
• Access controls and authentication measures
• Staff training on data protection
• Incident response procedures

We retain personal information only for as long as necessary to fulfill the purposes for which it was collected, or as required by law. Typically, this is:

• Account information: 7 years after account closure
• Order information: 5 years after order completion
• Marketing preferences: Until consent is withdrawn
• Age verification: Indefinitely (for compliance purposes)

8. Data Breach Notification

In the event of a data breach that poses a risk to your rights and freedoms, we will notify you and the Information Regulator as soon as reasonably possible, in accordance with POPIA requirements.

9. Contact Information

For any questions about this POPIA Privacy Policy or to exercise your rights, please contact our Information Officer:

10. Updates to This Policy

We may update this POPIA Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by posting the updated policy on our website and updating the “Last updated” date.