Privacy policy
Last Updated : 2025/12/31
1. Introduction
At Unshaken, based in South Africa, we are committed to protecting your privacy and your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website unshakenclothing.co.za or make a purchase from us. We process your personal information in accordance with the Protection of Personal Information Act No. 4 of 2013 (POPIA) and its regulations.
2. The Personal Information We Collect
We collect information that identifies you or can be linked to you. The table below summarizes what we collect and why, as required by POPIA's "Purpose Specification" condition.
| Information Category | Examples of Data | Primary Purpose of Collection (POPIA Purpose Specification) |
|---|---|---|
| Order & Account Information | Name, surname, email, physical/delivery address, phone number. | To process and fulfil your purchase, manage your account, and communicate with you about your order. |
| Payment Information | Credit card details, PayPal email, or other payment data. Note: We use secure third-party processors; we do not store full card details. | To complete the financial transaction for your purchase. |
| Technical Device Information | IP address, browser type, operating system, pages viewed, referring website, cookies, and other browsing data. | To load the site accurately, perform analytics to improve our site, and screen for potential risk and fraud. |
| Communication Information | Contents of emails, WhatsApp messages, or social media inquiries you send us. | To provide customer support and respond to your queries. |
| Marketing Preferences | Your choice to subscribe/unsubscribe from our newsletters. | To send you marketing communications about our products, offers, and brand news, only with your explicit consent. |
3. How We Use Your Personal Information (Processing Limitation)
We only process your information for the purposes listed above or as otherwise communicated to you. In line with POPIA, our legal bases for processing include:
- Performing a contract with you (e.g., delivering your order).
- Your explicit, informed consent (e.g., for marketing emails).
- Our legitimate business interests (e.g., website security and fraud prevention), balanced with your privacy rights.
4. Sharing Your Personal Information
We do not sell your personal information. We may share it with trusted third-party service providers ("operators" under POPIA) who assist our business, such as:
- E-commerce Platform: We use Shopify to power our online store. [You can review Shopify's Privacy Policy for more details].
- Analytics Provider: We use Google Analytics to understand how our site is used. [You can review how Google uses data from sites that use its services].
- Payment Gateways: We share your payment information with our trusted payment processor, PayFast, to complete transactions. Our online store is hosted on the Shopify e-commerce platform
- Shipping and Logistics Partners: to deliver your order.
- Marketing Service Providers: to manage communications, only if you have consented.
We require all such providers to protect your information with appropriate security and confidentiality measures. We may also disclose information if required by South African law.
5. International Transfers
Our primary service provider, Shopify, may process data in other countries. We will ensure any cross-border transfer of your data complies with POPIA, typically through agreements that include standard data protection clauses.
6. Data Security (Security Safeguards)
We implement reasonable technical and organisational measures to secure your personal information against loss, damage, or unauthorised access. However, no online transmission is 100% secure, and we cannot guarantee absolute security.
7. Your Rights Under POPIA (Data Subject Participation)
You have the right to:
- Access: Request a copy of the personal information we hold about you.
- Correction/Deletion: Request us to correct, delete, or destroy inaccurate or outdated information.
- Objection: Object, on reasonable grounds, to the processing of your personal information, including for direct marketing.
You may exercise these rights free of charge by submitting a request to us via email, WhatsApp, SMS, or a form on our website. Following the April 2025 POPIA amendments, we are required to accept requests through these expedient channels. We will respond to your request promptly.
8. Direct Marketing and Your Consent
We will only send you direct marketing (like newsletters) via electronic communication (email, SMS) if you have given us your explicit, prior consent. Every marketing communication will include a clear and easy way for you to opt-out (unsubscribe) at any time. An "opt-out" mechanism does not constitute valid consent under the current regulations.
9. Retention of Information
We will not retain your personal information for longer than is necessary to fulfil the purposes for which it was collected, or as required by South African law. After this period, we will securely delete or de-identify the information.
10. Cookies and Tracking Technologies
Our website uses cookies (small data files stored on your device) for essential functions, analytics, and, if you consent, advertising. You can control cookie settings through your browser.
11. Policy Updates
We may update this policy to reflect changes in law or our practices. The updated version will be posted here with a new "Last Updated" date.
12. How to Contact Us
For any privacy-related questions, to exercise your rights, or to lodge a complaint, please contact our designated Information Officer:
Email: unshakenclothingza@gmail.com
Physical Address: 1 Valderama Road, Bloubergrant, Cape Town, 7441
If you are not satisfied with our response, you have the right to lodge a complaint with the South African Information Regulator.
