PRIVACY POLICY

I am committed to protecting your privacy. This policy explains how I collect, use and protect personal information when you browse or shop through the RL ART online store on rabatholaka.com, in accordance with the Protection of Personal Information Act (POPIA).

Who I am

My website address is rabatholaka.com. I am an independent visual artist based in South Africa. For POPIA purposes, I am the responsible party for personal information processed through this store.

Information I collect and why

Orders: When you buy from me, I collect information such as your name, email address, phone number, billing and shipping addresses, and order details. I use this to process your order, communicate with you and arrange delivery.
Accounts: If you create an account, I store the account information and preferences you provide so you can manage your details and orders.
Browsing and device information: The store may collect technical information such as your IP address, browser or device details, products viewed and cart activity. This helps the store function properly, stay secure and understand how it is being used.
Communications: If you contact me about an order, product or support issue, I keep the information you provide so I can respond and resolve the matter.
Cookies: Cookies are used for functions such as keeping track of cart contents, login information, preferences, security and site performance.

Embedded content from other websites

Articles and pages on this site may include embedded content such as videos, images and articles. Embedded content from other websites behaves in the same way as if the visitor has visited the other website. Those websites may collect data about you, use cookies, embed additional third-party tracking and monitor your interaction with that embedded content.

Who I share your data with

I do not sell your personal information. I only share information where it is needed to run the store, complete your order, protect the site or meet a legal obligation:

Payment providers: Information needed to process and confirm your payment is handled through secure payment gateways. I do not store your full card details.
Courier and order-tracking providers: Your name, contact and delivery details may be shared with delivery and tracking services so your order can reach you and be tracked.
Website, analytics and marketing providers: Limited technical or usage information may be processed by services that help me operate, secure, measure and promote the store. Some of these providers may operate outside South Africa.
Legal and security requirements: I may disclose information where required by law or where reasonably necessary to prevent fraud, protect the store or protect customers.

How long I retain your data

Order records: I retain orders, invoices and related financial records for 5 years for South African tax and accounting requirements, or longer where the law requires it.
Account information: If you create an account, I retain the information linked to it while the account is active and for as long as reasonably necessary for administration, legal or security purposes.
Other store information: Technical, support and marketing information is kept only for as long as it is reasonably needed for the purpose it was collected for or as required by law.

What rights you have over your data

You may ask to access the personal information I hold about you, correct information that is inaccurate, or request deletion where the law allows it. You may also object to certain processing of your information. These rights are subject to legal, administrative and security requirements that may require me to keep some records.

Where I send your data

Some service providers used by the store may process personal information outside South Africa. Where this happens, I take reasonable steps to ensure the transfer is permitted under POPIA and that appropriate safeguards or another lawful basis for the transfer are in place.

Additional Information & Security

How I protect your data

My website uses SSL encryption for data transmission. I use strong password protocols and limit administrative access to your information.

Data breach procedures

If there is a security compromise involving personal information, I will notify the Information Regulator and affected people as soon as reasonably possible, subject to the requirements and lawful exceptions in POPIA.

Third-party data

I may receive payment confirmations, delivery or tracking updates, security signals and analytics information from service providers connected to the store.

Automated decision making and profiling

I do not make solely automated decisions about you that have legal or similarly significant effects. Analytics or advertising services may use browsing or activity data to measure performance or personalise marketing where those services are enabled.

Industry regulatory disclosure requirements

I comply with the Electronic Communications and Transactions Act (ECTA) and the Consumer Protection Act (CPA) of South Africa.

Privacy contact

For privacy-related questions or requests, contact me at info@rabatholaka.com or use the contact page. If you believe your personal information has been handled unlawfully, you may also lodge a complaint with the South African Information Regulator.