Privacy policy


PRIVACY POLICY

Heartscrip

Introduction

At Heartscrip, we are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, store, and protect your personal information when you visit our website and make purchases from us.

This policy complies with the Protection of Personal Information Act (POPIA) No. 4 of 2013 of South Africa.

Information We Collect

Personal Information You Provide When you place an order, create an account, or contact us, we may collect:

  • Full name
  • Email address
  • Phone number
  • Billing and shipping address
  • Payment information (processed securely — we do not store card details)
  • Order history and preferences

Information Collected Automatically When you visit our website, we may automatically collect:

  • IP address
  • Browser type and version
  • Device information
  • Pages visited and time spent
  • Referring website
  • Cookie data

How We Use Your Information

We use your personal information to:

  • Process and fulfill your orders
  • Send order confirmations and shipping updates
  • Respond to your queries and customer service requests
  • Improve our website and shopping experience
  • Send promotional emails and marketing communications (only with your consent)
  • Comply with legal obligations
  • Prevent fraud and ensure website security

Legal Basis for Processing

In accordance with POPIA, we process your personal information on the following grounds:

  • Contractual necessity — to fulfill your order
  • Legal obligation — to comply with South African law
  • Legitimate interest — to improve our services and prevent fraud
  • Consent — for marketing communications

Sharing Your Information

We do not sell, trade, or rent your personal information to third parties. We may share your information with trusted third parties only where necessary, including:

  • Shopify Inc. — our e-commerce platform provider
  • Payment processors — to securely process your payments (e.g. PayFast, PayGate, PayPal)
  • Courier and shipping partners — to deliver your orders
  • Email marketing platforms — to send communications (only with your consent)
  • Legal authorities — where required by South African law

All third parties are required to handle your information securely and in accordance with applicable privacy laws.

Cookies

Our website uses cookies to enhance your browsing experience. Cookies are small files stored on your device that help us:

  • Remember your preferences and cart items
  • Analyse website traffic and performance
  • Provide a personalised shopping experience

You can control cookies through your browser settings. Please note that disabling cookies may affect certain features of our website.

Types of cookies we use:

  • Essential cookies — necessary for the website to function
  • Analytics cookies — to understand how visitors use our site
  • Marketing cookies — to show relevant advertisements (only with consent)

Data Retention

We retain your personal information for as long as necessary to:

  • Fulfill the purposes outlined in this policy
  • Comply with legal and regulatory requirements
  • Resolve disputes and enforce our agreements

When your information is no longer needed, it will be securely deleted or anonymised.

Your Rights Under POPIA

As a data subject under the Protection of Personal Information Act, you have the right to:

  • Access — request a copy of the personal information we hold about you
  • Correction — request correction of inaccurate or incomplete information
  • Deletion — request deletion of your personal information
  • Objection — object to the processing of your personal information
  • Withdraw consent — withdraw marketing consent at any time
  • Lodge a complaint — with the Information Regulator of South Africa

Information Regulator Contact Details: 📧 inforeg@justice.gov.za 🌐 www.justice.gov.za/inforeg

Data Security

We take the security of your personal information seriously. We implement appropriate technical and organisational measures to protect your data against unauthorised access, loss, destruction, or alteration, including:

  • SSL encryption on our website
  • Secure payment processing
  • Restricted access to personal information
  • Regular security reviews

However, no method of transmission over the internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

Third Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of those sites and encourage you to read their privacy policies before providing any personal information.

Children's Privacy

Our website is not directed at children under the age of 18. We do not knowingly collect personal information from minors. If you believe a child has provided us with personal information, please contact us immediately and we will delete it.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any significant changes by:

  • Posting the updated policy on our website
  • Updating the "Last Updated" date below

We encourage you to review this policy periodically.

Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal information, please contact us:

📧 Email: info@heartscrip.co.za 📞 Phone: 071 846 8258

Last Updated: June 2026